Technical Tip: How to resolve map server connectivity issue

Description

This article describes how to resolve the FortiAnalyzer map server connectivity issue.

Scope

FortiAnalyzer.

Solution

1. When editing a device in FortiAnalyzer Device Manager, an error message 'Cannot connect to the map server' will be shown if FortiAnalyzer does not have proper Internet access and DNS resolution.

2. FortiAnalyzer requires external connectivity over TCP port 443 (HTTPS) along with proper DNS resolution in order to communicate with the map server domain.

   The user may use the Google DNS temporarily and verify if FortiAnalyzer can resolve the DNS.

    

config system dns

    set primary 8.8.8.8

end

3. Once FortiAnalyzer has proper Internet access as well as the correct DNS resolution, validate it by pinging the map server domain.

    

execute ping mapserver.fortinet.com
execute ping maps.googleapis.com

4. Once FortiAnalyzer can successfully resolve the map server domain, the device location should be updated accordingly.

   If the device location is yet to be updated, the user may reboot the FortiAnalyzer and verify the result again.

    

   

    

Troubleshooting info:

execute tac report

diagnose system geoip info
diagnose system geoip-city info
diagnose system geoip-city ip 8.8.8.8

Note: The administrator PC must also have an internet connection and access to the following URLs:

• https://maps.google.com
• https://maps.googleapis.com
• https://fonts.googleapis.com
• https://mapserver.fortinet.com

Related document:

Google maps integration