Troubleshooting Tip: Using loopback Interface for LocalOut

To resolve the issue of using a loopback interface as the source interface for LocalOut in FortiGate, follow these steps:

1. Go to Network -> Interface and create a new interface or use an existing one that is not connected to any network.
2. Configure the new interface with the public IP address that was previously assigned to the loopback interface.
3. Go to System -> FortiGuard and set the source IP address to the IP address of the new interface.
4. Verify that the FortiGate can reach the FortiGuard servers using the new interface.

From CLI Console:

config system fortiguard
    set source-ip xx.xx.xx.xx    <- Replace xx.xx.xx.xx with the loopback IP.
end

By following these steps, configure an alternative interface as the source for DNS and FortiGuard services, resolving the issue of using a loopback interface as the source interface for LocalOut.