Unable To Load Fortiguard Ddns Servers List On Fortigate Firewalls

# Disable DNS override on WAN interface config system interface edit wan1 set dns-server-override disable next end

The outgoing interface (WAN) does not have a correct route to the internet.

: Test connectivity to specific FortiGuard service domains. execute ping service.fortiguard.net execute ping update.fortiguard.net

If your FortiGate GUI displays it typically indicates the firewall cannot reach or resolve FortiGuard's registration servers. This guide covers the common fixes, ranging from DNS configuration to CLI workarounds. 1. Disable "Override Internal DNS" # Disable DNS override on WAN interface config

: The primary WAN interface obtains an external DNS server via DHCP or PPPoE that cannot resolve Fortinet’s proprietary globalddns.fortinet.net domain.

This comprehensive guide breaks down why this error occurs, provides immediate CLI and GUI troubleshooting steps, and covers specific architectural edge cases. 🛑 Root Causes of the Error

Here’s a complete, detailed article on the topic: This guide covers the common fixes, ranging from

When attempting to configure a new Dynamic DNS entry, the FortiGate cannot retrieve the list of available DDNS service providers (e.g., FortiGuard DDNS, No-IP, DynDNS). This results in an inability to select a server type, blocking the configuration of DDNS services.

If resolution fails with default DNS, manually set a reliable DNS server:

to see the exact error occurring during the server list retrieval? This comprehensive guide breaks down why this error

If the system time is significantly off, SSL handshake failures will occur, blocking secure communication with FortiGuard. Step-by-Step Troubleshooting and Resolution 1. Verify Basic Connectivity

. It is also unavailable on high-end appliances, FortiGate-VMs, or when in transparent mode. For persistent issues, you can review detailed logs using diagnose debug application ddnscd -1 diagnose debug enable for your particular FortiOS version to ensure the syntax matches? Unable to load FortiGuard DDNS server list

Note: If you are on FortiOS 7.4 and still experiencing problems, you may also consider using the standard DNS port by setting your DNS protocol to plain DNS (UDP/53), as issues with DNS over TLS and DNS over HTTPS have been reported.

Share your experience or additional tips in the comments below. For more FortiGate troubleshooting, subscribe to our newsletter or check out our related guides on VPN stability and SD-WAN configuration.