Fortiguard Servers unreachable via 2 Different Locations with two Different ISP's
DNS Debugging followed and ping responses from Fortigate's both show 290ms response times.
Fortiguard Servers are set to use lowest latency location as well.
Still unreachable, Is there an outage ?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Web Filter Service Error rating timeout
is occurring frequently in Japan as well.
There is a very high latency with the FortiGuard filter rating server.
FortiGuard Filter Rating Server
Service Status
Web Filter 173.243.140.16 631 ms
Outbreak Prevention 173.243.140.16 631 ms
Please try to change the fortiguard settings to these:
config system fortiguard
set fortiguard-anycast disable
set protocol udp
set port 53
set sdns-server-ip 208.91.112.220
set source-ip <WAN IP>
end
Other possible fix, at least it has worked in our company: Change System/Fortiguard/Fortiguard Updates/Update server location/ from "Lowest latency locations" to "restricted to" and choose "US only", then it works again with anycast still on.
Since Monday, same problem in France
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
227 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.