FortiClient Web Filter behavior when FortiGuard is unavailable

[schwarzh]

Hi

we updated our EMS FortiClients to 6.0.1

after this all Websites are blocked with reason Category: Unknown

I´m aware that there is already a KB article describing how to disable this behavior.

http://kb.fortinet.com/kb/documentLink.do?externalID=FD41700

But the Client is NOT unable to reach the Fortiguard Services because of not online.

The Client is unable to reach the Fortiguard Services because of Blocking them by mistake or unawareness

We run very strickt Firewall policies on the Fortigates and so they block the communication but i do not find the right URLs or Ports to get the Client to be able to connect to the Fortiguard Services.

Is there any Information where i can find ALL needed URLs and Ports to open to enable the FortiClient to reach the Fortiguard Services?

I´m aware of the link below but there is no URL-Information available for the fortiguard Servers and we don´t want to allow Port 80 and 443 to "ALL"

http://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-ports-and-protocols/Open%20Ports/Fort...

Any help will be kindly appreciated

Regards

Holger