Setting up FortiGuard services

If you have purchased FortiGuard services and registered your FortiGate unit, the FortiGate should automatically connect to FortiGuard and display license information about your FortiGuard services. In this example, you will verify whether the FortiGate unit is communicating with the FortiGuard Distribution Network (FDN) by checking the License Information dashboard widget.

1. Verifying the connection

Go to System > Dashboard > Status and go to the License Information widget.Any subscribed services should have a green checkmark, indicating that connections are successful.A gray X indicates that the FortiGate unit cannot connect to the FortiGuard network, or that the FortiGate unit is
not registered.A red X indicates that the FortiGate unit was able to connect but that a subscription has expired or has not been activated.
You can also view the FortiGuard connection status by going to System > Config > FortiGuard.

2. Troubleshooting communication errors

Go to System > Network > DNS and ensure that the primary and secondary DNS servers are correct.
To test if you are connected to the correct DNS server, go to System > Dashboard > Status and enter the following command into the CLI Console: execute ping guard.fortinet.net
If the connection is successful, the CLI Console should display a similar output as the example.
To test if the FortiGuard services are reachable, go to System > Config > FortiGuard. Under the Web Filtering and Email Filtering Options, select Test Availability. This will indicate which ports are open.If the FortiGate default port (53) cannot be unblocked, go to System > Config > FortiGuard. Under the Web Filtering and Email Filtering Options choose Use Alternate Port (8888).If further problems occur, you may have to unblock ports using the CLI. See the CLI Reference for FortiOS 5.2 for more information.

3. Results

Go to System > Dashboard > Status and go to the License Information widget.Any subscribed services should have a green checkmark, indicating that connections have been established and that the licenses have been verified.
Go to System > Config > FortiGuard. Features and services you are subscribed to should have a green checkmark, indicating that connections are successful.

For further reading, check out FortiGuard in the FortiOS 5.2 Handbook.

Victoria Martin

Victoria Martin

Technical Writer & Head Cookbook Chef at Fortinet
Victoria Martin works in Ottawa as part of the FortiOS technical documentation team. She graduated with a Bachelor's degree from Mount Allison University, after which she attended Humber College's book publishing program, followed by the more practical technical writing program at Algonquin College. She does need glasses but also likes wearing them, since glasses make you look smarter.
Victoria Martin

Latest posts by Victoria Martin (see all)

Share this recipe:

Facebooktwittergoogle_pluslinkedin
In this screenshot, the FortiGate has been successfully tested already
If you are updating FortiGuard using a FortiManager, the FortiGate can also use port 80.

Leave a comment:

Before commenting, please read the site's comment policy. Only questions related to documentation will be answered. For other concerns, please contact Fortinet support.