Description |
This article describes that the SD-WAN Network Monitor license is used to perform the speed test for interfaces.
It should be possible to test the interface speed by selecting the execute speed test option as shown in the image:
Sometimes when selecting execute speed test it shows an error of 'Failed Dependency'.
Run the following commands for debugging: diagnose debug reset diagnose debug application forticldd -1
From the results, it is necessary to check the IP of the server it is trying to connect. In the following sample output, the IP of the server is 154.52.6.199.
[767] ssl_ctx_create_new: SSL CTX is created |
Scope | FortiGate, all firmware. |
Solution |
In this case, it is necessary to check the reachability to the FortiGuard servers by the following ping commands.
exe ping service.fortiguard.net exe ping update.fortiguard.net
Also, try pinging the server IP from the debugs. In this case:
exe ping 154.52.6.199
Check the route for the FortiGuard servers.
Refer to the link below for FortiGuard server reachability troubleshooting: Troubleshooting Tip: Unable to connect to FortiGuard servers.
If using SD-WAN, it is necessary to check the SD-WAN rules for FortiGuard services.
Also, in some cases where doing load balancing and using all the interfaces in the default route, try creating a static route for this server through the interface. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.