Troubleshooting Tip: Troubleshoot FortiClient Web Filter related issues in Chromebook

The FQDN used for Web Filter URL rating for Chromebook is https://wsfgd1.fortiguard.net:3400/

The traffic from Chromebook devices towards this FQDN should not be blocked in order for FortiClient Web Filter feature to work properly.

1. Do a ping command to wsfg1.fortiguard.net and ensure it is pingable:

C:\Users\UserNameA>ping wsfgd1.fortiguard.net

Pinging wsfgd1.fortiguard.net [75.2.22.63] with 32 bytes of data:
Reply from 75.2.22.63: bytes=32 time=5ms TTL=245
Reply from 75.2.22.63: bytes=32 time=5ms TTL=245
Reply from 75.2.22.63: bytes=32 time=7ms TTL=245
Reply from 75.2.22.63: bytes=32 time=5ms TTL=245

2. Do a telnet command to wsfg1.fortiguard.net over port 3400 and see if it is successful.

telnet wsfg1.fortiguard.net 3400

3. Open a web browser, go to https://wsfgd1.fortiguard.net:3400, select the padlock icon, check the SSL certificate validity. Ensure that the certificate is not expired.
4. In the web browser, press F12 to open the developer tool -> Console tab -> Run. Check the captured logs and see if any interesting logs:

In the above example, it shows 'ERR_CERT_DATE_INVALID'. It means the SSL certificate on the FortiGuard server is expired. Contact Fortinet TAC for further assistance.