Fortinet FortiMail-100 - Configuring Push Updates

Configuring push updates Connecting to FortiGuard services
FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
92 Revision 2
http://docs.fortinet.com/ • Feedback
You can use push updates or manually initiate updates as alternatives or in conjunction
with scheduled updates. If protection from the latest viral threats is a high priority, you
could configure both scheduled updates and push updates, using scheduled updates as a
failover method to increase the likelihood that the FortiMail unit will still periodically
retrieve updates if connectivity is interrupted during a push notification. While using only
scheduled updates could potentially leave your network vulnerable to a new virus, it
minimizes short disruptions to antivirus scans that can occur if the FortiMail unit applies
push updates during peak volume times. For additional/alternative update methods, see
“Configuring push updates” on page 92 and “Manually requesting updates” on page 94.
For example, you might schedule updates every night at 2 AM or weekly on Sunday, when
email traffic volume is light.
Before configuring scheduled updates, first verify that the FortiMail unit can connect to the
FDN or override server. For details, see “To verify scheduled update connectivity” on
page 89.
To configure scheduled updates
1 Go to Maintenance > FortiGuard > Update in the advanced mode of the web-based
manager.
2 Enable Scheduled Update.
3 Select from one of the following:
4 Select Apply.
The FortiMail unit starts the next scheduled update according to the configured update
schedule. If you have enabled logging, when the FortiMail unit requests a scheduled
update, the event is recorded in the event log.
Configuring push updates
You can configure the FortiMail unit to receive push updates from the FDN or override
server.
When push updates are configured, the FortiMail unit first notifies the FDN of its IP
address, or the IP address and port number override. (If your FortiMail unit’s IP address
changes, including if it is configured with DHCP, the FortiMail unit automatically notifies
the FDN of the new IP address.) As soon as new FortiGuard Antivirus and FortiGuard
Antispam packages become available, the FDN sends an update availability notification to
that IP address and port number. Within 60 seconds, the FortiMail unit then requests the
package update as if it were a scheduled or manually initiated update.
Every Select to request updates once per interval, then configure the
number of hours and minutes between each request.
Daily Select to request updates once a day, then configure the time of
day.
Weekly Select to request updates once a week, then configure the day of
the week and the time of day.
Note: Updating FortiGuard Antivirus definitions can cause a short disruption in traffic
currently being scanned while the FortiMail unit applies the new signature database. To
minimize disruptions, update when traffic is light, such as during the night.