Technical Tip: Web Filtering and Anti-Spam is down after upgrading to v7.4.7 when Anycast is enabled

By default, the FortiGuard filtering services use HTTPS on port 443, which also indicates that the use of Anycast is enabled.

After upgrading from v7.4.6 to v7.4.7, when FortiGuard filtering services are set to HTTPS on port 443 with Anycast enabled, the Web Filtering and Anti-Spam status shows down:

This has been identified as a known issue under engineering ticket: 01172647, and has been fixed in v7.4.10, v7.6.4 and v8.0.

Workaround which can be considered: 

1. Disable anycast, and the Rating Servers will show up:

config system fortiguard

    set fortiguard-anycast disable

end

execute update-now

2. Enable a Webfilter profile in firewall policy, then the rating servers show up as expected, even when Anycast is enabled.