FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ap
Staff
Staff
Article Id 328647
Description

This article describes the case when trying to register to FortiGate to FortiCare through FortiGate GUI, the user needs to select the correct reseller from the dropdown menu. However, sometimes this option keeps on spinning and does not show the correct options at all.

Scope FortiGate, FortiOS.
Solution

One of the main reasons for this issue is internet connectivity. Make sure that FortiGate can reach the internet by pinging using the IP address.

 

ap_0-1721997710444.png

 

It is also important that FortiGate should be able to resolve the hostnames using the system DNS configured on the FortiGate.

 

ap_1-1721997710450.png

 

ap_2-1721997710470.png

 

Ensure that the DNS servers used on FortiGate support the correct protocol (cleartext or DoT or DoH) as per the following KB article: Technical Tip: Changing the DNS protocol used by FortiGate to initiate DNS requests.

 

In the GUI:

 

Screenshot 2024-08-20 140636.png

 

In the CLI:

 

Screenshot 2024-08-20 140655.png

 

The wrong DNS protocol configuration will result in unresolved hostnames and FortiGate cannot reach the internet using hostnames/URLs.

 

Another scenario is if the FortiGate can resolve and reach the hostnames/URL but the Reseller option is still not loading.

 

Disabling FortiGuard anycast and using another protocol and port will load and populate the Reseller option.

 

config system fortiguard

    set fortiguard-anycast disable

    set protocol udp

    set port 8888

    set sdns-server-ip 208.91.112.220 173.243.140.53 210.7.96.53

end

 

Related article:

Technical Tip: FortiGuard is not reachable via Anycast default method