Skip to main content
SA_Metal
Visitor III
May 18, 2023
Question

FortiGuard Servers Down

Fortiguard Servers unreachable via 2 Different Locations with two Different ISP's

DNS Debugging followed and ping responses from Fortigate's both show 290ms response times.
Fortiguard Servers are set to use lowest latency location as well.

Still unreachable, Is there an outage ?

14 replies

msolanki
Staff
Staff
May 18, 2023

Please disable anycast and enable fortiguard communication over port 8888/53  .

config system fortiguard

set fortiguard-anycast disable

set port 53

set protocal udp

set sdns-server-ip "208.91.112.220"

 

After that run below command and you will see more server(18 or 20)  available .

 

Thanks

madhav

SA_Metal
SA_MetalAuthor
Visitor III
May 18, 2023

Hi msolanki,

Response times have increased thank you.

However web filter and Outbreak Prevention Servers are still well over 900ms.
If I want to revert to use anycast again, How do i revert these changes ? 

msolanki
Staff
Staff
May 18, 2023

for revert

config system fortiguard

set fortiguard-anycast enable

 

Thanks

Madhav

SA_Metal
SA_MetalAuthor
Visitor III
May 18, 2023

Thank you Msolanki

I appreciate the assistance will see if this changes things and revert.

fabiomelchiorre
New Member
October 26, 2024

same problem here in italy. Web filtering servers goes up an down.

BartekP
New Member
October 26, 2024

We have the same problem, 26.10.2024, Poland

ChrisSchwarz
New Member
October 26, 2024

same here today 26.10.2024 in Austria

sokolisko
New Member
October 26, 2024

Poland web filtering is dead ;)

AndrKroh
Explorer
October 26, 2024

Same problem here in Germany today since 01:24:09 CET.

Fortiguard webfilter services are NOT reachable

ping pong with

Fortiguard webfilter services are reachable

 

But why the customers can't work trough policies with webfilter enable ?

 

A workaround is this:

config system fortiguard
set fortiguard-anycast disable
set protocol udp
set port 8888
end

 

 

user127726
New Member
October 26, 2024

Web Filter Service Error rating timeout
is occurring frequently in Japan as well.

There is a very high latency with the FortiGuard filter rating server.
FortiGuard Filter Rating Server
Service Status
Web Filter 173.243.140.16 631 ms
Outbreak Prevention 173.243.140.16 631 ms

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT