Technical tip: DNS over TLS using Cloudflare DNS

This article describes how to configure FortiGate DNS over TLS using Cloudflare DNS.

Cloudflare DNS:

Primary DNS 1.1.1.2

Secondary DNS 1.0.0.1

From GUI:

From CLI:

# config system dns
    set primary 1.1.1.2
    set secondary 1.0.0.1
    set protocol dot
    set server-hostname "1dot1dot1dot1.cloudflare-dns.com"
end

Note.

Using incorrect server hostname will result to DNS failure.

Related article:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-DNS-over-TLS-configuration/ta-p/193830