Network -> Interfaces -> Edit WAN -> Uncheck 'Override internal DNS' . CLI:
: Ensure the firewall can reach the FortiGuard domains. From the CLI, try to ping update.fortiguard.net service.fortiguard.net Restart the DDNS Daemon Network -> Interfaces -> Edit WAN -> Uncheck
FortiGuard DDNS services often require the firewall itself to be configured to use FortiGuard DNS servers . Network -> Interfaces -> Edit WAN -> Uncheck
Before diving into complex configurations, verify basic network reachability from the FortiGate itself. Network -> Interfaces -> Edit WAN -> Uncheck
The system will automatically restart this process immediately .
FortiGates treat their own generated traffic (DNS, DDNS, FortiGuard updates, NTP) differently from traffic passing through the device. This is called . A common oversight is failing to create a policy allowing the FortiGate’s management IP to reach the internet.