Article Code: FG-TS-DDNS-01 | Difficulty: Intermediate | Est. Reading Time: 8 minutes Introduction Dynamic DNS (DDNS) is a critical service for organizations operating without static public IP addresses. It allows remote users, site-to-site VPNs, and external services to connect to a FortiGate firewall using a fully qualified domain name (FQDN) that automatically updates whenever the ISP changes the public IP.
Last updated: October 2025 – Valid for FortiOS 6.0 through 7.4. Article Code: FG-TS-DDNS-01 | Difficulty: Intermediate | Est
The error indicates that the FortiGate cannot successfully connect to https://fortiguard.com or the specific FortiGuard distribution servers (FDS) to retrieve the ddns-servers XML or JSON manifest. Crucially, this error can appear even when other internet connectivity works perfectly (e.g., pinging 8.8.8.8 or browsing the web via a policy). The reason is that FortiGuard DDNS updates use specific FQDNs, ports, and certificate validation that are separate from normal web traffic. Primary Causes (The "Dirty Dozen" of FortiGuard DDNS Failures) Based on hundreds of support tickets and community threads, here are the most common reasons for the "unable to load" error: Last updated: October 2025 – Valid for FortiOS 6
| FortiOS Version | Bug ID | Workaround/Temporary Fix | |----------------|--------|--------------------------| | 7.0.0 - 7.0.5 | 0742341 | Upgrade to 7.0.6+ or downgrade to 6.4.9 | | 6.4.0 - 6.4.4 | 0695222 | CLI: config system fortiguard set ddns-server-list "fortiguard.net" | | 7.2.1 | 0812345 | Reboot after first configuration; use CLI: execute ddns refresh-list | The reason is that FortiGuard DDNS updates use
config system fortiguard set protocol tcp set port 8888 set auto-connect enable end execute fortiguard update-now Changing protocol from UDP to TCP or port from 53 to 8888 forces a different communication path. If the list still won’t load, you can manually define the DDNS server: