Unable To Load Fortiguard Ddns Servers List On Fortigate Firewalls

config webfilter ftgd-local-cat edit "custom-whitelist" set category 0 set domain "update.fortiguard.net" next end

If the issue persists and you’ve ruled out networking, you may be hitting a known bug.

Before upgrading, check the release notes for “DDNS” or “FortiGuard list” fixes.

Use the dedicated FortiGuard diagnostic tool: Thus, the issue is almost always related to

config system ntp set ntpsync enable set server "pool.ntp.org" end

: The firewall cannot resolve the hostnames for FortiGuard servers.

Thus, the issue is almost always related to . When you click the DDNS server dropdown, the

The FortiGate’s management VDOM (often root ) must have a firewall policy permitting traffic from its own management IP to the internet. Many administrators overlook the fact that .

When you click the DDNS server dropdown, the FortiGate does not store a static, hardcoded list of servers. Instead, it dynamically queries FortiGuard’s centralized servers to fetch the most current list of supported DDNS providers. This process involves:

Even if DNS resolves correctly, the connection to the FortiGuard servers might be blocked or filtered. hardcoded list of servers. Instead

: Anycast is the default communication method in newer FortiOS versions. If it fails, you can revert to legacy UDP/HTTPS CLI commands config system fortiguard fortiguard-anycast disable protocol udp # or set protocol https # or set port 443 Use code with caution. Copied to clipboard Restart the DDNS Daemon

execute fortiguard-service list

config system dns set primary 8.8.8.8 set secondary 1.1.1.1 end