Unable to connect to fortiguard servers

[unknown1020]

Good morning friends, a question.

Could you please help me with this query, because that message appears "Unable to connect to fortiguard servers"

In firewall v7.0.12 we are using the DNS of the ISP provider and no drops are observed. There is no latency

The licenses are in UP and expire in 2024.

What could be happening? thanks for your comments

[Satory · Accepted solution]

You may try disabling anycast and use pure DNS:

config system fortiguard
  set fortiguard-anycast disable
  set port 53
  set source-ip x.x.x.x
end

[Satory · Accepted solution]

You may try disabling anycast and use pure DNS:

config system fortiguard
  set fortiguard-anycast disable
  set port 53
  set source-ip x.x.x.x
end

[nnair]

You may also check the below links:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGuard-is-not-reachable-via-Anycast-de...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGuard-Services-are-Unreachable/ta-p/1...

[pavankr5]

Hello @unknown1020 

 Unable to connect to FortiGuard servers 
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-connect-to-FortiGuard-serv...

Thanks,

Pavan

[smayank]

Hello 

Fortiguard could be ureachable when it sends queries from lowest index interface

There are method to add interface in fortiguard settings.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Functionality-of-set-interface-select-meth...

Please check by taking snifferes if quries going towards fortiguard server is going with some random IP.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Functionality-of-set-interface-select-meth...
Thanks & Regards 
Mayank Sharma

[hbac · Accepted solution]

Hi @unknown1020,

Are you able to ping update.fortiguard.net by running "execute ping update.fortiguard.net" in the CLI? You can try to make the following changes and see if it helps: 

config system fortiguard
set fortiguard-anycast disable
set sdns-server-ip 208.91.112.220
end

Regards,