Visitor III

Solved

FG - Block ALL internet except DNS https://vbr.butler.veeam.com/

Forum|Forum|1 year ago
March 24, 2025
12 replies
2394 views

Is there a way to Block all Internet traffic except Veeam Malware detection URL?

The DNS is changing every time (IP's) so based on IPaddress Its not working always.

And I also created a DNS filter

But I see still traffic to others based on IP (I think)

Is there another way to fix this?

Kind regards

Daag

FortiGate

Best answer by AEK

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.

Jean-Philippe_P

Staff & Editor

Hello Daagvandermeer,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Jean-Philippe - Fortinet Community Team

Jean-Philippe_P

Staff & Editor

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

Jean-Philippe - Fortinet Community Team

AEK

SuperUser

DNS filter may not work in such case because clients can access some locations without any DNS query.

Try use Web filter instead.

AEK

DaagvandermeerAuthor

Visitor III

Thanks,

Now I tried.

But when I'm opening the website on the specific Server, Ill get Certificate errors.
(cant validate the certificate...)

AEK

SuperUser

butler.veeam.com doesn't exist. Can you try open vbr.butler.veeam.com?

AEK

AEKAnswer

SuperUser

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.

AEK

DaagvandermeerAuthor

Visitor III

Thanks, I changed the SSL inspection to No Inspection. And that fixed it.

AEK

SuperUser

You need to set it to "Certificate Inspection", not "no-inspection".

AEK

DaagvandermeerAuthor

Visitor III

Then its not working.

Sign up

Login with SSO

Login to the community

Login with SSO