Skip to main content
sseriramalu
Staff
sseriramalu
Staff
June 17, 2026

Troubleshooting Tip: FortiAnalyzer license update issue

  • June 17, 2026
  • 0 replies
  • 71 views

Description


This article describes a troubleshooting process for resolving a FortiAnalyzer license update issue where the license has been renewed, but the GUI still does not reflect the update. The user may encounter this issue when the FortiAnalyzer device is unable to connect to the FortiGuard server.

c010dd95.png


ced9c424.png


Scope


FortiAnalyzer.


Solution


To resolve the FortiAnalyzer license update issue, perform the following checks:

  1. Verify internet connectivity.

Confirm that the FortiAnalyzer has internet access by testing connectivity to a public DNS server (for example, 8.8.8.8).

  1. Verify DNS resolution of the FortiGuard FQDN:

Run the following command:

execute ping usfds1.fortinet.com


  1. Check the output.

If the output is:

ping: bad address 'usfds1.fortinet.com'


This indicates that FortiAnalyzer is unable to resolve the FortiGuard FQDN, which is most likely a DNS-related issue.

  1. Configure a reachable DNS server.

Try using a public DNS server and run the command below again:

execute ping usfds1.fortinet.com


  1. Collect FDS debug logs.

If the issue persists and the same error is returned, collect FDS debug logs using:

diagnose fmupdate view-linkd-log fds


Review the debug output.

If the logs contain entries similar to the following:

2026/06/10_11:20:52.562 info fds_svrd[15660]: __evlog_conn_status,1164: svc=FGT, addr=usfds1.fortinet.com, status=-1(failed), failed_reason=0(), svrnode=addr:usfds1.fortinet.com, port:443, tz:7, distance:0, src:DEFAULT, now-g_conn_time=1202, report server connect failed info2026/06/10_11:30:53.642 info fds_svrd[15660]: Start fds client session to 'usfds1.fortinet.com:443', task=SELPOLL svc=FGT2026/06/10_11:30:53.650 info fds_svrd[15660]: Check update(SELPOLL) with [FGT] fds usfds1.fortinet.com FAIL


This indicates that FortiAnalyzer is attempting to reach the Fortinet licensing servers via usfds1.fortinet.com over HTTPS (TCP port 443), but the connection is failing.

  1. Verify firewall or proxy policies.

Ensure that any firewall or proxy located between FortiAnalyzer and the internet allows outbound access on TCP port 443 and that the following FQDNs are whitelisted:

fds1.fortinet.com
usfds1.fortinet.com


  1. Once connectivity to these FortiGuard servers is established, the license information should be updated successfully.

    Terms & ConditionsAccessibility statement