Technical Tip: FortiGuard server location setting

[ckarwei]

Description

This article describes how to change FortiGuard server location settings in FortiManager, FortiAnalyzer and FortiGate.

Scope

FortiAnalyzer.

Solution

1. On the FortiManager/FortiAnalyzer platform, the default setting is servers located in the US only'.
2. If necessary, set the server location as 'Global Servers' to improve latency.
3. From GUI, change the update server setting at System Settings -> Dashboard -> License Information widget.
   
   

4. A warning message after apply the changes will appear.

5. Select 'OK' and the FortiManager / FortiAnalyzer will reboot. FortiGuard update server will now change to 'Global Servers'.
6. To perform the same action from CLI:

FMG-FAZ# config system global
(global) set usg
 disable              <----- Contact any Fortiguard server.
 enable               <----- Contact Fortiguard server in USA only.

(global) set usg disable
(global) end
System will reboot after usg is changed.
Do you want to continue? (y/n)y

On FortiGate GUI:

Navigate to System -> FortiGuard -> FortiGuard Updates -> Update server location.

To change the settings in the CLI:

bentley-kvm32 # conf sys fortiguard

bentley-kvm32 (fortiguard) #
bentley-kvm32 (fortiguard) # set update-server-location ?
automatic - FortiGuard servers chosen based on closest proximity to FortiGate unit.
usa - FortiGuard servers in United States.
eu - FortiGuard servers in the European Union.