Update server location
The location of the FortiGuard update server that the FortiGate connects to can be set to only servers in the USA, only servers in the European Union (EU), or to the servers with the lowest latency.
In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.
|
Server location |
Anycast domain name |
Non-Anycast FQDN addresses |
|---|---|---|
|
EU only |
euupdate.fortinet.net euguardservice.fortinet.net |
|
|
US only |
usupdate.fortinet.net usguardservice.fortinet.net |
usupdate.fortiguard.net UDP: usservice.fortiguard.net HTTPS: ussecurewf.fortiguard.net |
|
Lowest latency (automatic) |
globalupdate.fortinet.net globalguardservice.fortinet.net |
update.fortiguard.net UDP: service.fortiguard.net HTTPS: securewf.fortiguard.net |
On hardware FortiGate devices, the default is Lowest latency locations. On VM devices, the default is US only.
To configure the update server location in the GUI:
- Go to System > FortiGuard
- In the FortiGuard Updates section, set Update server location to Lowest latency locations or Restrict to.
- If Restrict to is selected, choose US only or EU only.
- Click Apply.
To configure the update server location in the CLI:
config system fortiguard
set update-server-location {automatic | usa | eu}
end