Fortinet Document Library

Version:

Version:

Version:

Version:


Table of Contents

More Links

FortiGuard anycast and third-party SSL validation

Administration Guide

Download PDF
Copy Link

Update server location

The location of the FortiGuard update server that the FortiGate connects to can be set to only servers in the USA, only servers in the European Union (EU), or to the servers with the lowest latency.

In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.

Server location

Anycast domain name

Non-Anycast FQDN addresses

EU only

euupdate.fortinet.net

euguardservice.fortinet.net

US only

usupdate.fortinet.net

usguardservice.fortinet.net

usupdate.fortiguard.net

UDP: usservice.fortiguard.net

HTTPS: ussecurewf.fortiguard.net

Lowest latency (automatic)

globalupdate.fortinet.net

globalguardservice.fortinet.net

update.fortiguard.net

UDP: service.fortiguard.net

HTTPS: securewf.fortiguard.net

On hardware FortiGate devices, the default is Lowest latency locations. On VM devices, the default is US only.

To configure the update server location in the GUI:
  1. Go to System > FortiGuard
  2. In the FortiGuard Updates section, set Update server location to Lowest latency locations or Restrict to.
  3. If Restrict to is selected, choose US only or EU only.

  4. Click Apply.
To configure the update server location in the CLI:
config system fortiguard
    set update-server-location {automatic | usa | eu}
end

More Links

Update server location

The location of the FortiGuard update server that the FortiGate connects to can be set to only servers in the USA, only servers in the European Union (EU), or to the servers with the lowest latency.

In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.

Server location

Anycast domain name

Non-Anycast FQDN addresses

EU only

euupdate.fortinet.net

euguardservice.fortinet.net

US only

usupdate.fortinet.net

usguardservice.fortinet.net

usupdate.fortiguard.net

UDP: usservice.fortiguard.net

HTTPS: ussecurewf.fortiguard.net

Lowest latency (automatic)

globalupdate.fortinet.net

globalguardservice.fortinet.net

update.fortiguard.net

UDP: service.fortiguard.net

HTTPS: securewf.fortiguard.net

On hardware FortiGate devices, the default is Lowest latency locations. On VM devices, the default is US only.

To configure the update server location in the GUI:
  1. Go to System > FortiGuard
  2. In the FortiGuard Updates section, set Update server location to Lowest latency locations or Restrict to.
  3. If Restrict to is selected, choose US only or EU only.

  4. Click Apply.
To configure the update server location in the CLI:
config system fortiguard
    set update-server-location {automatic | usa | eu}
end