Fortinet white logo
Fortinet white logo

CLI Reference

7.2.2

config system fortiguard

config system fortiguard

Configure FortiGuard services.

Syntax

config system fortiguard
    set fortiguard-anycast [enable|disable]
    set fortiguard-anycast-source [fortinet|aws|...]
    set interface {string}
    set update-extdb [enable|disable]
    set update-ffdb [enable|disable]
    set webfilter-cache [enable|disable]
    set webfilter-cache-ttl {integer}
    set webfilter-expiration {string}
    set webfilter-force-off [enable|disable]
    set webfilter-license {string}
    set webfilter-timeout {integer}
end

Parameters

Parameter

Description

Type

Size

Default

fortiguard-anycast

Enable/disable use of FortiGuard's Anycast network.

option

-

enable

Option

Description

enable

Enable use of FortiGuard's Anycast network.

disable

Disable use of FortiGuard's Anycast network.

fortiguard-anycast-source

Configure which of Fortinet's servers to provide FortiGuard services in FortiGuard's anycast network. Default is Fortinet.

option

-

fortinet

Option

Description

fortinet

Use Fortinet's servers to provide FortiGuard services in FortiGuard's anycast network.

aws

Use Fortinet's AWS servers to provide FortiGuard services in FortiGuard's anycast network.

debug

Use Fortinet's internal test servers to provide FortiGuard services in FortiGuard's anycast network.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

any

update-extdb

Enable/disable external resource update.

option

-

enable

Option

Description

enable

Enable external resource update.

disable

Disable external resource update.

update-ffdb

Enable/disable Internet Service Database update.

option

-

enable

Option

Description

enable

Enable Internet Service Database update.

disable

Disable Internet Service Database update.

webfilter-cache

Enable/disable FortiGuard web filter caching.

option

-

enable

Option

Description

enable

Enable FortiGuard web filter caching.

disable

Disable FortiGuard web filter caching.

webfilter-cache-ttl

Time-to-live for web filter cache entries in seconds.

integer

Minimum value: 300 Maximum value: 86400

3600

webfilter-expiration

Expiration date of the FortiGuard web filter contract. Read-only.

string

Maximum length: -

webfilter-force-off

Enable/disable turning off the FortiGuard web filtering service.

option

-

disable

Option

Description

enable

Turn off the FortiGuard web filtering service.

disable

Allow the FortiGuard web filtering service to operate.

webfilter-license

Web filter license status. Read-only.

string

Maximum length: -

webfilter-timeout

Web filter query time out.

integer

Minimum value: 1 Maximum value: 30

15

config system fortiguard

config system fortiguard

Configure FortiGuard services.

Syntax

config system fortiguard
    set fortiguard-anycast [enable|disable]
    set fortiguard-anycast-source [fortinet|aws|...]
    set interface {string}
    set update-extdb [enable|disable]
    set update-ffdb [enable|disable]
    set webfilter-cache [enable|disable]
    set webfilter-cache-ttl {integer}
    set webfilter-expiration {string}
    set webfilter-force-off [enable|disable]
    set webfilter-license {string}
    set webfilter-timeout {integer}
end

Parameters

Parameter

Description

Type

Size

Default

fortiguard-anycast

Enable/disable use of FortiGuard's Anycast network.

option

-

enable

Option

Description

enable

Enable use of FortiGuard's Anycast network.

disable

Disable use of FortiGuard's Anycast network.

fortiguard-anycast-source

Configure which of Fortinet's servers to provide FortiGuard services in FortiGuard's anycast network. Default is Fortinet.

option

-

fortinet

Option

Description

fortinet

Use Fortinet's servers to provide FortiGuard services in FortiGuard's anycast network.

aws

Use Fortinet's AWS servers to provide FortiGuard services in FortiGuard's anycast network.

debug

Use Fortinet's internal test servers to provide FortiGuard services in FortiGuard's anycast network.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

any

update-extdb

Enable/disable external resource update.

option

-

enable

Option

Description

enable

Enable external resource update.

disable

Disable external resource update.

update-ffdb

Enable/disable Internet Service Database update.

option

-

enable

Option

Description

enable

Enable Internet Service Database update.

disable

Disable Internet Service Database update.

webfilter-cache

Enable/disable FortiGuard web filter caching.

option

-

enable

Option

Description

enable

Enable FortiGuard web filter caching.

disable

Disable FortiGuard web filter caching.

webfilter-cache-ttl

Time-to-live for web filter cache entries in seconds.

integer

Minimum value: 300 Maximum value: 86400

3600

webfilter-expiration

Expiration date of the FortiGuard web filter contract. Read-only.

string

Maximum length: -

webfilter-force-off

Enable/disable turning off the FortiGuard web filtering service.

option

-

disable

Option

Description

enable

Turn off the FortiGuard web filtering service.

disable

Allow the FortiGuard web filtering service to operate.

webfilter-license

Web filter license status. Read-only.

string

Maximum length: -

webfilter-timeout

Web filter query time out.

integer

Minimum value: 1 Maximum value: 30

15