FortiGuard server settings

Your local FortiGate connects to remote FortiGuard servers to get updates to FortiGuard information, such as new viruses that may have been found or other new threats.

This section provides methods to display FortiGuard server information on your FortiGate, and how to use that information and update it to fix potential problems.

Displaying the server list

To get a list of FDS servers FortiGate uses to send web filtering requests:

get webfilter status

or

diagnose debug rating

Rating requests are only sent to the server at the top of the list in normal operation. Each server is probed for Round Trip Time (RTT) every two minutes. Rating may not be enabled on your FortiGate.

Optionally, you can add a refresh rate to the end of the command to determine how often the server list is refreshed.

Sample output:
Locale       : english
License      : Contract
Expiration   : Thu Oct  9 02:00:00 2011
-=- Server List (Mon Feb 18 12:55:48 2008) -=-
IP            Weight    RTT    Flags    TZ     Packets CurrLost TotalLost
a.b.c.d	0	1	DI	2	1926879	0	11176
10.1.101.1	10	329	 	1	10263	0	633
10.2.102.2	20	169	 	0	16105	0	80
10.3.103.3	20	182	 	0	6741	0	776
10.4.104.4	20	184	 	0	5249	0	987
10.5.105.5	25	181	 	0	12072	0	178
Output details

The server list includes the IP addresses of alternate servers if the first entry cannot be reached. In this example, the IP addresses are not public addresses.

The following flags in get webfilter status indicate the server status:

Flag

Description

D

The server was found through the DNS lookup of the hostname.

If the hostname returns more than one IP address, all of them are flagged with D and are used first for INIT requests before falling back to the other servers.

I