Fortinet black logo

Cookbook

Override FortiGuard servers

Override FortiGuard servers

By default, FortiOS will update signature packages and query rating servers using public FortiGuard servers. This list can be overridden by adding servers to the override server list. Communication with public FortiGuard servers can also be disabled.

To add an override FortiGuard server in the GUI:
  1. Go to System > FortiGuard
  2. Scroll down to the Override FortiGuard Servers section.
  3. In the table, click Create New. The Create New Override FortiGuard Server pane opens.
  4. Select the server address type: IPv4, IPv6, or FQDN.
  5. Enter the server address of the selected type in the Address field.
  6. Select the type of server: AntiVirus & IPS Updates, Filtering, or Both.
  7. Click Apply.
To add an override FortiGuard server in the CLI:
config system central-management
    set type fortiguard
    config server-list
        edit <integer>
            set server-type {update rating}
            set server-address <ip_address>
        next
    end
end

Override FortiGuard servers

Override FortiGuard servers

By default, FortiOS will update signature packages and query rating servers using public FortiGuard servers. This list can be overridden by adding servers to the override server list. Communication with public FortiGuard servers can also be disabled.

To add an override FortiGuard server in the GUI:
  1. Go to System > FortiGuard
  2. Scroll down to the Override FortiGuard Servers section.
  3. In the table, click Create New. The Create New Override FortiGuard Server pane opens.
  4. Select the server address type: IPv4, IPv6, or FQDN.
  5. Enter the server address of the selected type in the Address field.
  6. Select the type of server: AntiVirus & IPS Updates, Filtering, or Both.
  7. Click Apply.
To add an override FortiGuard server in the CLI:
config system central-management
    set type fortiguard
    config server-list
        edit <integer>
            set server-type {update rating}
            set server-address <ip_address>
        next
    end
end