To check actual connectivity to the FortiGuard servers - on the same page, under Filtering subsection, there is Test Connectivity button to push. If you see it red, it is most probably a license/subscription issue to be checked with Fortinet TAC, as subscription checks are done once in a while and are cached. This checks subscription license status, but not always detects connection to the FortiGuard status. It means that if for any reason Fortigate cannot reach Fortiguard servers and it has security rules with Web Filtering by Category configured - those rules will BLOCK users access to ANY website, not just malicious ones.įirst, as emergency but not advisable measure, you can click in Security Profiles -> Web Filter -> FortiGuard - the Web Filtering status should be in green. Most critical of them is Web Filter rating query - if your Fortigate cannot get answer what category the web site belongs to, access to this web site will be blocked by default. Periodic signatures updates for IPS/AppControl/AntiVirus.Real-time querying for visited by users web sites rating.Periodic checking of Fortigate subscription/license validity for Web Filtering/AppControl/AntiVirus/AntiSpam/DNS Filtering.Our guest is Derek Manky head of FortiGuard Labs.Fortiguard is a subscription based service from Fortinet, where your Fortigate queries their servers in real-time for various services: Fortinet also uses those events to inform security updates to its products. FortiGuard Labs analyzes billions of global security events daily and distills those events into actionable information for network and security teams. Sponsor Fortinet provides threat intelligence to customers via its FortiGuard Labs. Today’s Tech Bytes podcast explores the world of threat intelligence that is, information on active and emerging exploits, zero days, attack techniques, and more.