This article describes how to fix the issue when the external connector threat feed status is in the 'Unavailable' connection status.
FortiGate, FortiOS.
For more info about Threat feeds, visit the below link:
https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/9463/threat-feeds
In some cases, the external connector has the connection status immediately after creation.
Other symptoms of this behavior are:
- No packets while running a sniffer.
- Running the debug 'diag debug application forticron 448' returns only '# fcron_ext_handle_cmd_update()-427: command update 'test2''.
This behavior is caused by the external database update being disabled.
# config system fortiguard
set update-extdb disable
Re-enabling this option will enable communication between the firewall and the server that hosts the thread feed IP list.
Related documents:
https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/9463/threat-feeds
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.