Unable To Load Fortiguard Ddns Servers List On Fortigate Firewalls Jun 2026

The FortiGate cannot resolve the URL of the FortiGuard update servers.

The most common cause of this error is that the firewall's WAN interface obtains its IP via DHCP or PPPoE and automatically overwrites your configured system DNS. Many local ISP DNS servers cannot properly resolve Fortinet’s proprietary dynamic DNS assignment domains. How to fix it in the GUI: Navigate to . Edit your active WAN interface (e.g., wan1 or port1 ). Locate the Advanced or Addressing Mode options. Toggle off the setting Override internal DNS . Click OK . 2. Verify Underlying System DNS and Connectivity

diagnose debug application update -1 diagnose debug enable execute update-now The FortiGate cannot resolve the URL of the

: The FortiGate cannot resolve the Fully Qualified Domain Names (FQDNs) used by FortiGuard.

If the system time is significantly off, SSL handshake failures will occur, blocking secure communication with FortiGuard. Step-by-Step Troubleshooting and Resolution 1. Verify Basic Connectivity How to fix it in the GUI: Navigate to

If your firewall's date and time are incorrect, SSL handshakes with FortiGuard will fail. Ensure NTP is syncing correctly. 5. Advanced: Management Settings & Interface Selection

config system ddns edit 1 set ddns-server noip # Options: dyndns, noip, FortiGuardDDNS set ddns-domain "yourhost.no-ip.com" set ddns-username "user" set ddns-password "pass" set interface "wan1" next end Toggle off the setting Override internal DNS

Create an IPv4 policy from the root or management VDOM to your WAN interface:

: The primary WAN interface obtains an external DNS server via DHCP or PPPoE that cannot resolve Fortinet’s proprietary globalddns.fortinet.net domain.

: Ensure the firewall can reach the FortiGuard domains. From the CLI, try to ping update.fortiguard.net service.fortiguard.net Restart the DDNS Daemon

FortiGate firewall administrators cannot retrieve the Dynamic DNS (DDNS) server list from FortiGuard. Impact: Manual DDNS configuration is blocked, and automated DDNS updates fail or cannot be set up. Severity: Medium to High (depending on reliance on DDNS for VPN/hostname resolution). Status: Root cause identified as connectivity, DNS resolution, or FortiGuard service availability.