fmupdate

Use this command to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota <string> <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [serial]

diagnose fmupdate del-device <serial>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fct | fgd | fgc | fgd-fgfq} <type> <version>

diagnose fmupdate del-serverlist {fct | fds | fgd | fgc}

diagnose fmupdate dump-um-db {um2.db | fds.db} [table]

diagnose fmupdate fds-dump {breg | fds-log | fect | fmgi | immx | oblt | srul}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver {wf | as | av-query}

diagnose fmupdate fgd-del-db {wf | as | av-query | file-query}

diagnose fmupdate fgd-dump {as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log {name | ip} <string>

diagnose fmupdate fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} {all | <serial>} {periods}

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} {10m | 30m | 1h | 6h | 12h | 24h | 7d}

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db <string>

diagnose fmupdate fortitoken {seriallist | add | del} {add | del | required}

diagnose fmupdate list-object {fds | fct | fgd | fgc | fgd-fgfq} [type] [version]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fds | fct | fgd | fgc}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj [serial_num]

diagnose fmupdate test {fgd-url-rating | fgd-test-client | ping-server | fmg-statistic-info} <string>

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate update-status {fds | fct | fgd | fgc}

diagnose fmupdate view-configure {fds | fct | fgd | fgc}

diagnose fmupdate view-linkd-log {fct | fds | fgd | fgc}

diagnose fmupdate view-serverlist {fds | fct | fgd | fgc}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variable	Description
check-disk-quota <string> <clean>	Check the related directory size. `<string>`: Directory for the object. Use `export-import`, `fds`, `fgd`, or `all` as the string. `<clean>`: Clean the directory if necessary. Only cleans the export/import directory.
crdb {generate \| view}	Generate or view certificate files from the database.
dbcontract [serial]	Dump the subscriber contract.
del-device <serial>	Delete a device. Optionally, enter a serial number for the device.
del-log	Delete all the logs for FDS and FortiGuard update events.
del-object {fds \| fct \| fgd \| fgc \| fgd-fgfq} <type> <version>	Remove all objects from the specified service. Optionally, enter the object type and version or time.
del-serverlist {fct \| fds \| fgd \| fgc}	Delete the server list file (fdni.dat) from the specified service.
dump-um-db {um2.db \| fds.db} [table]	Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.
fds-dump {breg \| fds-log \| fect \| fmgi \| immx \| oblt \| srul}	Dump FDS files: `breg`: Dump the FDS beta serial numbers. `fds-log`: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10. `fect`: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client. `fmgi`: Dump FMGI (Object description details) file. `immx`: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud. `oblt`: Dump the object list file. You can dump the object list files for FortiGate or FortiClient service. `srul`: Dump the FDS select filtering rules.
fds-getobject <filter type> <filter> <other options>	Get the versions of all FortiGate objects for antivirus-IPS. `<filter type>`: Enter product or objid as the filter type. `<filter>`: Choose from the seven available filters. These filters are available only when you select product as your filter type. `<other options>`: Show the response in raw JSON format or show used-only objects.
fds-update-info	Display scheduled update information.
fgd-bandwidth {1h \| 6h \| 12h \| 24h \| 7d \| 30d}	Display the download bandwidth.
fgd-dbver {wf \| as \| av-query}	Get the version of the database. Optionally, enter the database type.
fgd-del-db {wf \| as \| av-query \| file-query}	Delete FortiGuard database. Optionally, enter the database type.
fgd-dump {as1 \| as2 \| as4 \| av \| av2 \| cat1 \| fq \| geoip \| iotm \| iotr \| iots \| wf}	Dump the FortiGuard information. Optionally, select a database category type: `as1`: Antispam (IP). `as2`: Antispam (URI). `as4`: Antispam (HASH). `av`: AntiVirus Query. `av2`: Outbreak Prevention. `cat1`: Query Category. `fq`: File Query. `geoip`: GeoIP. `iotm`: IoT (mapping). `iotr`: IoT (range). `iots`: IoT (single). `wf`: Webfilter.
fgd-wfas-clear-log	Clear the FortiGuard service log file.
fgd-wfas-log {name \| ip} <string>	View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.
fgd-wfas-rate {wf \| av \| as_ip \| as_url \| as_hash}	Get the web filter / antispam rating speed. Optionally, enter the server type.
fgd-wfdevice-stat {10m \| 30m \| 1h \| 6h \| 12h \| 24h \| 7d} <serialnum>	Display web filter device statistics. Optionally, enter a specific device’s serial number.
fgd-wfserver-stat {top10sites \| top10devices} {10m \| 30m \| 1h \| 6h \| 12h \| 24h \| 7d}	Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.
fgt-del-statistics	Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.
fgt-del-um-db <string>	Remove `UM`, `UM2`, `fds`, and `um_stat` databases. This command requires a reboot. Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.
fortitoken {seriallist \| add \| del} {add \| del \| required}	FortiToken related operations.
list-object {fds \| fct \| fgd \| fgc \| fgd-fgfq} [type] [version]	List downloaded objects of linkd service. Optionally, enter the object type and version or time.
priority-download {clear \| list \| view}	Command for priority download: `clear`: view config. `list`: list object id of list. `view`: clear config.
service-restart {fds \| fct \| fgd \| fgc}	Restart the linkd service.
show-bandwidth {fct \| fgt \| fml \| faz} {1h \| 6h \| 12h \| 24h \| 7d \| 30d}	Display the download bandwidth for a device type over a specified time period.
show-dev-obj [serial_num]	Display an objects version of a device. Optionally, enter a serial number.
test {fgd-url-rating \| fgd-test-client \| ping-server \| fmg-statistic-info} <string>	Test tools: `fgd-url-rating`: Rate URLs within the FortiManager database using the hostname or IP of the FortiGuard server.. `fgd-test-client`: Execute FortiGuard test client using the hostname or IP of the FortiGuard server. `ping-server`: Check connection of FortiGuard servers. `fmg-statistic-info`: Display statistic information for FortiManager and Java Client.
updatenow {fds \| fgd} {fgd \| fgfq \| geoip} {SelectivePoll \| Poll \| Consolidation \| Command}	Update immediately. Select a service, service type, and task type. Note: Selecting a service and task type is only available when the service is `fgd`.
update-status {fds \| fct \| fgd \| fgc}	Display the update status.
view-configure {fds \| fct \| fgd \| fgc}	Dump the running configuration.
view-linkd-log {fct \| fds \| fgd \| fgc}	View the linkd log file.
view-serverlist {fds \| fct \| fgd \| fgc}	Dump the server list.
view-service-info {fds \| fgd}	Display the service information.
vm-license	Dump the FortiGate VM license.

fmupdate

Use this command to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota <string> <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [serial]

diagnose fmupdate del-device <serial>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fct | fgd | fgc | fgd-fgfq} <type> <version>

diagnose fmupdate del-serverlist {fct | fds | fgd | fgc}

diagnose fmupdate dump-um-db {um2.db | fds.db} [table]

diagnose fmupdate fds-dump {breg | fds-log | fect | fmgi | immx | oblt | srul}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver {wf | as | av-query}

diagnose fmupdate fgd-del-db {wf | as | av-query | file-query}

diagnose fmupdate fgd-dump {as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log {name | ip} <string>

diagnose fmupdate fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} {all | <serial>} {periods}

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} {10m | 30m | 1h | 6h | 12h | 24h | 7d}

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db <string>

diagnose fmupdate fortitoken {seriallist | add | del} {add | del | required}

diagnose fmupdate list-object {fds | fct | fgd | fgc | fgd-fgfq} [type] [version]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fds | fct | fgd | fgc}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj [serial_num]

diagnose fmupdate test {fgd-url-rating | fgd-test-client | ping-server | fmg-statistic-info} <string>

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate update-status {fds | fct | fgd | fgc}

diagnose fmupdate view-configure {fds | fct | fgd | fgc}

diagnose fmupdate view-linkd-log {fct | fds | fgd | fgc}

diagnose fmupdate view-serverlist {fds | fct | fgd | fgc}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variable	Description
check-disk-quota <string> <clean>	Check the related directory size. `<string>`: Directory for the object. Use `export-import`, `fds`, `fgd`, or `all` as the string. `<clean>`: Clean the directory if necessary. Only cleans the export/import directory.
crdb {generate \| view}	Generate or view certificate files from the database.
dbcontract [serial]	Dump the subscriber contract.
del-device <serial>	Delete a device. Optionally, enter a serial number for the device.
del-log	Delete all the logs for FDS and FortiGuard update events.
del-object {fds \| fct \| fgd \| fgc \| fgd-fgfq} <type> <version>	Remove all objects from the specified service. Optionally, enter the object type and version or time.
del-serverlist {fct \| fds \| fgd \| fgc}	Delete the server list file (fdni.dat) from the specified service.
dump-um-db {um2.db \| fds.db} [table]	Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.
fds-dump {breg \| fds-log \| fect \| fmgi \| immx \| oblt \| srul}	Dump FDS files: `breg`: Dump the FDS beta serial numbers. `fds-log`: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10. `fect`: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client. `fmgi`: Dump FMGI (Object description details) file. `immx`: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud. `oblt`: Dump the object list file. You can dump the object list files for FortiGate or FortiClient service. `srul`: Dump the FDS select filtering rules.
fds-getobject <filter type> <filter> <other options>	Get the versions of all FortiGate objects for antivirus-IPS. `<filter type>`: Enter product or objid as the filter type. `<filter>`: Choose from the seven available filters. These filters are available only when you select product as your filter type. `<other options>`: Show the response in raw JSON format or show used-only objects.
fds-update-info	Display scheduled update information.
fgd-bandwidth {1h \| 6h \| 12h \| 24h \| 7d \| 30d}	Display the download bandwidth.
fgd-dbver {wf \| as \| av-query}	Get the version of the database. Optionally, enter the database type.
fgd-del-db {wf \| as \| av-query \| file-query}	Delete FortiGuard database. Optionally, enter the database type.
fgd-dump {as1 \| as2 \| as4 \| av \| av2 \| cat1 \| fq \| geoip \| iotm \| iotr \| iots \| wf}	Dump the FortiGuard information. Optionally, select a database category type: `as1`: Antispam (IP). `as2`: Antispam (URI). `as4`: Antispam (HASH). `av`: AntiVirus Query. `av2`: Outbreak Prevention. `cat1`: Query Category. `fq`: File Query. `geoip`: GeoIP. `iotm`: IoT (mapping). `iotr`: IoT (range). `iots`: IoT (single). `wf`: Webfilter.
fgd-wfas-clear-log	Clear the FortiGuard service log file.
fgd-wfas-log {name \| ip} <string>	View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.
fgd-wfas-rate {wf \| av \| as_ip \| as_url \| as_hash}	Get the web filter / antispam rating speed. Optionally, enter the server type.
fgd-wfdevice-stat {10m \| 30m \| 1h \| 6h \| 12h \| 24h \| 7d} <serialnum>	Display web filter device statistics. Optionally, enter a specific device’s serial number.
fgd-wfserver-stat {top10sites \| top10devices} {10m \| 30m \| 1h \| 6h \| 12h \| 24h \| 7d}	Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.
fgt-del-statistics	Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.
fgt-del-um-db <string>	Remove `UM`, `UM2`, `fds`, and `um_stat` databases. This command requires a reboot. Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.
fortitoken {seriallist \| add \| del} {add \| del \| required}	FortiToken related operations.
list-object {fds \| fct \| fgd \| fgc \| fgd-fgfq} [type] [version]	List downloaded objects of linkd service. Optionally, enter the object type and version or time.
priority-download {clear \| list \| view}	Command for priority download: `clear`: view config. `list`: list object id of list. `view`: clear config.
service-restart {fds \| fct \| fgd \| fgc}	Restart the linkd service.
show-bandwidth {fct \| fgt \| fml \| faz} {1h \| 6h \| 12h \| 24h \| 7d \| 30d}	Display the download bandwidth for a device type over a specified time period.
show-dev-obj [serial_num]	Display an objects version of a device. Optionally, enter a serial number.
test {fgd-url-rating \| fgd-test-client \| ping-server \| fmg-statistic-info} <string>	Test tools: `fgd-url-rating`: Rate URLs within the FortiManager database using the hostname or IP of the FortiGuard server.. `fgd-test-client`: Execute FortiGuard test client using the hostname or IP of the FortiGuard server. `ping-server`: Check connection of FortiGuard servers. `fmg-statistic-info`: Display statistic information for FortiManager and Java Client.
updatenow {fds \| fgd} {fgd \| fgfq \| geoip} {SelectivePoll \| Poll \| Consolidation \| Command}	Update immediately. Select a service, service type, and task type. Note: Selecting a service and task type is only available when the service is `fgd`.
update-status {fds \| fct \| fgd \| fgc}	Display the update status.
view-configure {fds \| fct \| fgd \| fgc}	Dump the running configuration.
view-linkd-log {fct \| fds \| fgd \| fgc}	View the linkd log file.
view-serverlist {fds \| fct \| fgd \| fgc}	Dump the server list.
view-service-info {fds \| fgd}	Display the service information.
vm-license	Dump the FortiGate VM license.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

CLI Reference

fmupdate

fmupdate

Syntax

fmupdate

fmupdate

Syntax