Troubleshooting Tip: How to fix 'videofilter-license: Unknown' message in FortiGuard status

[ojacinto]

Description	This article describes how to fix the error 'videofilter-license: Unknown' in the FortiGuard status.
Scope	FortiGate v6.4+, v7.0+, v7.2+ where fortiguard-anycast is disabled.
Solution	When trying to use the video filtering feature on FortiGate, it is possible to see the following status under 'get system fortiguard' for the video-filter license: The FortiGuard video filtering service is based on a valid FortiGuard web filter license (the video filter should use the same license as Web Filtering). When trying to use any video-filter profile in the firewall policy, the video filter will not work, and WAD debug will show the following messages: [p:23290] wad_ftgd_request_init_pkt_header :399 fg_request_header: version=2, type=16, tot_len=64 msg_id=7027 [p:23290] wad_p2s_http_req_alloc :1206 req 0x7faf1f04bea8 allocated [p:23290] wad_p2s_http_ses_task_get :1102 task 0x7faf7b815f58 allocated [p:23290] __wad_dns_send_query :771 0:0: sending DNS request for remote peer videoquery.fortinet.net id=0 IPv4 [p:23290] wad_p2s_http_ses_task_dns :1064 task 0x7faf7b815f58 wait for dns result [p:23290] wad_p2s_http_ses_task_schedule_update:905 update from new request [p:23290] wad_p2s_http_req_submit :1181 attach req 0x7faf1f04bea8 to task 0x7faf7b815f58 [p:23290] wad_ftgd_agent_send_init_request :939 successfully send init request [p:23290] wad_ftgd_agent_is_license_valid :809 send init, ret=1 [p:23290] wad_ftgd_agent_is_license_valid :812 license type(-1) is not valid [p:23290] wad_vf_task_query_ftgd :1592 failed to send ftgd query, task=0x7faf7b90c7f8 [p:23290] wad_vf_sync_task_proc_async_result:2090 task=0x7faf7b90c7f8 item=(nil) [p:23290] wad_vf_sync_task_proc_async_result:2147 ctx(0x7faf7bc831a8) does not find item in async task(0x7faf7b90c7f8) [p:23290] wad_vf_sync_task_finished :2159 ctx=0x7faf7bc831a8 finished [p:23290] wad_vf_handle_channel :388 hreq=0x7faf1eadd860, result=ignore, ret=0 [p:23290] wad_vf_handle_category :430 hreq=0x7faf1eadd860, result=unknown, ret=1 [p:23290] wad_vf_handle_result :537 hreq=0x7faf1eadd860, result=unknown, msg_done=0 To fix this issue, change the following settings under FortiGuard: config system fortiguard     set fortiguard-anycast enable     set fortiguard-anycast-source fortinet end Execute an update to get the license information: execute update-now Verify that the license of the video filter shows 'Contract' as expected: Note: Since the Video Filter service is treated as part of the URL Filter service on the FortiGuard side, starting with version 7.4.1, the Video Filter license is no longer displayed separately in the CLI.