Troubleshooting Tip: How to troubleshoot on FortiADC version 7.6.6 issue on connecting to FortiManager for FortiGuard update

Scenario:

• FortiADC is configured to connect to FortiManager as the FDS (FortiGuard Distribution Network) update endpoint.
• FortiADC upgraded to v7.6.6 and failed to validate its license, nor was it able to obtain any updated packages from FortiManager FDS service.

Troubleshoot:

1. In this scenario, FortiADC failed to connect to FortiManager as the FDS service for license validation and package update downloads. This issue happens after upgrading the FortiADC firmware to v7.6.6. Run the debug command to troubleshoot the update service, which shows that the FortiADC failed to connect to the FortiManager with a certificate error.

Debug commands for 'updated' service:

diagnose debug module updated all

diagnose debug enable

execute update-now

2. Check and confirm if the FortiADC CLI configuration shows the default value for 'FortiGuard anycast' settings.

Command to get FortiGuard config:

get system fortiguard

Solving the FortiADC SSL connection issue to FortiManager.

1. Disable FortiGuard Anycast settings in the FortiADC using the given commands.

config system fortiguard

    set anycast disable

end

2. Rerun the debug commands and trigger the FortiGuard update from the FortiADC. The debug output shall show that FortiADC has successfully updated from FortiManager.
                                                            

Related document:

Connecting to FortiGuard services