FortiGuard Servers Down

[SA_Metal]

Fortiguard Servers unreachable via 2 Different Locations with two Different ISP's

DNS Debugging followed and ping responses from Fortigate's both show 290ms response times.
Fortiguard Servers are set to use lowest latency location as well.

Still unreachable, Is there an outage ?

[msolanki]

Please disable anycast and enable fortiguard communication over port 8888/53  .

config system fortiguard

set fortiguard-anycast disable

set port 53

set protocal udp

set sdns-server-ip "208.91.112.220"

After that run below command and you will see more server(18 or 20)  available .

Thanks

madhav

[SA_Metal]

Hi msolanki,

Response times have increased thank you.

However web filter and Outbreak Prevention Servers are still well over 900ms.
If I want to revert to use anycast again, How do i revert these changes ? 

[msolanki]

for revert

config system fortiguard

set fortiguard-anycast enable

Thanks

Madhav

[SA_Metal]

Thank you Msolanki

I appreciate the assistance will see if this changes things and revert.

[fabiomelchiorre]

same problem here in italy. Web filtering servers goes up an down.

[BartekP]

We have the same problem, 26.10.2024, Poland

[ChrisSchwarz]

same here today 26.10.2024 in Austria

[sokolisko]

Poland web filtering is dead ;)

[AndrKroh]

Same problem here in Germany today since 01:24:09 CET.

Fortiguard webfilter services are NOT reachable

ping pong with

Fortiguard webfilter services are reachable

But why the customers can't work trough policies with webfilter enable ?

A workaround is this:

config system fortiguard
set fortiguard-anycast disable
set protocol udp
set port 8888
end