Created on
â11-13-2020
04:25 AM
Edited on
â02-27-2025
07:50 AM
By
salemneaz
Description
This article describes how to address FortiGuard when the Anycast default method does not work.
Scope
FortiGate v6.4.3 and above.
Solution
Per default, v6.4.3 and above are using the Anycast method to address the Fortiguard servers. Relying on Fortinet DNS servers, the FortiGate will get a single IP address for the domain name of each FortiGuard service.
In some circumstances, Anycast does not work:
Disable Anycast and use UDP with Port 8888.
config system fortiguard
set fortiguard-anycast disable
set protocol udp
set port 8888
This can be verified with the debug command 'diagnose debug rating':
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.