Troubleshooting Tip: Troubleshoot FortiClient Web Filter related issues in Chromebook

[btan]

Description	This article describes how to troubleshoot FortiClient Web Filter related issues in Chromebook devices.
Scope	FortiClient EMS 7.0 and above.
Solution	The FQDN used for Web Filter URL rating for Chromebook is https://wsfgd1.fortiguard.net:3400/ The traffic from Chromebook devices towards this FQDN should not be blocked in order for FortiClient Web Filter feature to work properly. Do a ping command to wsfg1.fortiguard.net and ensure it is pingable: C:\Users\UserNameA>ping wsfgd1.fortiguard.net Pinging wsfgd1.fortiguard.net [75.2.22.63] with 32 bytes of data: Reply from 75.2.22.63: bytes=32 time=5ms TTL=245 Reply from 75.2.22.63: bytes=32 time=5ms TTL=245 Reply from 75.2.22.63: bytes=32 time=7ms TTL=245 Reply from 75.2.22.63: bytes=32 time=5ms TTL=245 Do a telnet command to wsfg1.fortiguard.net over port 3400 and see if it is successful. telnet wsfg1.fortiguard.net 3400 Open a web browser, go to https://wsfgd1.fortiguard.net:3400, select the padlock icon, check the SSL certificate validity. Ensure that the certificate is not expired. In the web browser, press F12 to open the developer tool -> Console tab -> Run. Check the captured logs and see if any interesting logs: In the above example, it shows 'ERR_CERT_DATE_INVALID'. It means the SSL certificate on the FortiGuard server is expired. Contact Fortinet TAC for further assistance.