Staff

Troubleshooting Tip: Using monitoring script to troubleshoot intermittent connectivity issues with the FortiGuard server

Forum|Forum|2 months ago
March 20, 2026
0 replies
143 views

Description

This article describes how to use a monitoring script to troubleshoot intermittent connectivity issues with the FortiGuard server, which can cause web filtering rating errors.

Scope

FortiClient.

Solution

Prerequisites:

Install Microsoft PortQry from the official download link: PortQry Command Line Port Scanner Version 2.0
Ensure the endpoint has necessary permissions to execute scripts via PowerShell.

Steps:

Identify FortiGuard Server Location/FortiGuard Server Type.

Navigate to FortiClient EMS -> Endpoint Profiles -> Web Filter -> Web Filter Profiles -> FortiGuard Server Location/FortiGuard Server Type.

2026-03-12 11 09 23.png

Execute the script using PowerShell.

2026-03-12 15 21 21.png

Select the FortiGuard server type.

2026-03-12 11 15 43.png

Select the FortiGuard server location.

2026-03-12 11 15 52.png

Observe the output.

2026-03-12 11 17 07.png

See below for an example of the expected log output.

The first section of the log displays the nslookup results, filtered by the selected server type and location.

2026-03-12 15 22 48.png

The second section details the connection test results:

Example of a successful connection to the server:

2026-03-12 11 02 02.png

Example of a connection attempt that did not receive a response:

2026-03-12 11 01 11.png

CLI status:

Status	Meaning
SUCCESS	Port is confirmed open.
UNKNOWN	Port is 'Filtered' (No response).
FAILED	Port is 'Rejected'.
CRITICAL	DNS lookup timeout.