Technical Tip: FortiMail shows no FortiGuard contract

Description

Because of this status, users may also be noticing an increase in Spam not being caught.

Scope

FortiMail.

Solution

If the FortiMail is unable to reach the FortiGuard servers, AntiSpam options will work but with the old signatures, and thus the increased spam appears in users' mailboxes.

This is a common problem with how FortiMail contacts the FortiGuard servers.



The communication between the FortiMail and the FortiGuard servers is on UDP port 8889. If this traffic is being blocked the FortiMail will always have a problem verifying its contract. Without verification, the above situation will occur.  

To ensure the communication flow, on the firewall, allow UDP port 8889 traffic to and from the FortiMail.

FortiGuard service should not be confused with Fortinet Distribution Network (FDN) as the FDN is primarily for AntiVirus.