| Description | This article describes the time a FortiGate license takes to update. |
| Scope | FortiGate. |
| Solution |
After updating the license on the support portal, it will be necessary to wait 4 to 24 hours until the change is fully reflected.
FortiGate requires an internet connection to connect to the FortiGuard server and complete the update process; Refer to Technical Tip: Procedure to apply FortiGate firewall license offline for instructions on how to apply the FortiGate license offline.
If the license hasn't been updated within 24 hours, follow the steps below to perform preliminary troubleshooting and forward the findings to TAC for additional assistance:
The first step in ensuring FortiGuard server connectivity is to confirm successful DNS resolution and connectivity for the following hostname on FortiGate:
exe ping service.fortiguard.net
In a VDOM environment:
Make sure automatic schedule is enable or not, by default settings will be enabled.
config system autoupdate schedule show full-config end
Or:
diagnose autoupdate status
Example:
Challenger-kvm19 # diagnose autoupdate status
If not enabled, use the below command:
config system autoupdate schedule
To verify the status, run below the command:
diagnose autoupdate status
Example:
Challenger-kvm19 # diagnose autoupdate status
Post changes try updating the license manually by pushing FortiGuard updates, with the following command on CLI:
diagnose debug application update -1 diagnose debug enable execute update-now
Let these debugs run for some time and at the end of the debugs once 'successful' is seen then the update has been successfully performed. Then refreshing the GUI should reflect the updated information.
upd_comm_disconnect_fds[500]-Disconnecting FDS 173.243.141.6:443
To stop debugs post updating the license, run the below command:
diagnose debug disable
If the licenses have not been updated even after the specified time interval, refer to: Troubleshooting Tip: Diagnosing FortiGuard problems of Antivirus, Intrusion Prevention, Web Filterin... |
I think you're missing a bit in the 'check the communication' section - those are just two URLs.
I assume the idea is something along the lines of 'execute ping <URL>' to verify connectivity? You could also just link to one of our existing KBs on how to troubleshoot FortiGuard connectivity issues, like https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Diagnosing-FortiGuard-problems-of-An...
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.