Fortinet black logo

Administration Guide

Update server location

Update server location

Administrators can specify the location of the FortiGuard update server used by FortiGate. You can can set the location to only servers in the USA, only servers in the European Union (EU), or to servers with the lowest latency.

In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.

Server location

Anycast domain name

Non-Anycast FQDN addresses

EU only

euupdate.fortinet.net

euguardservice.fortinet.net

US only

usupdate.fortinet.net

usguardservice.fortinet.net

usupdate.fortiguard.net

UDP: usservice.fortiguard.net

HTTPS: ussecurewf.fortiguard.net

Lowest latency (automatic)

globalupdate.fortinet.net

globalguardservice.fortinet.net

update.fortiguard.net

UDP: service.fortiguard.net

HTTPS: securewf.fortiguard.net

On hardware FortiGate devices, the default is Lowest latency locations. On VM devices, the default is US only.

To configure the update server location in the GUI:
  1. Go to System > FortiGuard
  2. In the FortiGuard Updates section, set Update server location to Lowest latency locations or Restrict to.
  3. If Restrict to is selected, choose US only or EU only.

  4. Click Apply.
To configure the update server location in the CLI:
config system fortiguard
    set update-server-location {automatic | usa | eu}
end

Update server location

Administrators can specify the location of the FortiGuard update server used by FortiGate. You can can set the location to only servers in the USA, only servers in the European Union (EU), or to servers with the lowest latency.

In EU locations, it can be required that certain traffic is only handled by servers located in the EU. By setting the update server location to EU only, the FortiGate will use EU domains to resolve to EU servers for FortiGuard traffic to update, URL rating, and IoT servers.

Server location

Anycast domain name

Non-Anycast FQDN addresses

EU only

euupdate.fortinet.net

euguardservice.fortinet.net

US only

usupdate.fortinet.net

usguardservice.fortinet.net

usupdate.fortiguard.net

UDP: usservice.fortiguard.net

HTTPS: ussecurewf.fortiguard.net

Lowest latency (automatic)

globalupdate.fortinet.net

globalguardservice.fortinet.net

update.fortiguard.net

UDP: service.fortiguard.net

HTTPS: securewf.fortiguard.net

On hardware FortiGate devices, the default is Lowest latency locations. On VM devices, the default is US only.

To configure the update server location in the GUI:
  1. Go to System > FortiGuard
  2. In the FortiGuard Updates section, set Update server location to Lowest latency locations or Restrict to.
  3. If Restrict to is selected, choose US only or EU only.

  4. Click Apply.
To configure the update server location in the CLI:
config system fortiguard
    set update-server-location {automatic | usa | eu}
end