By default, the FortiGate will reach out to FortiGuard Labs every 2 hours. It will upgrade the various DB automatically. As of the writing of this article, Let’s Encrypt’s old CA cert IdentTrust DST Root CA X3 expired and broke a bunch of sites. Fortinet is in the process of updating and removing the bad cert. The command to validate your DB versions is:
dia autoupdate versions
The output should look something like this
AV Engine --------- Version: 6.00154 Contract Expiry Date: Thu Oct 20 2022 Last Updated using manual update on Fri Aug 21 16:31:00 2020 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Virus Definitions --------- Version: 89.04700 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Thu Sep 30 16:30:15 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: Updates Installed Extended set --------- Version: 89.04700 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Thu Sep 30 16:30:15 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: Updates Installed Extreme set --------- Version: 1.00000 Contract Expiry Date: Thu Oct 20 2022 Last Updated using manual update on Mon Apr 9 18:07:00 2018 Last Update Attempt: Wed Jan 13 18:15:25 2021 Result: Connectivity failure Mobile Malware Definitions --------- Version: 89.04700 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Thu Sep 30 16:30:15 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: Updates Installed IPS Attack Engine --------- Version: 6.00071 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Tue Feb 23 19:43:27 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates IPS Config Script --------- Version: 1.00009 Contract Expiry Date: Thu Oct 20 2022 Last Updated using manual update on Thu Jun 6 14:02:00 2019 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Attack Definitions --------- Version: 6.00741 Contract Expiry Date: Thu Oct 20 2022 Last Updated using manual update on Tue Dec 1 02:30:00 2015 Last Update Attempt: Wed Jan 13 18:15:25 2021 Result: Connectivity failure Attack Extended Definitions --------- Version: 18.00168 Contract Expiry Date: Thu Oct 20 2022 Last Updated using push update on Thu Sep 30 14:12:21 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Application Definitions --------- Version: 18.00166 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Tue Sep 28 14:30:17 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Industrial Attack Definitions --------- Version: 18.00164 Contract Expiry Date: Fri Nov 12 2021 Last Updated using push update on Thu Sep 23 13:14:01 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates IPS Malicious URL Database --------- Version: 3.00148 Contract Expiry Date: Thu Oct 20 2022 Last Updated using push update on Thu Sep 30 14:12:21 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Flow-based Virus Definitions --------- Version: 89.04690 Contract Expiry Date: Thu Oct 20 2022 Last Updated using push update on Thu Sep 30 15:46:04 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Botnet Domain Database --------- Version: 2.00844 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Wed Sep 29 18:31:53 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Internet-service Database Apps --------- Version: 7.01892 Contract Expiry Date: n/a Last Updated using scheduled update on Thu Sep 30 12:30:22 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Internet-service Database Maps --------- Version: 7.01892 Contract Expiry Date: n/a Last Updated using scheduled update on Thu Sep 30 12:30:22 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Device and OS Identification --------- Version: 1.00124 Contract Expiry Date: Thu Oct 20 2022 Last Updated using push update on Thu Sep 30 14:12:21 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates URL White list --------- Version: 3.00278 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Thu Sep 30 14:30:17 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates IP Geography DB --------- Version: 3.00096 Contract Expiry Date: n/a Last Updated using scheduled update on Mon Sep 27 14:30:19 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Certificate Bundle --------- Version: 1.00027 Contract Expiry Date: n/a Last Updated using manual update on Thu Aug 19 17:30:00 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Malicious Certificate DB --------- Version: 1.00340 Contract Expiry Date: Thu Oct 20 2022 Last Updated using scheduled update on Mon Sep 27 18:31:21 2021 Last Update Attempt: Thu Sep 30 16:30:15 2021 Result: No Updates Modem List --------- Version: 0.000 FDS Address --------- 208.184.237.67:443
