Fortinet 134 FortiWeb 5.0 Patch 6 Administration Guide
Connecting to FortiGuard services
Most exploits and virus exposures occur within the first 2 months of a known vulnerability. Most
botnets consist of thousands of zombie computers whose IP addresses are continuously
changing. To keep your defenses effective against the evolving threat
landscape, Fortinet recommends FortiGuard services.
New vulnerabilities and botnets are discovered and new signatures are
built by Fortinet researchers every day.
Without these updates, your FortiWeb cannot detect the newest
threats.
After you have subscribed to FortiGuard services, configure your
FortiWeb appliance to connect to the Internet so that it can reach the
world-wide Fortinet Distribution Network (FDN) in order to:
• verify its FortiGuard service licenses
• download up-to-date signatures, IP lists, and engine packages
FortiWeb appliances often can connect using default settings.
However, due to differences in routing and firewalling, you should
confirm this by verifying connectivity.
To determine your FortiGuard license status
1. If your FortiWeb appliance must connect to the Internet through an explicit (non-transparent)
web proxy, configure the proxy connection (see “Accessing FortiGuard via a web proxy”).
The appliance will attempt to validate its license when it boots. If the appliance could not
connect because proxy settings were not configured, or due to any other connectivity issue
that you have since resolved, you can reboot the appliance to re-attempt license validation.
2. Go to System > Status > Status.
To access this part of the web UI, your administrator's account access profile must have
Read permission to items in the System Configuration category. For details, see
“Permissions” on page 47.
3. In the FortiGuard Information widget, look at the FortiWeb Security Service row, FortiWeb
Antivirus Service row, and FortiWeb IP Reputation Service row.
You must first register the FortiWeb appliance with the Fortinet Technical Support web site,
https://support.fortinet.com/, to receive service from the FDN. The FortiWeb appliance must
also have a valid Fortinet Technical Support contract which includes service subscriptions, and
be able to connect to the FDN. For port numbers required for license validation and update
connections, see “Appendix A: Port numbers” on page 666.