IPv6 FortiGuard connections

The Fortinet DNS can resolve FortiGuard related servers to both IPv4 and IPv6 addresses. FortiOS daemons (update, forticldd, url) connect using either IPv4 or IPv6 addresses. The first available connection will be used for updates or the rating service.

To configure an interface and route for IPv6:

config system interface
    edit "wan1"
        set vdom "root"
        config ipv6
            set ip6-address 2000:172:16:200::1/64
        end
    next
end

config router static6
    edit 1
        set gateway 2000:172:16:200::254
        set device "wan1"
    next
end

To configure push updates:

config system autoupdate push-update
    set status enable
    set override enable
    set address "2620:101:9005:3860::94"
end