Network Learners

FortiGuard troubleshooting: The FortiGuard service provides updates to Antivirus, Antispam, IPS, Webfiltering, and more. The FortiGuard Distribution System (FDS) involves a number of servers across the world that provide updates to your FortiGate unit. Problems can occur both with connection to FDS, and its configuration on your local FortiGate unit. Some of the more common troubleshooting methods are listed here including Troubleshooting process for FortiGuard updates FortiGuard server settings Troubleshooting process for FortiGuard updates The following process are the logical steps to take when troubleshooting FortiGuard update problems. This includes antivirus (AV), intrusion protection services (IPS), antispam (AS), and web filtering (WB). Does the device have a valid licence that includes these services? Each device requires a valid FortiGuard license to access updates for some or all of these services. You can verify the support contract status for your devices at the

FortiOS ports In the TCP and UDP stacks, there are 65 535 ports available for applications to use when communicating with each other. Many of these ports are commonly known to be associated with specific applications or protocols. These known ports can be useful when troubleshooting your network. Use the following ports while troubleshooting the FortiGate device: Port(s) Functionality UDP 53 DNS lookup, RBL lookup UDP 53 or UDP 8888 FortiGuard Antispam or Web Filtering rating lookup UDP 53 (default) or UDP 8888 and UDP 1027 or UDP 1031 FDN Server List - source and destination port numbers vary by originating or reply traffic. See the article “How do I troubleshoot performance issues when FortiGuard Web Filtering is enabled?” in the Knowledge Base. UDP 123 NTP Synchronization UDP 162 SNMP Traps UDP 514 SYSLOG - All FortiOS versions can use syslog to send log messages to remote syslog servers. FortiOS v2.80 and v3.0 can also view logs stored remotely on a FortiAnalyzer