On Fortigate Firewalls | Unable To Load Fortiguard Ddns Servers List

config system ddns
    edit 1
        set ddns-server FortiGuardDDNS
        set ddns-domain "yourhostname.fortiddns.com"
        set ddns-username "your-email@example.com"
        set ddns-password "your-password"
        set interface "wan1"
        set use-public-ip enable
    next
end

Note: The ddns-server option accepts FortiGuardDDNS, DynDNS, NoIP, etc., without needing the remote list.

If your FortiGate is behind another firewall or you have SSL Inspection enabled on the local-out policy, the firewall may distrust its own certificate. config system ddns edit 1 set ddns-server FortiGuardDDNS

Follow these steps in order. Do not skip the diagnostic commands—they are essential. Note: The ddns-server option accepts FortiGuardDDNS , DynDNS

execute update-now
exec cert local-renew

Before blaming FortiGuard, confirm the firewall can reach the internet. If your FortiGate is behind another firewall or

execute ping 8.8.8.8
execute ping fortiguard.com

If both succeed, move to Step 2. If ping to IP works but FQDN fails, jump to Step 3.

If the issue persists, use these deep diagnostic commands from the FortiGate CLI: