40F upgraded to 7.4.7: Virtual Server with letsencrypt certs not working anymore

Forum|Forum|1 year ago
May 9, 2025
1 reply
743 views

I upgraded from 7.0.15 to 7.4.7 due to a request from Fortinet support to fix an IPSec issue I had.

After the upgrade, all was working fine.

Then, a couple of days ago, the letsencrypt certificates I use with Virtual Servers were renewed. Successfully.

However, since the renewal, the certificates are not applied anymore to the incoming connections. Instead the self-signed certs of the application are shown to the client.

After some research, I believe that this is because proxy based fw rules are not supported anymore on a 40F with 2GB RAM.

Question: Can I still use the letsencrypt certificates with VIP connections? If yes, what do I need to change on the settings for those connections (FW rule, VIP serttings, etc.)?

Thanks

Dan

Best answer by kaman

Hi Dan,

Yes, the proxy features will not be supported after 7.4.4 for devices having less than 2 GB of RAM.

Please refer to this article:- https://docs.fortinet.com/document/fortigate/7.6.1/administration-guide/519079

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-with-2-GB-RAM-or-less-no-longer-supports/ta-p/316652

Also, after the FortiOS 7.6.0 for the 2 GB RAM models the SSL VPN Tunnel Mode and Web Mode will not be available as a feature in GUI or CLI.

Kindly elaborate on the behavior observed when applying the certificate to the SSL profile (incoming connections), and attach a screenshot of the error for reference

Regards,
Aman

kamanAnswer

Staff