FortiGuard web filter error logs

When troubleshooting issues related to web filter rating errors, it is helpful to review the following logs. These logs can be found in the FortiOS GUI under Log & Report > Security Events > Web Filter.

Shortened log	Message	Error	Reason
logid="0318012800" type="utm" subtype="webfilter" eventtype="ftgd_err" level="error"… msg="A rating error occurs" error="rating timeout"	A rating error occurs	rating timeout	Occurs if urlfilter sends a request to FortiGuard but does not receive a response before the packet retransmission interval.
logid="0318012801" type="utm" subtype="webfilter" eventtype="ftgd_err" level="warning" … msg="A rating error occurs" error="bad network connection"	A rating error occurs	bad network connection	Occurs if urlfilter sends a request to FortiGuard but does not receive a response before the packet re-transmission interval. The number of lost packets for a given FortiGuard server exceeds a threshold
logid="0318012800" type="utm" subtype="webfilter" eventtype="ftgd_err" level="error" … msg="A rating error occurs" error="no correct FortiGuard information"	A rating error occurs	no correct FortiGuard information	Occurs when urlfilter tried to send a request but was not able to reach any of the FortiGuard servers in its server list. This may be because the list is empty, or urlfilter has already tried all servers but did not get any response.
logid="0318012800" type="utm" subtype="webfilter" eventtype="ftgd_err" level="error" … msg="A rating error occurs" error="unknown"	A rating error occurs	unknown	Occurs when the wad daemon does not specify a reason in the log or there is an internal urlfilter daemon issue.
logid="0318012800" type="utm" subtype="webfilter" eventtype="ftgd_err" level="error" … msg="A rating error occurs" error="invalid license"	A rating error occurs	invalid license	Occurs when urlfilter daemon receives "invalid license" error response from Fortiguard server side when it is doing rating request.
logid="0318012800" type="utm" subtype="webfilter" eventtype="ftgd_err" level="error" … msg="A rating error occurs" error="no rating service is enabled"	A rating error occurs	no rating service is enabled	Occurs when urlfilter service is not found or enabled.

Further actions may also be helpful in monitoring and troubleshooting the underlying web filtering issue:

• Set up Event Handlers in FortiAnalyzer to send alerts upon the appearance of the above logs. See the FortiAnalyzer Event Handler for more information.

• Check the FortiGuard Anycast Query status page for any current outages. An outage in the Web Filter Query will display under the line FGT Anycast Web Filter Query Outage.