Web Filter Rating - Timed Out Getting Blocked

[imuscleupcarat]

Good Day Everyone,

Just want to ask if there are other approach to solve or somehow adjust web ratings provided by FortiGuard.

Client has already "allowed rating options when rating errors occur".

But we think of it as a temporary solution.

Are there any other alternatives for this?

Is this a known issue for 7.4.3(FortiGate FW 3700D)

I have attached photos for reference.

FortiGate  

#FortiGuard

[dbhavsar]

Hi @imuscleupcarat ,

- That must occurred because the web-filter service was either down/unreachable. Can you confirm if this occurred after Daylight Saving Time changed or not. 
- you can make following changes:
config system fortiguard

set fortiguard-anycast disable

set protocol udp

set port 53/8888

end

- Or you can restart the urlfilter daemon service by following command:
diagnose test application urlfilter 99

[imuscleupcarat]

Hi @dbhavsar ,

Does executing this commands requires maintenance window?

What would be the effects for this on live production?

Also as confirmed, no changes on Daylight Saving Time during the issue.

Regards

[dbhavsar]

Hello @imuscleupcarat,

There shouldn't be any issues even if firewall is in production. Check this article there is more details in this:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-FortiGuard-Web-Filtering-problems/ta...

[ezhupa]

Hello, 

The below KB gives an extended explanation and most frequent scenarios regarding FortiGate - Fortiguard connectivity:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGuard-Overview-and-Troubleshooting/ta...

I would suggest taking a look as it goes through multiple scenarios and could be of help also in the future. 

In your case I believe the issue would be resolved by disabling anycast and changing port to 8888 and udp like the previous suggestion. 

config system fortiguard

set fortiguard-anycast disable

set protocol udp

set port 8888

end

Hope it helps!