Technical Tip: Use SD-WAN intelligence for selecting interface to use in communicating with FortiGuard servers

[acvaldez]

Description	This article describes how to be able to use the best link for communicating FortiGuard servers.
Scope	FortiGate.
Solution	Interface select method options: auto  <----- Set outgoing interface automatically. sdwan <----- Set outgoing interface by SD-WAN or policy routing rules. specify <----- Set outgoing interface manually. config sys fortiguard (fortiguard)  set interface-select-method sdwan (fortiguard)  end config sys fortiguard (fortiguard) # show config system fortiguard     set update-server-location usa     set sdns-server-ip "208.91.112.220"     set interface-select-method sdwan end config log fortiguard setting     set status enable      set interface-select-method sdwan end To manually select an outgoing interface, run the following: config system fortiguard     set interface-select-method specify     set interface port1 <- Select the outgoing interface. end Validate the connection to the FortiGuard servers. execute ping service.fortiguard.net execute ping update.fortiguard.net execute ping guard.fortinet.net execute ping securewf.fortiguard.net (HTTPS) execute ping usservice.fortiguard.net(UDP - USA servers) execute ping ussecurewf.fortiguard.net (HTTPS - USA servers)