Skip to main content
Andrew3
Andrew3
New Member
March 28, 2021
Question

FortiGate Web Filter Error: All FortiGuard servers failed to respond.

  • March 28, 2021
  • 1 reply
  • 35777 views

We started getting this Web Filter error recently and it's blocking traffic to places like apple.com and microsoft.com. I don't know why Fortiguard servers would be failing to respond now. We had to remove Web filtering due to this error. Any ideas?

 

Blocked Traffic: http://ocsp.apple.com/

http://crl3.digicert.com

http://ctldl.windowsupdate.com

 

Errors: Web Filter

Profile NamePublicRequest TypedirectDirectionoutgoingErrorall Fortiguard servers failed to respondMessageA rating error occurs

1 reply

Yurisk
SuperUser
Yurisk
SuperUser
March 28, 2021

There can be few reasons, the one that FortiGuard servers all failed less likely of them. Yes, it happens that people report having issues with them but usually it passes quite fast.

Start with seeing the output diag debug rating . 

I wrote a post on debugging Fortigaurd servers connection, may be helpful https://yurisk.info/2021/02/21/failed-to-connect-to-fortiguard-servers-updated/ , and old but still valid https://yurisk.info/2009/06/19/failed-to-connect-to-fortiguard-servers/

 

yurisk.info - all things Fortinet blog, no ads
Andrew3
Andrew3Author
New Member
March 28, 2021

Thank you for this link. We were indeed on 6.4 and I just disabled Anycast. following your suggestions.

 

config system fortiguard

set fortiguard-anycast disable

set protocol udp

set port 8888

set sdns-server-ip 208.91.112.220 <-- IMPORTANT TO ADD THIS OR ANY OTHER FDN SERVER TO PREVENT DOWNTIME! end Previously, it was only showing 1 IP in the DI state. Now, it shows a full list of IPs and states other than DI. I'm hopeful that this resolves this issue but I will re-enable the policies and test again.

Terms & ConditionsAccessibility statement