Fortinet white logo
Fortinet white logo

CLI Reference

fmupdate

fmupdate

Use this command to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota {export-import | fds | fgd | all} <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [<serial>]

diagnose fmupdate del-device <serial>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

diagnose fmupdate del-serverlist {fct | fds | fgd}

diagnose fmupdate dump-um-db {um2.db | fds.db} [<table>]

diagnose fmupdate fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | imlt-d20 | immx | oblt | srul | subs}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

diagnose fmupdate fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} {all | <serial> [<integer>]

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d}]

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db | som.dat}]

diagnose fmupdate fortitoken {seriallist | add | del} <serial>

diagnose fmupdate list-object {fds | fgd | fqfq | geo-ip} [<object_type>] [<object_version>]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fds | fgd | fmtr | fwm}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj [<serial>]

diagnose fmupdate test {fgd-url-rating | fgd-test-client | ping-server | fmg-statistic-info} <string>

diagnose fmupdate update-status {fds | fct | fgd}

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate view-configure {fds | fct | fgd | fmtr}

diagnose fmupdate view-linkd-log {fct | fds | fgd}

diagnose fmupdate view-serverlist {fds | fgd}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variables

Description

check-disk-quota {export-import | fds | fgd | all} <clean>

Check the related directory size. Clean the export/import directory, if necessary.

crdb {generate | view}

Generate or view certificate files from the database.

dbcontract [<serial>]

Dump the subscriber contract. Optionally, enter the serial number of the device.

del-device <serial>

Delete a device. Optionally, enter a serial number for the device.

del-log

Delete all the logs for FDS and FortiGuard update events.

del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

Remove all objects from the specified service. Optionally, enter the object type and version or time.

del-serverlist {fct | fds | fgd}

Delete the server list file (fdni.dat) from the specified service.

dump-um-db {um2.db | fds.db} [<table>]

Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.

fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | imlt-d20 | immx | oblt | srul | subs}

Dump FDS files:

  • breg: Dump the FDS beta serial numbers.
  • fds-log: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10.
  • fect: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client.
  • fmgi: Dump FMGI (Object description details) file.
  • imlt: Dump FGT image list file.
  • imlt-d: Dump FGT image file for downstream device.
  • imlt-d20: Dump FGT image list file for downsteam, v2.0.

  • immx: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud.
  • oblt: Dump the object list file. You can dump the object list files for FGT, FCT, FGD, FQFQ, or geoip services. You can also dump the downstream object file for one of these services.
  • srul: Dump the FDS select filtering rules.
  • subs: Dump Contract file.

fds-getobject <filter type> <filter> <other options>

Get the versions of all FortiGate objects for antivirus-IPS.

  • <filter type>: Enter product or objid as the filter type.
  • <filter>: Enter an available filter. These filters are available only when you select product as your filter type. Enter all for all product filters.
  • <other options>: Enter used to show used-only objects or raw to show response in raw JSON format.

fds-update-info

Display scheduled update information.

fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth.

fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Get the version of the database. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Delete FortiGuard database. Optionally, enter the database type:

  • as1: Antispam (IP).
  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Dump the FortiGuard information. Optionally, select a database category type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-wfas-clear-log

Clear the FortiGuard service log file.

fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.

fgd-wfas-rate [{as_hash | as_ip | as_url | av | av2 | fq | wf}]

Get the web filter / antispam rating speed. Optionally, enter the server type:

  • as_hash: Antispam (HASH).

  • as_ip: Antispam (IP).
  • as_url: Antispam (URL).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • fq: File Query.

  • wf: Webfilter.

fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serial> [<integer>]

Display web filter device statistics. Enter all or a specific device’s serial number. Optionally, enter the number of time periods to display (default = 1).

fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d}]

Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.

fgt-del-statistics

Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.

fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db | som.dat}]

Remove UM, UM2, fds, and um_stat databases. This command requires a reboot.

Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.

fortitoken {seriallist | add | del} <serial>

FortiToken related operations.

list-object {fds | fgd | fqfq | geo-ip} [<object_type>] [<object_version>]

List downloaded objects of linkd service. Optionally, enter the object type and version or time.

priority-download {clear | list | view}

Command for priority download:

  • clear: view config.

  • list: list object id of list.

  • view: clear config.

service-restart {fds | fgd | fmtr | fwm}

Restart the linkd service.

show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth for a device type over a specified time period.

show-dev-obj [<serial>]

Display an objects version of a device. Optionally, enter a serial number.

test {fgd-url-rating | fgd-test-client | ping-server | fmg-statistic-info} <string>

Test tools:

  • fgd-url-rating: Rate URLs within the FortiManager database using the hostname or IP of the FortiGuard server..
  • fgd-test-client: Execute FortiGuard test client using the hostname or IP of the FortiGuard server.
  • ping-server: Check connection of FortiGuard servers.
  • fmg-statistic-info: Display statistic information for FortiManager and Java Client.

update-status {fds | fct | fgd}

Display the update status for a service.

updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

Update immediately. Select a service, service type, and task type.

Note: Selecting a service and task type is only available when the service is fgd.

view-configure {fds | fct | fgd | fmtr}

Dump the running configuration.

view-linkd-log {fct | fds | fgd}

View the linkd log file.

view-serverlist {fds | fgd}

Dump the server list.

view-service-info {fds | fgd}

Display the service information.

vm-license

Dump the FortiGate VM license.

fmupdate

fmupdate

Use this command to diagnose update services.

Syntax

diagnose fmupdate check-disk-quota {export-import | fds | fgd | all} <clean>

diagnose fmupdate crdb {generate | view}

diagnose fmupdate dbcontract [<serial>]

diagnose fmupdate del-device <serial>

diagnose fmupdate del-log

diagnose fmupdate del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

diagnose fmupdate del-serverlist {fct | fds | fgd}

diagnose fmupdate dump-um-db {um2.db | fds.db} [<table>]

diagnose fmupdate fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | imlt-d20 | immx | oblt | srul | subs}

diagnose fmupdate fds-getobject <filter type> <filter> <other options>

diagnose fmupdate fds-update-info

diagnose fmupdate fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

diagnose fmupdate fgd-wfas-clear-log

diagnose fmupdate fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

diagnose fmupdate fgd-wfas-rate {wf | av | as_ip | as_url | as_hash}

diagnose fmupdate fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} {all | <serial> [<integer>]

diagnose fmupdate fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d}]

diagnose fmupdate fgt-del-statistics

diagnose fmupdate fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db | som.dat}]

diagnose fmupdate fortitoken {seriallist | add | del} <serial>

diagnose fmupdate list-object {fds | fgd | fqfq | geo-ip} [<object_type>] [<object_version>]

diagnose fmupdate priority-download {clear | list | view}

diagnose fmupdate service-restart {fds | fgd | fmtr | fwm}

diagnose fmupdate show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

diagnose fmupdate show-dev-obj [<serial>]

diagnose fmupdate test {fgd-url-rating | fgd-test-client | ping-server | fmg-statistic-info} <string>

diagnose fmupdate update-status {fds | fct | fgd}

diagnose fmupdate updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

diagnose fmupdate view-configure {fds | fct | fgd | fmtr}

diagnose fmupdate view-linkd-log {fct | fds | fgd}

diagnose fmupdate view-serverlist {fds | fgd}

diagnose fmupdate view-service-info {fds | fgd}

diagnose fmupdate vm-license

Variables

Description

check-disk-quota {export-import | fds | fgd | all} <clean>

Check the related directory size. Clean the export/import directory, if necessary.

crdb {generate | view}

Generate or view certificate files from the database.

dbcontract [<serial>]

Dump the subscriber contract. Optionally, enter the serial number of the device.

del-device <serial>

Delete a device. Optionally, enter a serial number for the device.

del-log

Delete all the logs for FDS and FortiGuard update events.

del-object {fds | fgd | fqfq | geoip} [<object_type>] [<object_version>]

Remove all objects from the specified service. Optionally, enter the object type and version or time.

del-serverlist {fct | fds | fgd}

Delete the server list file (fdni.dat) from the specified service.

dump-um-db {um2.db | fds.db} [<table>]

Dump um databases or dump either um2 or fds database. Optionally, you can dump a specified table in um2 or fds databases.

fds-dump {breg | fds-log | fect | fmgi | imlt | imlt-d | imlt-d20 | immx | oblt | srul | subs}

Dump FDS files:

  • breg: Dump the FDS beta serial numbers.
  • fds-log: Dump the FDS svrd log. Optionally, enter a rolling number from 0 to 10.
  • fect: Dump the FortiClient image file. Choose from the two available options of dumping the FortiClient file for the server or the client.
  • fmgi: Dump FMGI (Object description details) file.
  • imlt: Dump FGT image list file.
  • imlt-d: Dump FGT image file for downstream device.
  • imlt-d20: Dump FGT image list file for downsteam, v2.0.

  • immx: Dump the image upgrade matrix file. You can dump the IMMX files for FortiManager, FortiGate, or FortiCloud.
  • oblt: Dump the object list file. You can dump the object list files for FGT, FCT, FGD, FQFQ, or geoip services. You can also dump the downstream object file for one of these services.
  • srul: Dump the FDS select filtering rules.
  • subs: Dump Contract file.

fds-getobject <filter type> <filter> <other options>

Get the versions of all FortiGate objects for antivirus-IPS.

  • <filter type>: Enter product or objid as the filter type.
  • <filter>: Enter an available filter. These filters are available only when you select product as your filter type. Enter all for all product filters.
  • <other options>: Enter used to show used-only objects or raw to show response in raw JSON format.

fds-update-info

Display scheduled update information.

fgd-bandwidth {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth.

fgd-dbver [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Get the version of the database. Optionally, enter the database type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-del-db [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Delete FortiGuard database. Optionally, enter the database type:

  • as1: Antispam (IP).
  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-dump [{as1 | as2 | as4 | av | av2 | cat1 | fq | geoip | iotm | iotr | iots | wf}]

Dump the FortiGuard information. Optionally, select a database category type:

  • as1: Antispam (IP).

  • as2: Antispam (URL).

  • as4: Antispam (HASH).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • cat1: Query Category.

  • fq: File Query.

  • geoip: GeoIP.

  • iotm: IoT (mapping).

  • iotr: IoT (range).

  • iots: IoT (single).

  • wf: Webfilter.

fgd-wfas-clear-log

Clear the FortiGuard service log file.

fgd-wfas-log [{name | ip} {<name> | <ip addr>}]

View the FortiGuard service log file. Optionally, enter the device filter type, and device name or IPv4 address.

fgd-wfas-rate [{as_hash | as_ip | as_url | av | av2 | fq | wf}]

Get the web filter / antispam rating speed. Optionally, enter the server type:

  • as_hash: Antispam (HASH).

  • as_ip: Antispam (IP).
  • as_url: Antispam (URL).

  • av: AntiVirus Query.

  • av2: Outbreak Prevention.

  • fq: File Query.

  • wf: Webfilter.

fgd-wfdevice-stat {10m | 30m | 1h | 6h | 12h | 24h | 7d} <serial> [<integer>]

Display web filter device statistics. Enter all or a specific device’s serial number. Optionally, enter the number of time periods to display (default = 1).

fgd-wfserver-stat {top10sites | top10devices} [{10m | 30m | 1h | 6h | 12h | 24h | 7d}]

Display web filter server statistics for the top 10 sites or devices. Optionally, enter the time frame to cover.

fgt-del-statistics

Remove all statistics (antivirus / IPS and web filter / antispam). This command requires a reboot.

fgt-del-um-db [{um.db | um2.db | fds.db | um_stat.db | som.dat}]

Remove UM, UM2, fds, and um_stat databases. This command requires a reboot.

Note: um.db is a sqlite3 database that update manager uses internally. It will store AV/IPS package information of downloaded packages. This command removes the database file information. The package is not removed. After the reboot, the database will be recreated. Use this command if you suspect the database file is corrupted.

fortitoken {seriallist | add | del} <serial>

FortiToken related operations.

list-object {fds | fgd | fqfq | geo-ip} [<object_type>] [<object_version>]

List downloaded objects of linkd service. Optionally, enter the object type and version or time.

priority-download {clear | list | view}

Command for priority download:

  • clear: view config.

  • list: list object id of list.

  • view: clear config.

service-restart {fds | fgd | fmtr | fwm}

Restart the linkd service.

show-bandwidth {fct | fgt | fml | faz} {1h | 6h | 12h | 24h | 7d | 30d}

Display the download bandwidth for a device type over a specified time period.

show-dev-obj [<serial>]

Display an objects version of a device. Optionally, enter a serial number.

test {fgd-url-rating | fgd-test-client | ping-server | fmg-statistic-info} <string>

Test tools:

  • fgd-url-rating: Rate URLs within the FortiManager database using the hostname or IP of the FortiGuard server..
  • fgd-test-client: Execute FortiGuard test client using the hostname or IP of the FortiGuard server.
  • ping-server: Check connection of FortiGuard servers.
  • fmg-statistic-info: Display statistic information for FortiManager and Java Client.

update-status {fds | fct | fgd}

Display the update status for a service.

updatenow {fds | fgd} {fgd | fgfq | geoip} {SelectivePoll | Poll | Consolidation | Command}

Update immediately. Select a service, service type, and task type.

Note: Selecting a service and task type is only available when the service is fgd.

view-configure {fds | fct | fgd | fmtr}

Dump the running configuration.

view-linkd-log {fct | fds | fgd}

View the linkd log file.

view-serverlist {fds | fgd}

Dump the server list.

view-service-info {fds | fgd}

Display the service information.

vm-license

Dump the FortiGate VM license.