Troubleshooting Tip: WebFiltering not working - The service is not enabled

[avalle_FTNT]

Description

When troubleshooting web filter issues, it may be seen that the FortiGate is unable to categorize URLs.

Verifying ping connection to FortiGuard service is successful:

service.fortiguard.net
update.fortiguard.net

However, executing the following command returns an error message:

FGT# diagnose debug rating
Locale       : english

The service is not enabled.

FGT#

Solution

Verify the FortiGuard configuration status:

FGT# show system fortiguard
.
.
set webfilter-force-off : enable

If "webfilter-force-off" is enabled, set it to disable:

set webfilter-force-off disable

Related Articles

Troubleshooting Tip : Resolving FDS Communication Issues (FortiGuard Distribution Servers)