Updates from Multiple FortiManager Units
In FortiOS 5.2, you can configure your FortiGate unit to check with up to three FortiManagers for FortiGuard signature updates, and use another set of up to three FortiManagers for FortiGuard web filtering URL lookups.
Syntax
Use the following command to configure your FortiGate unit with the addresses of three FortiManagers that the FortiGate will use to get FortiGuard signature updates:
config system central-management
set fortimanager-fds-sigupdate-override enable
set sig-update-server-1 10.10.10.10
set sig-update-server-2 20.20.20.20
set sig-update-server-3 30.30.30.30
end
When the FortiGate unit checks for signature updates it attempts to connect to update server 1. If the connection fails it tries update server 2 then 3. It connects to the first one that's available to get updates.
Use the following command to configure your FortiGate unit with the addresses of three FortiManagers that the FortiGate will use for FortiGuard Web Filtering URL lookups:
config system central-management
set fortimanager-fds-urllookup-override enable
set url-lookup-server-1 11.11.11.11
set url-lookup-server-2 12.12.12.12
set url-lookup-server-3 13.13.13.13
end
When the FortiGate unit needs to do a web filtering lookup it attempts to connect to lookup server 1. If the connection fails it tries lookup server 2 then 3. It connects to the first one that's available to do the lookup.