Technical Tip: Web Filtering and Anti-Spam is down after upgrading to v7.4.7 when Anycast is enabled

[mzainuddinahm]

Description	This article describes the behaviour after firmware upgrade to v7.4.7, with Web Filtering and Anti-Spam filtering services when Anycast is enabled.
Scope	FortiGate v7.4.7.
Solution	By default, the FortiGuard filtering services use HTTPS on port 443, which also indicates that the use of Anycast is enabled. After upgrading from v7.4.6 to v7.4.7, when FortiGuard filtering services are set to HTTPS on port 443 with Anycast enabled, the Web Filtering and Anti-Spam status shows down: This has been identified as a known issue under engineering ticket: 01172647, and has been fixed in v7.4.10, v7.6.4 and v8.0. Workaround which can be considered:  Disable anycast, and the Rating Servers will show up: config system fortiguard     set fortiguard-anycast disable end execute update-now Enable a Webfilter profile in firewall policy, then the rating servers show up as expected, even when Anycast is enabled.