FortiGuard Servers Down

[SA_Metal]

Fortiguard Servers unreachable via 2 Different Locations with two Different ISP's

DNS Debugging followed and ping responses from Fortigate's both show 290ms response times.
Fortiguard Servers are set to use lowest latency location as well.

Still unreachable, Is there an outage ?

[AndrKroh]

Same problem here in Germany today since 01:24:09 CET.

Fortiguard webfilter services are NOT reachable

ping pong with

Fortiguard webfilter services are reachable

But why the customers can't work trough policies with webfilter enable ?

A workaround is this:

config system fortiguard
set fortiguard-anycast disable
set protocol udp
set port 8888
end

[こう]

Web Filter Service Error rating timeout
is occurring frequently in Japan as well.

There is a very high latency with the FortiGuard filter rating server.
FortiGuard Filter Rating Server
Service Status
Web Filter 173.243.140.16 631 ms
Outbreak Prevention 173.243.140.16 631 ms

[dkochhar]

Please try to change the fortiguard settings to these:

config system fortiguard

set fortiguard-anycast disable

set protocol udp

set port 53

set sdns-server-ip 208.91.112.220

set source-ip <WAN IP>

end