Many FortiGate administrators encounter the error “unable to load FortiGuard DDNS servers list” or similar messages when the firewall cannot retrieve FortiGuard Dynamic DNS (DDNS) server information. This prevents DDNS hostname registration, impairs FortiGuard-dependent features, and can indicate connectivity, DNS, or certificate issues. The guide below explains likely causes, diagnostic steps, and actionable fixes.
Then restart the FortiGuard service:
If your WAN port is pulling DNS from an ISP, it might not be able to resolve FortiGuard-specific addresses. Then restart the FortiGuard service: If your WAN
: A valid FortiCare contract is often required to communicate with FortiGuard servers for DDNS services. Handshake failures or ISP blocking of port 8888
Modern FortiOS versions use Anycast (DNS over TLS) by default. Handshake failures or ISP blocking of port 8888 or 53 can prevent the server list from loading. Contractual & System Status: An expired FortiCare contract will disable access to these cloud-based services. Time Synchronization: impairs FortiGuard-dependent features