FortiGuard DNS issue

[ChiefSec_Fortinet]

Recently ran into an issue where the Fortigate was providing incorrect IP addresses for requests to Microsoft domains. This led to certificate errors in outlook and browser connections to portal.azure.com.

There appears to be some Reddit evidence of other users also seeing this issue:

https://www.reddit.com/r/fortinet/comments/yuu50t/dns_issues_while_using_fortinet_dns_servers/

Looks like the same IP that we saw (93.174.121.39) and Certificate (SubName = gaia.iphost.gr)

As a work-around you can change your FW DNS settings to point to a 3rd party DNS provider, but curious if other people are seeing this and/or how to keep it from happening while using FortiGuard services for DNS. (I believe this is a requirement to leverage DNS filtering)

[ChiefSec_Fortinet]

Is there anywhere I can lookup the details/status of that bug ID?

[BHJ]

Hi

This issue still exist.
When assigning Fortiguard DNS servers to clients, they still receive occasional, random replies to DNS lookups, where clients using 208.67.222.222 or 8.8.8.8 receive consistent replies.