Fortinet Document Library

Version:


Table of Contents

More Links

Update server location
FortiGuard anycast and third-party SSL validation

New Features

7.0.0
Download PDF
Copy Link

Use only EU servers for FortiGuard updates 7.0.2

FortiGuard updates and queries can be sent only to servers located in the European Union (EU).

In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.

Server location

Anycast domain name

Non-Anycast FQDN addresses

EU only

euupdate.fortinet.net

euguardservice.fortinet.net

US only

usupdate.fortinet.net

usguardservice.fortinet.net

usupdate.fortiguard.net

UDP: usservice.fortiguard.net

HTTPS: ussecurewf.fortiguard.net

Lowest latency (automatic)

globalupdate.fortinet.net

globalguardservice.fortinet.net

update.fortiguard.net

UDP: service.fortiguard.net

HTTPS: securewf.fortiguard.net

To configure update server locations to EU only in the GUI:
  1. Go to System > FortiGuard.

  2. In the FortiGuard Updates section, set Update server location to Restrict to, then select EU only.

  3. Click Apply.

To configure update server locations to EU only in the CLI:
config system fortiguard
    set update-server-location eu
end

More Links

Use only EU servers for FortiGuard updates 7.0.2

FortiGuard updates and queries can be sent only to servers located in the European Union (EU).

In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.

Server location

Anycast domain name

Non-Anycast FQDN addresses

EU only

euupdate.fortinet.net

euguardservice.fortinet.net

US only

usupdate.fortinet.net

usguardservice.fortinet.net

usupdate.fortiguard.net

UDP: usservice.fortiguard.net

HTTPS: ussecurewf.fortiguard.net

Lowest latency (automatic)

globalupdate.fortinet.net

globalguardservice.fortinet.net

update.fortiguard.net

UDP: service.fortiguard.net

HTTPS: securewf.fortiguard.net

To configure update server locations to EU only in the GUI:
  1. Go to System > FortiGuard.

  2. In the FortiGuard Updates section, set Update server location to Restrict to, then select EU only.

  3. Click Apply.

To configure update server locations to EU only in the CLI:
config system fortiguard
    set update-server-location eu
end