FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ojacinto
Staff
Staff
Article Id 279486
Description This article describes how to fix the error 'videofilter-license: Unknown' in the FortiGuard status.
Scope FortiGate v6.4+, v7.0+, v7.2+ where fortiguard-anycast is disabled.
Solution

When trying to use video filtering feature on FortiGate, it is possible to see the following status under 'get system fortiguard' for the video-filter license:

 

ScreenHunter 281.png

 

 

If trying to use any video-filter profile into the firewall policy, video filter will not work and wad debug will show the following messages:

 

[p:23290] wad_ftgd_request_init_pkt_header :399 fg_request_header: version=2, type=16, tot_len=64 msg_id=7027
[p:23290] wad_p2s_http_req_alloc :1206 req 0x7faf1f04bea8 allocated
[p:23290] wad_p2s_http_ses_task_get :1102 task 0x7faf7b815f58 allocated

[p:23290] __wad_dns_send_query :771 0:0: sending DNS request for remote peer videoquery.fortinet.net id=0 IPv4
[p:23290] wad_p2s_http_ses_task_dns :1064 task 0x7faf7b815f58 wait for dns result
[p:23290] wad_p2s_http_ses_task_schedule_update:905 update from new request
[p:23290] wad_p2s_http_req_submit :1181 attach req 0x7faf1f04bea8 to task 0x7faf7b815f58
[p:23290] wad_ftgd_agent_send_init_request :939 successfully send init request
[p:23290] wad_ftgd_agent_is_license_valid :809 send init, ret=1
[p:23290] wad_ftgd_agent_is_license_valid :812 license type(-1) is not valid
[p:23290] wad_vf_task_query_ftgd :1592 failed to send ftgd query, task=0x7faf7b90c7f8
[p:23290] wad_vf_sync_task_proc_async_result:2090 task=0x7faf7b90c7f8 item=(nil)
[p:23290] wad_vf_sync_task_proc_async_result:2147 ctx(0x7faf7bc831a8) does not find item in async task(0x7faf7b90c7f8)
[p:23290] wad_vf_sync_task_finished :2159 ctx=0x7faf7bc831a8 finished
[p:23290] wad_vf_handle_channel :388 hreq=0x7faf1eadd860, result=ignore, ret=0
[p:23290] wad_vf_handle_category :430 hreq=0x7faf1eadd860, result=unknown, ret=1
[p:23290] wad_vf_handle_result :537 hreq=0x7faf1eadd860, result=unknown, msg_done=0

 

To fix this issue, change the following settings under FortiGuard:


config system fortiguard

    set fortiguard-anycast enable
    set fortiguard-anycast-source fortinet
end

 

Execute an update to get the license information:


exec update-now


Validate that the license of video filter shows 'Contract' as expected:

ScreenHunter 282.png

 

Contributors