config system fortiguard set fortiguard-anycast disable set protocol udp set port 8888 set sdns-server-ip "208.91.112.220" end Then restart the FortiGuard service:
config system ddns edit 1 set ddns-server noip # Options: dyndns, noip, FortiGuardDDNS set ddns-domain "yourhost.no-ip.com" set ddns-username "user" set ddns-password "pass" set interface "wan1" next end After a few minutes, verify update status:
execute ping guard.fortinet.net If ping fails with ping: cannot resolve guard.fortinet.net: Unknown host , you have a DNS problem. You can configure any supported DDNS provider manually
show system dns Ensure they are valid (e.g., 8.8.8.8 , 1.1.1.1 , or your internal resolvers). Also verify:
If all else fails, remember that the CLI bypasses this list entirely. You can configure any supported DDNS provider manually and achieve full functionality without ever seeing the graphical list. The error "unable to load fortiguard ddns servers
In this deep-dive article, we will explore the root causes of this error, provide step-by-step diagnostic commands, and walk through permanent fixes—from DNS configuration to FortiGuard web filtering overrides. When you navigate to Network > DNS or Network > DDNS and attempt to edit or create a new DDNS entry, the FortiGate must query Fortinet’s central servers (typically guard.fortinet.net or service.fortinet.com ) to retrieve an XML or JSON list of supported DDNS providers. The error "unable to load fortiguard ddns servers list" indicates that the HTTP/HTTPS request to these endpoints failed.
For persistent cases, engage Fortinet TAC with the diagnostic outputs from diagnose debug flow and execute curl to pinpoint the exact connectivity break. Share your experience or additional tips in the comments below. For more FortiGate troubleshooting, subscribe to our newsletter or check out our related guides on VPN stability and SD-WAN configuration. For more FortiGate troubleshooting
Check the FortiGate’s configured DNS servers: