Disable all cloud communication

The FortiGate communicates with various services, such as FortiGuard download and query services and FortiCloud and other cloud related services to download service packages. It also makes queries for various real-time filtering capabilities, and performs logging and synchronization tasks.

The communication statistics can be viewed in the GUI at System > FortiGuard on the FortiGuard settings tab. The statistics can also be retrieved from the CLI:

# diagnose sys service-communication

To disable these communications, use the following CLI command::

config system global
    set cloud-communication disable
end

When cloud-communication is disabled, the forticldd and updated daemons are shutdown and multiple settings are disabled.

The following settings are automatically changed:

config system global
    set fds-statistics disable
end
config system central-management
    set type none
    set include-default-servers disable
end
config system fortiguard
    set antispam-force-off enable
    set outbreak-prevention-force-off enable
    set webfilter-force-off enable
end
config system email-server
    set server ''
end
config system ntp
    set ntpsync disable
end
config system autoupdate schedule
    set status disable
end
config system autoupdate tunneling
    set status disable
end
config log fortiguard setting
    set status disable
end

To reenable cloud communications, each individual setting must be changed after running the following CLI command:

config system global
    set cloud-communication enable
end

For example, to reenable automatically connecting and logging in to FortiCloud:

config system fortiguard
    set auto-join-forticloud enable
end

To reenable the email server:

config system email-server
    set server "fortinet-notifications.com"
    set port 465
    set security smtps
end

To reenable NTP synchronization:

config system ntp
    set ntpsync enable
end