Fortinet black logo

CLI Reference

fmupdate

fmupdate

Use this command to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota {export-import | fds | fgd | all} <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [<serial>]

diagnose fmupdate del-device <serial>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

diagnose fmupdate del-serverlist {fct | fds | fgd}

diagnose fmupdate dump-um-db {um2.db | fds.db} [<table>]

diagnose fmupdate fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | immx | oblt | srul | subs}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-test-client <ip> <serial> <string> <integer>

diagnose fmupdate fgd-url-rating <ip> <serial> <version> <url>

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

diagnose fmupdate fgd-wfas-rate [{as_hash | as_ip | as_url | av | av2 | fq | wf}]

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serial> <integer>

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d}]

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db}]

diagnose fmupdate fmg-statistic-info

diagnose fmupdate fortitoken {seriallist | add | del} <serial>

diagnose fmupdate list-object {fds | fgd | fgfq | geoip} [<object_type>] [<object_version>]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fds | fgd | fmtr | fwm}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj [<serial>]

diagnose fmupdate update-status {fds | fct | fgd}

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate view-configure {fds | fct | fgd | fmtr}

diagnose fmupdate view-linkd-log {fct | fds | fgd}

diagnose fmupdate view-serverlist {fds | fgd}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variable

Description

check-disk-quota {export-import | fds | fgd | all} <clean>

Check the related directory size. Clean the export/import directory, if necessary.

  • <string>: Directory for the object. Use export-import, fds, fgd, or all as the string.
  • <clean>: Clean the directory if necessary. Only cleans the export/import directory.

crdb {generate | view}

Generate or view certificate files from the database.

dbcontract [<serial>]

Dump the subscriber contract.

del-device <serial>

Delete a device.

del-log

Delete all the logs for FDS and FortiGuard update events.

del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

Remove all objects from the specified service. Optionally, enter the object type and version or time.

del-serverlist {fct | fds | fgd}

Delete the server list file (fdni.dat) from the specified service.

dump-um-db {um2.db | fds.db} [<table>]

Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.

fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | immx | oblt | srul | subs}

Dump FDS files:

  • breg: Dump the FDS beta serial numbers.
  • fds-log: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10.
  • fect: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client.
  • fmgi: Dump FMGI (Object description details) file.
  • imlt: Dump FGT image list file.
  • imlt-d: Dump FGT image file for downstream device.
  • immx: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud.
  • oblt: Dump the object list file. You can dump the object list files for FortiGate or FortiClient service.
  • srul: Dump the FDS select filtering rules.
  • subs: Dump Contract file.

fds-getobject <filter type> <filter> <other options>

Get the versions of all FortiGate objects for antivirus-IPS.

  • <filter type>: Enter product or objid as the filter type.
  • <filter>: Enter an available filters. These filters are available only when you select product as your filter type. Enter all for all product filters.
  • <other options>: Enter used to show used-only objects or raw to show response in raw JSON format.

fds-update-info

Display scheduled update information.

fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth.

fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Get the version of the database. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Delete FortiGuard database. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Dump the FortiGuard information. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-test-client <ip> <serial> <string> <integer>

Execute FortiGuard test client.

  • <ip>: Enter the hostname or IP of the FortiGuard server.

  • <serial>: Enter the serial number of the device.

  • <string>: Enter the query number per second for stress test, or enter URL for a single query.

  • <integer>: Optionally, enter the category version (default = 7).

fgd-url-rating <ip> <serial> <version> <url>

Rate URLs within the FortiManager database using the FortiGate serial number. Optionally, enter the category version and URL.

fgd-wfas-clear-log

Clear the FortiGuard service log file.

fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.

fgd-wfas-rate [{as_hash | as_ip | as_url | av | av2 | fq | wf}]

Get the web filter / antispam rating speed. Optionally, enter the server type:

  • as_hash: Antispam (HASH).

  • as_ip: Antispam (IP).
  • as_url: Antispam (URL).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • fq: File Query.

  • wf: Webfilter.

fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serial> <integer>

Display web filter device statistics. Optionally, enter a specific device’s serial number.

fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d} ]

Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.

fgt-del-statistics

Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.

fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db}]

Remove UM, UM2, fds, and um_stat databases. This command requires a reboot.

Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.

fmg-statistic-info

Display statistic information for FortiManager and Java Client.

fortitoken {seriallist | add | del} <serial>

FortiToken related operations.

list-object {fds | fgd | fgfq | geoip} [<object_type>] [<object_version>]

List downloaded objects of linkd service. Optionally, enter the object type and version or time.

priority-download {clear | list | view}

Command for priority download:

  • clear: view config.

  • list: list object id of list.

  • view: clear config.

service-restart {fds | fgd | fmtr | fwm}

Restart the linkd service.

show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth for a device type over a specified time period.

show-dev-obj [<serial>]

Display an objects version of a device. Optionally, enter a serial number.

update-status {fds | fct | fgd}

Display the update status.

updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

Update immediately. Select a service, service type, and task type.

Note: Selecting a service and task type is only available when the service is fgd.

view-configure {fds | fct | fgd | fmtr}

Dump the running configuration.

view-linkd-log {fct | fds | fgd}

View the linkd log file.

view-serverlist {fds | fgd}

Dump the server list.

view-service-info {fds | fgd}

Display the service information.

vm-license

Dump the FortiGate VM license.

fmupdate

Use this command to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota {export-import | fds | fgd | all} <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [<serial>]

diagnose fmupdate del-device <serial>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

diagnose fmupdate del-serverlist {fct | fds | fgd}

diagnose fmupdate dump-um-db {um2.db | fds.db} [<table>]

diagnose fmupdate fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | immx | oblt | srul | subs}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-test-client <ip> <serial> <string> <integer>

diagnose fmupdate fgd-url-rating <ip> <serial> <version> <url>

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

diagnose fmupdate fgd-wfas-rate [{as_hash | as_ip | as_url | av | av2 | fq | wf}]

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serial> <integer>

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d}]

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db}]

diagnose fmupdate fmg-statistic-info

diagnose fmupdate fortitoken {seriallist | add | del} <serial>

diagnose fmupdate list-object {fds | fgd | fgfq | geoip} [<object_type>] [<object_version>]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fds | fgd | fmtr | fwm}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj [<serial>]

diagnose fmupdate update-status {fds | fct | fgd}

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate view-configure {fds | fct | fgd | fmtr}

diagnose fmupdate view-linkd-log {fct | fds | fgd}

diagnose fmupdate view-serverlist {fds | fgd}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variable

Description

check-disk-quota {export-import | fds | fgd | all} <clean>

Check the related directory size. Clean the export/import directory, if necessary.

  • <string>: Directory for the object. Use export-import, fds, fgd, or all as the string.
  • <clean>: Clean the directory if necessary. Only cleans the export/import directory.

crdb {generate | view}

Generate or view certificate files from the database.

dbcontract [<serial>]

Dump the subscriber contract.

del-device <serial>

Delete a device.

del-log

Delete all the logs for FDS and FortiGuard update events.

del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

Remove all objects from the specified service. Optionally, enter the object type and version or time.

del-serverlist {fct | fds | fgd}

Delete the server list file (fdni.dat) from the specified service.

dump-um-db {um2.db | fds.db} [<table>]

Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.

fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | immx | oblt | srul | subs}

Dump FDS files:

  • breg: Dump the FDS beta serial numbers.
  • fds-log: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10.
  • fect: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client.
  • fmgi: Dump FMGI (Object description details) file.
  • imlt: Dump FGT image list file.
  • imlt-d: Dump FGT image file for downstream device.
  • immx: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud.
  • oblt: Dump the object list file. You can dump the object list files for FortiGate or FortiClient service.
  • srul: Dump the FDS select filtering rules.
  • subs: Dump Contract file.

fds-getobject <filter type> <filter> <other options>

Get the versions of all FortiGate objects for antivirus-IPS.

  • <filter type>: Enter product or objid as the filter type.
  • <filter>: Enter an available filters. These filters are available only when you select product as your filter type. Enter all for all product filters.
  • <other options>: Enter used to show used-only objects or raw to show response in raw JSON format.

fds-update-info

Display scheduled update information.

fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth.

fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Get the version of the database. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Delete FortiGuard database. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Dump the FortiGuard information. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-test-client <ip> <serial> <string> <integer>

Execute FortiGuard test client.

  • <ip>: Enter the hostname or IP of the FortiGuard server.

  • <serial>: Enter the serial number of the device.

  • <string>: Enter the query number per second for stress test, or enter URL for a single query.

  • <integer>: Optionally, enter the category version (default = 7).

fgd-url-rating <ip> <serial> <version> <url>

Rate URLs within the FortiManager database using the FortiGate serial number. Optionally, enter the category version and URL.

fgd-wfas-clear-log

Clear the FortiGuard service log file.

fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.

fgd-wfas-rate [{as_hash | as_ip | as_url | av | av2 | fq | wf}]

Get the web filter / antispam rating speed. Optionally, enter the server type:

  • as_hash: Antispam (HASH).

  • as_ip: Antispam (IP).
  • as_url: Antispam (URL).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • fq: File Query.

  • wf: Webfilter.

fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serial> <integer>

Display web filter device statistics. Optionally, enter a specific device’s serial number.

fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d} ]

Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.

fgt-del-statistics

Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.

fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db}]

Remove UM, UM2, fds, and um_stat databases. This command requires a reboot.

Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.

fmg-statistic-info

Display statistic information for FortiManager and Java Client.

fortitoken {seriallist | add | del} <serial>

FortiToken related operations.

list-object {fds | fgd | fgfq | geoip} [<object_type>] [<object_version>]

List downloaded objects of linkd service. Optionally, enter the object type and version or time.

priority-download {clear | list | view}

Command for priority download:

  • clear: view config.

  • list: list object id of list.

  • view: clear config.

service-restart {fds | fgd | fmtr | fwm}

Restart the linkd service.

show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth for a device type over a specified time period.

show-dev-obj [<serial>]

Display an objects version of a device. Optionally, enter a serial number.

update-status {fds | fct | fgd}

Display the update status.

updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

Update immediately. Select a service, service type, and task type.

Note: Selecting a service and task type is only available when the service is fgd.

view-configure {fds | fct | fgd | fmtr}

Dump the running configuration.

view-linkd-log {fct | fds | fgd}

View the linkd log file.

view-serverlist {fds | fgd}

Dump the server list.

view-service-info {fds | fgd}

Display the service information.

vm-license

Dump the FortiGate VM license.