Run these commands to ensure the firewall can actually reach the Fortinet Update Servers : execute ping service.fortiguard.net execute ping update.fortiguard.net

Note: If you use the IP 173.243.138.226 , ensure Anycast is disabled, as 173.243.138.225 is typically the Anycast global address . 3. Change the Communication Port