Technical Tip: Use SD-WAN intelligence for selecting interface to use in communicating with FortiGuard servers

This article describes how to be able to use the best link for communicating FortiGuard servers.

Interface select method options:

• auto  <----- Set outgoing interface automatically.
  
• sdwan <----- Set outgoing interface by SD-WAN or policy routing rules.
  
• specify <----- Set outgoing interface manually.

config sys fortiguard

(fortiguard)  set interface-select-method sdwan

(fortiguard)  end

config sys fortiguard

(fortiguard) # show

config system fortiguard

    set update-server-location usa

    set sdns-server-ip "208.91.112.220 173.243.140.53 210.7.96.53"

    set interface-select-method sdwan

end

config log fortiguard setting

    set status enable 

    set interface-select-method sdwan

end

To manually select an outgoing interface, run the following:

config system fortiguard

    set interface-select-method specify

    set interface port1 <- Select the outgoing interface.

end

Validate the connection to the FortiGuard servers.

execute ping service.fortiguard.net
execute ping update.fortiguard.net
execute ping guard.fortinet.net

execute ping securewf.fortiguard.net (HTTPS)
execute ping usservice.fortiguard.net(UDP - USA servers)
execute ping ussecurewf.fortiguard.net (HTTPS - USA servers)