Technical Tip: Updating AV/IPS package from CLI using FTP/TFTP

nineapple

Manual update signaure when license expired and no <upgrade Database> buttons avaiable.
For Lab or home usage only.

Description
This article describes how to update AV/IPS package using CLI.


Solution
To update AV/IPS packages from CLI, one would need a FTP/TFTP server containing the package file (.pkg) .
The below commands can be helpful

CLI Syntax:

# exec restore ips ?
ftp Restore IPS database from FTP server.
tftp Restore IPS database from TFTP server.

# exec restore av  ?
ftp Restore antivirus database from FTP server.
tftp Restore antivirus database from TFTP server.

Example:

FGT # exec restore ips tftp flen-fos6.0-4.037.pkg 10.5.25.9
This operation will overwrite the current IPS package!
Do you want to continue? (y/n)y
Please wait...
Connect to tftp server 10.5.25.9 ...
###########
Get IPS database from tftp server OK.

FGT # exec restore ips ftp flen-fos6.0-4.045.pkg 10.5.25.9 anonymous
This operation will overwrite the current IPS package!
Do you want to continue? (y/n)y
Please wait...
Connect to ftp server 10.5.25.9 ...
Get IPS database from ftp server OK.

Original post url :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Updating-AV-IPS-package-from-CLI-using-FTP-TFTP/ta-p/196483
in case the post deleted or archived