Troubleshooting Tip: How to fix a 'timed out' UriExpander error in the cross search log

Description

This article describes why the message 'UriExpander … timed out' is in the cross search log.

Scope

FortiMail versions 7.6.x, 7.4.x, 7.2.x, and 7.0.x.

Solution

A message like this may appear in the cross search log:

UriExpander: base: https://www.google.com/url?q=https://www.fortinet.com: Query failed for https://www.google.com/url?q=https://www.fortinet.com, status message: Resolving timed out after 5000 milliseconds

This happens because FortiMail cannot reach the redirected URL when 'url-redirect-lookup' is enabled in the 'system fortiguard antispam' configuration. See system fortiguard antispam in the CLI reference.

As mentioned in the command description, upstream devices must allow FortiMail to access the internet over HTTP and HTTPS.

If access is allowed and the message still appears in the log, check whether DNS is working correctly on FortiMail.