Unable to connect Fortiguard Servers

[AUT_Maverick]

I have a problem that i can't connect to the fortiguard servers. Ping to service.fortiguard.net, update.fortiguard.net and guard.fortinet.net works. I also tryed to change the porst like some articles described me to do it. But i can't solve the problem with this guides. Can you help me?

[abarushka]

Hello,

You may consider to run the commands below in order to debug FortiGuard connectivity:

diagnose debug application update -1
diagnose debug enable

execute update-now

[AUT_Maverick]

Hi

how can i send you the logs?

BR

[Rajneesh]

Hi @AUT_Maverick 

You can refer this KB article for troubleshooting :
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-connect-to-FortiGuard-serv...

[AUT_Maverick]

I have already walked through to this guide. But it didn't helped me

[Rajneesh]

Hi @AUT_Maverick 
Please share the output of the commands :
diagnose debug rating
Also is the SD-WAN is configured on the fortigate ?
If yes did you tried changing the interface-select-method under the Fortiguard settings ?

[AUT_Maverick]

Hello!

Attached the screenshot.

 

[carlosaleman · Accepted solution]

You need to add a web filter profile to any firewall policy, even to a test one in order to "diagnose debug rating" command can show some results. Please add it and try again.

Also please confirm, as Rajneesh asked, if you are using SDWAN. Also if your fortigate is behind another Fortigate, Firewall, Balancer, etc.

Thanks

[AdemKaragoz]

To give an updated answer to an old question, I recently experienced this problem and as a solution, I tested that the problem was resolved by selecting Use FortiGuard Servers in the DNS settings.