fortigate 指派token失敗 forticare無法訪問

  環境:

fortigate 防火牆

異常狀況:

有用戶認證的設定中，要指派token時，會跳出 forticare無法訪問的錯誤訊息。

已經指派過的用戶，要改其他token也是一樣錯誤。

解決過程:

原廠有說明 https://community.fortinet.com/fortigate-3/technical-tip-fortigate-unable-to-access-several-fortiguard-services-due-to-crl-scope-errors-september-2026-229879

執行下列指令清除快取就可以排除問題，不會影響防火牆原本的服務

FortiGate # config system fortiguard

FortiGate (fortiguard) # set fortiguard-anycast disable

FortiGate (fortiguard) # end

FortiGate # config system fortiguard

FortiGate (fortiguard) # set fortiguard-anycast enable

FortiGate (fortiguard) # end

Environment:

FortiGate Firewall

Issue:

When assigning a token in the user authentication settings, an error message appears indicating that FortiCare cannot be accessed.

The same error occurs when changing the token for users who have already been assigned a token.

Troubleshooting and Resolution:

Fortinet has provided a technical tip regarding this issue:

Fortinet Technical Tip

The issue can be resolved by clearing the FortiGuard cache using the following commands.

This procedure does not affect the existing firewall services.

FortiGate # config system fortiguard

FortiGate (fortiguard) # set fortiguard-anycast disable

FortiGate (fortiguard) # end

FortiGate # config system fortiguard

FortiGate (fortiguard) # set fortiguard-anycast enable

FortiGate (fortiguard) # end