FortiGuard Servers Down

[SA_Metal]

Fortiguard Servers unreachable via 2 Different Locations with two Different ISP's

DNS Debugging followed and ping responses from Fortigate's both show 290ms response times.
Fortiguard Servers are set to use lowest latency location as well.

Still unreachable, Is there an outage ?

[こう]

Web Filter Service Error rating timeout
is occurring frequently in Japan as well.

There is a very high latency with the FortiGuard filter rating server.
FortiGuard Filter Rating Server
Service Status
Web Filter 173.243.140.16 631 ms
Outbreak Prevention 173.243.140.16 631 ms

[dkochhar]

Please try to change the fortiguard settings to these:

config system fortiguard

set fortiguard-anycast disable

set protocol udp

set port 53

set sdns-server-ip 208.91.112.220

set source-ip <WAN IP>

end

[fkempf]

Other possible fix, at least it has worked in our company: Change System/Fortiguard/Fortiguard Updates/Update server location/ from "Lowest latency locations" to "restricted to" and choose "US only", then it works again with anycast still on.

[dlema]

Since Monday, same problem in France