Unable To Load Fortiguard Ddns Servers List On Fortigate Firewalls [better] [ Windows ]
Configuring Dynamic DNS (DDNS) on a FortiGate firewall is a common requirement for remote access, site-to-site VPNs, or simply managing a firewall with a dynamic public IP address. Using FortiGuard DDNS simplifies this by providing a reliable, integrated service.
If the GUI refuses to populate the list, you can configure the DDNS entry entirely through the CLI, skipping the dependency on the dropdown menu. fortitenet
Switch from the default servers to highly reliable public DNS servers. 1.1.1.1 (Cloudflare) or 8.8.8.8 (Google) Secondary DNS: 9.9.9.9 (Quad9) or 8.8.4.4 Click Apply . Clear the DNS cache via CLI to force an immediate refresh: execute dns flush Use code with caution. Step 3: Configure FortiGuard Source IP and Port
A: The issue is rarely about the presence of an internet connection. It is usually about specific configuration conflicts (like DNS override) or communication protocols between the FortiGate and the FortiGuard servers (like anycast or TLS handshake failures). Configuring Dynamic DNS (DDNS) on a FortiGate firewall
The FortiGuard DDNS list requires a valid FortiCare contract. Check the License Information widget on your dashboard to ensure "FortiGuard Support" is green.
Note: If you are on FortiOS 7.4 and still experiencing problems, you may also consider using the standard DNS port by setting your DNS protocol to plain DNS (UDP/53), as issues with DNS over TLS and DNS over HTTPS have been reported.
The DDNS server list is tied to an active FortiCare registration. If the FortiGate cannot validate its license, it won't load the servers. Go to and look at the Licenses widget. Verify that FortiCare Support shows a green checkmark. fortitenet Switch from the default servers to highly
Unable to connect to FortiGuard servers. - Fortinet Community
Troubleshooting: "Unable to Load FortiGuard DDNS Servers List" on FortiGate
config system fortiguard set ddns-server-ip 173.243.138.225 end Step 3: Configure FortiGuard Source IP and Port
If the GUI remains empty, use the following CLI commands to see the real-time interaction between your firewall and the DDNS servers:
: If the server list loads but updates fail, restart the DDNS-specific daemon. fnsysctl killall ddnscd Manual CLI Configuration (Workaround)