Troubleshooting
If you need to add or renew a subscription, go to Fortinet Support.
If a license that should be active isn’t currently available, you can use the following steps to troubleshoot your connection. After each troubleshooting step, go to System > FortiGuard to check if the licenses are now showing as available.
Connecting to FortiGuard
-
To prompt your FortiGate to connect to FortiGuard, connect to the CLI and use the following command:
diagnose debug application update -1
diagnose debug enable
execute update-now
-
If your FortiGate has multiple VDOMs, make sure that you use the management VDOM and that the VDOM has Internet access. To set the proper VDOM as the management VDOM, use the following command:
config system global
set management-vdom
end
Checking FortiGuard filtering
-
To test if FortiGuard is reachable, go to System > FortiGuard.
-
Under Filtering, check Filtering Services Availability. If you don’t see a green check mark, select Check Again.
-
If you still don’t see a green check mark, change the FortiGuard Filtering Port to the alternate port (8888). Select Apply and see if the services become available.
If you're updating FortiGuard using a FortiManager, the FortiGuard Filtering Port can also be 80.
Testing the DNS
-
To test if your DNS can reach FortiGuard, use the following CLI command:
execute ping guard.fortinet.net
-
If you can reach the address, run the following command:
diagnose debug application update -1
diagnose debug enable
execute update-now
-
If you can’t reach the address, go to System > DNS and verify that the settings are correct. Then run the PING test again.
Contacting Support
If you still can’t connect, contact Fortinet Support.
