FortiGuard Servers Down

[SA_Metal]

Fortiguard Servers unreachable via 2 Different Locations with two Different ISP's

DNS Debugging followed and ping responses from Fortigate's both show 290ms response times.
Fortiguard Servers are set to use lowest latency location as well.

Still unreachable, Is there an outage ?

[msolanki]

Please disable anycast and enable fortiguard communication over port 8888/53  .

config system fortiguard

set fortiguard-anycast disable

set port 53

set protocal udp

set sdns-server-ip "208.91.112.220"

After that run below command and you will see more server(18 or 20)  available .

Thanks

madhav

[SA_Metal]

Hi msolanki,

Response times have increased thank you.

However web filter and Outbreak Prevention Servers are still well over 900ms.
If I want to revert to use anycast again, How do i revert these changes ? 

[msolanki]

for revert

config system fortiguard

set fortiguard-anycast enable

Thanks

Madhav

[SA_Metal]

Thank you Msolanki

I appreciate the assistance will see if this changes things and revert.

[fabiomelchiorre]

same problem here in italy. Web filtering servers goes up an down.

[BartekP]

We have the same problem, 26.10.2024, Poland

[gonilho2]

Probably all which does not have "allow when rating error occurs" enabled on dns and web filters. Most of our customers does not work on Sunday but I've received few complaints and checked some random fortigates using "diag debug rating". Ran this workaround on 2k devices just to avoid more complaints. Different FGT models and different firmwares. No IPv6 in use.

[ChrisSchwarz]

same here today 26.10.2024 in Austria

[sokolisko]

Poland web filtering is dead ;)