This error prevents the firewall from fetching the official list of supported DDNS providers (such as FortiGuard DDNS, No-IP, or DynDNS) from Fortinet’s servers. Without this list, you cannot select a provider, configure the service correctly, or update your dynamic IP.
Introduction FortiGate firewalls offer a built-in Dynamic DNS (DDNS) client that allows users to map a static hostname to a dynamic public IP address. This feature is critical for VPN endpoints, self-hosted services, and remote access configurations. However, a notoriously frustrating error message can appear when configuring or troubleshooting this feature: "Unable to load FortiGuard DDNS servers list." This error prevents the firewall from fetching the
config system fortiguard set fortiguard-anycast disable set protocol udp set port 8888 set sdns-server-ip "208.91.112.220" end Then restart the FortiGuard service: This feature is critical for VPN endpoints, self-hosted
For persistent cases, engage Fortinet TAC with the diagnostic outputs from diagnose debug flow and execute curl to pinpoint the exact connectivity break. Share your experience or additional tips in the comments below. For more FortiGate troubleshooting, subscribe to our newsletter or check out our related guides on VPN stability and SD-WAN configuration. For more FortiGate troubleshooting