Troubleshooting Tip: 'Deny: UTM Blocked' logs with error 'no correct FortiGuard information' in Web Filter logs.

[mriswan]

Description

This article explains what to check if  'Deny: UTM Blocked' logs appear with the error 'no correct FortiGuard information' in the Web Filter logs.

Scope

FortiGate.

Solution

The error 'no correct FortiGuard information' generally indicates urlfilter daemon tried to send a request but could not reach any of the FortiGuard servers in its server list. There are multiple reasons this could occur, for example, the list is empty, or it already tried all the servers and received no responses, etc.

To check if the server list is empty, run the below command:

diagnose debug rating

Check the FortiGuard connectivity from the firewall using the KB :
Troubleshooting Tip: Unable to connect to FortiGua... - Fortinet Community

If the  server IPs  are listed,  it is possible to force urlfilter to send out an INIT request immediately by doing either of the following manually:

1. Restart urlfilter daemon, it will force the INIT request to be sent when urlfilter starts.
2. Run the diagnose command to force INIT requests to be sent, so there is no need to restart urlfilter daemon:

diagnose test application urlfilter 15