Beginning with FortiOS 6.4, anycast is used to update pattern files, web-filter and DNS filter queries. Unfortunately the IP address of the DNS filter is not set automatically in FortiOS. It took me quite a while, to find out the names used.
Here they are:
| Service | Unicast FQDN Adresse | Anycast FQDN Adresse |
|---|---|---|
| FortiGuard Object Download | update.fortiguard.net | globalupdate.fortinet.net |
| WebFilter, AntiSpam Ratings über HTTPS | securewf.fortiguard.net | globalguardservice.fortinet.net |
| WebFilter, Antispam Ratings über UDP | service.fortiguard.net | |
| Device Info Collection | globaldevcollect.fortinet.net | |
| Device Info Query | globaldevquery.fortinet.net | |
| FortiGate Cloud Logging | logctrl1.fortinet.com | globallogtrl.fortinet.net |
| FortiGate Cloud Management | mgrctrl1.fortinet.com | globalmgrctrl.fortinet.net |
| FortiGate Cloud Messaging | msgctrl1.fortinet.com | globalmsgctrl.fortinet.net |
| FortiGate Cloud Sandbox | aptctrl1.fortinet.com | globalaptctrl.fortinet.net |
| Product API used by OCVPN and GUI Icon Download | productapi.fortinet.com | globalproductapi.fortinet.net |
| FortiCare Registration | directregistration.fortinet.com | globalregistration.fortinet.net |
| Secure DNS (DNS Filter) FortiGate SDNS Server | sdns.fortinet.net | globalsdns.fortinet.net |
| FortiCloud FortiClient | forticlient.fortinet.net | globalfctupdate.fortinet.net |
| FortiMobile Tokens | directregistration.fortinet.com | globalftm.fortinet.net |
| EMS Cloud | forticlient-emsproxy.forticloud.com | |
| DDNS | ddns.fortinet.net | globalddns.fortinet.net |
| GeoIP | gip.fortinet.net | globalgip.fortinet.net |
| IP Blocklist | ipbl.fortinet.net |
Fortinet maintains a list with ⇒Ports and Protocols.
Most wanted servers are the FortiGate SDNS Servers:
Unicast:
- USA: 208.91.112.220
- UK: 45.75.200.89 UK
Anycast:
- 173.243.140.53