Automatic updates

In order to download updated AV definitions, at least 1 policy with a security profile that has Antivirus scanning must be enabled. To download updated IPS definitions, at least 1 policy with a security profile that has IPS scanning must be enabled.

The default auto-update schedule for FortiGuard packages is automatic. The update interval is calculated based on the model and percentage of valid subscriptions, within one hour.

For example, if a FortiGate 501E has 78% valid contracts, then based on this device model, the update schedule is calculated to be every 10 minutes. If you verify the system event logs (ID 0100041000), they are generated approximately every 10 minutes.

To configure automatic updates in the GUI:

1. Go to System > FortiGuard
2. In the FortiGuard Updates section, enable Scheduled Updates and select Automatic.

   

3. Click Apply.

To configure scheduled updates in the CLI:

config system autoupdate schedule
    set status enable
    set frequency automatic
end