Fortinet black logo

CLI Reference

fmupdate

fmupdate

Use these commands to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota <string> <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [serial]

diagnose fmupdate del-device <serial_num>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fct | fgd | fgc | fgd-fgfq} [object_type] [object_version]

diagnose fmupdate del-serverlist {fct | fds | fgd | fgc}

diagnose fmupdate dump-um-db {um2.db | fds.db} [table]

diagnose fmupdate fds-dump {breg |fds-log | fect | fmgi | immx |oblt | srul}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver {wf | as | av-query}

diagnose fmupdate fgd-del-db {wf | as | av-query | file-query}

diagnose fmupdate fgd-dump {as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}

diagnose fmupdate fgd-test-client <ip> <serial> <string> <integer>

diagnose fmupdate fgd-url-rating <ip> <serial> <version> <url>

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log {name | ip} <string>

diagnose fmupdate fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} {all | <serial>} {periods}

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} {10m | 30m | 1h | 6h | 12h | 24h | 7d}

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db <string>

diagnose fmupdate fmg-statistic-info

diagnose fmupdate fortitoken {seriallist | add | del} {add | del | required}

diagnose fmupdate list-object {fds | fct | fgd | fgc | fgd-fgfq} [type] [version]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fct | fds | fgd | fgc}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj <string>

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate update-status {fds | fct | fgd | fgc}

diagnose fmupdate view-configure {fds | fct | fgd | fgc}

diagnose fmupdate view-linkd-log {fds | fct | fgd | fgc}

diagnose fmupdate view-serverlist {fds | fct | fgd | fgc}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variables

Description

check-disk-quota <string> <clean>

Check the related directory size.

  • <string>: Directory for the object. Use export-import, fds, fgd, or all as the string.
  • <clean>: Clean the directory if necessary. Only cleans the export/import directory.

crdb {generate | view}

Generate or view certificate files from the database.

dbcontract [serial]

Dump the subscriber contract.

del-device <serial_num>

Delete a device. Optionally, enter a serial number for the device.

del-log

Delete all the logs for FDS and FortiGuard update events.

del-object {fds | fct | fgd | fgc | fgd-fgfq} [object_type] [object_version]

Remove all objects from the specified service. Optionally, enter the object type and version or time.

del-serverlist {fct | fds | fgd | fgc}

Delete the server list file (fdni.dat) from the specified service.

dump-um-db {um2.db | fds.db} [table]

Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.

fds-dump {breg |fds-log | fect | fmgi | immx |oblt | srul}

Dump FDS files:

  • breg: Dump the FDS beta serial numbers.
  • fds-log: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10.
  • fect: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client.
  • fmgi: Dump FMGI (Object description details) file.
  • immx: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud.
  • oblt: Dump the object list file. You can dump the object list files for FortiGate or FortiClient service.
  • srul: Dump the FDS select filtering rules.

fds-getobject <filter type> <filter> <other options>

Get the versions of all FortiGate objects for antivirus-IPS.

  • <filter type>: Enter product or objid as the filter type.
  • <filter>: Choose from the seven available filters. These filters are available only when you select product as your filter type.
  • <other options>: Show the response in raw JSON format or show used-only objects.

fds-update-info

Display scheduled update information.

fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth.

fgd-dbver {wf | as | av-query}

Get the version of the database. Optionally, enter the database type.

fgd-del-db {wf | as | av-query | file-query}

Delete FortiGuard database. Optionally, enter the database type.

fgd-dump {as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}

Dump the FortiGuard information. Optionally, select a database category type:

as1: Antispam (IP).

as2: Antispam (URI).

as4: Antispam (HASH).

av: AntiVirus Query.

av2: Outbreak Prevention.

cat1: Query Category.

fq: File Query.

geoip: GeoIP.

iotm: IoT (mapping).

iotr: IoT (range).

iots: IoT (single).

wf: Webfilter.

fgd-test-client <ip> <serial> <string> <integer>

Execute FortiGuard test client. Optionally, enter the hostname or IPv4 address of the FGD server, the serial number of the device, and the query number per second or URL.

fgd-url-rating <ip> <serial> <version> <url>

Rate URLs within the FortiManager database using the FortiGate serial number. Optionally, enter the category version and URL.

fgd-wfas-clear-log

Clear the FortiGuard service log file.

fgd-wfas-log {name | ip} <string>

View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.

fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

Get the web filter / antispam rating speed. Optionally, enter the server type.

fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serialnum>

Display web filter device statistics. Optionally, enter a specific device’s serial number.

fgd-wfserver-stat {top10sites | top10devices} {10m | 30m | 1h | 6h | 12h | 24h | 7d}

Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.

fgt-del-statistics

Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.

fgt-del-um-db <string>

Remove UM, UM2, fds, and um_stat databases. This command requires a reboot.

Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.

fmg-statistic-info

Display statistic information for FortiManager and Java Client.

fortitoken {seriallist | add | del} {add | del | required}

FortiToken related operations.

list-object {fds | fct | fgd | fgc | fgd-fgfq} [type] [version]

List downloaded objects of linkd service. Optional enter the object type and version or time.

priority-download {clear | list | view}

Command for priority download:

  • clear: view config.

  • list: list object id of list.

  • view: clear config.

service-restart {fct | fds | fgd | fgc}

Restart the linkd service.

show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth for a device type over a specified time period.

show-dev-obj [serial_num]

Display an objects version of a device. Optionally, enter a serial number.

updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

Update immediately. Select a service, service type, and task type.

Note: Selecting a service and task type is only available when the service is fgd.

update-status {fds | fct | fgd | fgc}

Display the update status.

view-configure {fds | fct | fgd | fgc}

Dump the running configuration.

view-linkd-log {fds | fct | fgd | fgc}

View the linkd log file.

view-serverlist {fds | fct | fgd | fgc}

Dump the server list.

view-service-info {fds | fgd}

Display the service information.

vm-license

Dump the FortiGate VM license.

fmupdate

Use these commands to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota <string> <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [serial]

diagnose fmupdate del-device <serial_num>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fct | fgd | fgc | fgd-fgfq} [object_type] [object_version]

diagnose fmupdate del-serverlist {fct | fds | fgd | fgc}

diagnose fmupdate dump-um-db {um2.db | fds.db} [table]

diagnose fmupdate fds-dump {breg |fds-log | fect | fmgi | immx |oblt | srul}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver {wf | as | av-query}

diagnose fmupdate fgd-del-db {wf | as | av-query | file-query}

diagnose fmupdate fgd-dump {as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}

diagnose fmupdate fgd-test-client <ip> <serial> <string> <integer>

diagnose fmupdate fgd-url-rating <ip> <serial> <version> <url>

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log {name | ip} <string>

diagnose fmupdate fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} {all | <serial>} {periods}

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} {10m | 30m | 1h | 6h | 12h | 24h | 7d}

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db <string>

diagnose fmupdate fmg-statistic-info

diagnose fmupdate fortitoken {seriallist | add | del} {add | del | required}

diagnose fmupdate list-object {fds | fct | fgd | fgc | fgd-fgfq} [type] [version]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fct | fds | fgd | fgc}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj <string>

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate update-status {fds | fct | fgd | fgc}

diagnose fmupdate view-configure {fds | fct | fgd | fgc}

diagnose fmupdate view-linkd-log {fds | fct | fgd | fgc}

diagnose fmupdate view-serverlist {fds | fct | fgd | fgc}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variables

Description

check-disk-quota <string> <clean>

Check the related directory size.

  • <string>: Directory for the object. Use export-import, fds, fgd, or all as the string.
  • <clean>: Clean the directory if necessary. Only cleans the export/import directory.

crdb {generate | view}

Generate or view certificate files from the database.

dbcontract [serial]

Dump the subscriber contract.

del-device <serial_num>

Delete a device. Optionally, enter a serial number for the device.

del-log

Delete all the logs for FDS and FortiGuard update events.

del-object {fds | fct | fgd | fgc | fgd-fgfq} [object_type] [object_version]

Remove all objects from the specified service. Optionally, enter the object type and version or time.

del-serverlist {fct | fds | fgd | fgc}

Delete the server list file (fdni.dat) from the specified service.

dump-um-db {um2.db | fds.db} [table]

Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.

fds-dump {breg |fds-log | fect | fmgi | immx |oblt | srul}

Dump FDS files:

  • breg: Dump the FDS beta serial numbers.
  • fds-log: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10.
  • fect: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client.
  • fmgi: Dump FMGI (Object description details) file.
  • immx: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud.
  • oblt: Dump the object list file. You can dump the object list files for FortiGate or FortiClient service.
  • srul: Dump the FDS select filtering rules.

fds-getobject <filter type> <filter> <other options>

Get the versions of all FortiGate objects for antivirus-IPS.

  • <filter type>: Enter product or objid as the filter type.
  • <filter>: Choose from the seven available filters. These filters are available only when you select product as your filter type.
  • <other options>: Show the response in raw JSON format or show used-only objects.

fds-update-info

Display scheduled update information.

fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth.

fgd-dbver {wf | as | av-query}

Get the version of the database. Optionally, enter the database type.

fgd-del-db {wf | as | av-query | file-query}

Delete FortiGuard database. Optionally, enter the database type.

fgd-dump {as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}

Dump the FortiGuard information. Optionally, select a database category type:

as1: Antispam (IP).

as2: Antispam (URI).

as4: Antispam (HASH).

av: AntiVirus Query.

av2: Outbreak Prevention.

cat1: Query Category.

fq: File Query.

geoip: GeoIP.

iotm: IoT (mapping).

iotr: IoT (range).

iots: IoT (single).

wf: Webfilter.

fgd-test-client <ip> <serial> <string> <integer>

Execute FortiGuard test client. Optionally, enter the hostname or IPv4 address of the FGD server, the serial number of the device, and the query number per second or URL.

fgd-url-rating <ip> <serial> <version> <url>

Rate URLs within the FortiManager database using the FortiGate serial number. Optionally, enter the category version and URL.

fgd-wfas-clear-log

Clear the FortiGuard service log file.

fgd-wfas-log {name | ip} <string>

View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.

fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

Get the web filter / antispam rating speed. Optionally, enter the server type.

fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serialnum>

Display web filter device statistics. Optionally, enter a specific device’s serial number.

fgd-wfserver-stat {top10sites | top10devices} {10m | 30m | 1h | 6h | 12h | 24h | 7d}

Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.

fgt-del-statistics

Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.

fgt-del-um-db <string>

Remove UM, UM2, fds, and um_stat databases. This command requires a reboot.

Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.

fmg-statistic-info

Display statistic information for FortiManager and Java Client.

fortitoken {seriallist | add | del} {add | del | required}

FortiToken related operations.

list-object {fds | fct | fgd | fgc | fgd-fgfq} [type] [version]

List downloaded objects of linkd service. Optional enter the object type and version or time.

priority-download {clear | list | view}

Command for priority download:

  • clear: view config.

  • list: list object id of list.

  • view: clear config.

service-restart {fct | fds | fgd | fgc}

Restart the linkd service.

show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth for a device type over a specified time period.

show-dev-obj [serial_num]

Display an objects version of a device. Optionally, enter a serial number.

updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

Update immediately. Select a service, service type, and task type.

Note: Selecting a service and task type is only available when the service is fgd.

update-status {fds | fct | fgd | fgc}

Display the update status.

view-configure {fds | fct | fgd | fgc}

Dump the running configuration.

view-linkd-log {fds | fct | fgd | fgc}

View the linkd log file.

view-serverlist {fds | fct | fgd | fgc}

Dump the server list.

view-service-info {fds | fgd}

Display the service information.

vm-license

Dump the FortiGate VM license.