| Description |
This article describes how to resolve an issue where the FortiGate GUI shows a FortiGuard update failed.
To troubleshoot the issue, FortiGate administrator runs the following 'update' debug:
diag debug reset diag debug application update -1 exec update-now diag debug enable
The logs show the updated failed because of a certificate error:
Cert error…… Self-signed certificate in certificate chain…… SSL_Connect fails, …… certificate verify failed.
The network setup is as follows:
FortiGate – the third-party firewall - ISP. |
| Scope | FortiOS v7.0 or later. |
| Solution |
In the upstream, there is a third-party firewall enabling SSL deep inspection, which causes the FortiGuard update certificate error. The solution is to add an exemption in the upstream firewall for FortiGuard FQDN.
The FQDN for FortiGuard traffic can be found in the following documents. |
