Visitor III

Solved

FG - Block ALL internet except DNS https://vbr.butler.veeam.com/

12 replies
2417 views
Translate All

Is there a way to Block all Internet traffic except Veeam Malware detection URL?

The DNS is changing every time (IP's) so based on IPaddress Its not working always.

And I also created a DNS filter

But I see still traffic to others based on IP (I think)

Is there another way to fix this?

Kind regards

Daag

FortiGate

AEKAnswer

SuperUser

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.

AEK

Jean-Philippe_P

Staff & Editor

Hello Daagvandermeer,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Translate

Jean-Philippe - Fortinet Community Team

Jean-Philippe_P

Staff & Editor

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

Translate

Jean-Philippe - Fortinet Community Team

AEK

SuperUser

DNS filter may not work in such case because clients can access some locations without any DNS query.

Try use Web filter instead.

Translate

AEK

DaagvandermeerAuthor

Visitor III

Thanks,

Now I tried.

But when I'm opening the website on the specific Server, Ill get Certificate errors.
(cant validate the certificate...)

Translate

AEK

SuperUser

butler.veeam.com doesn't exist. Can you try open vbr.butler.veeam.com?

Translate

AEK

AEKAnswer

SuperUser

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.

Translate

AEK

DaagvandermeerAuthor

Visitor III

Thanks, I changed the SSL inspection to No Inspection. And that fixed it.

Translate

AEK

SuperUser

You need to set it to "Certificate Inspection", not "no-inspection".

Translate

AEK

DaagvandermeerAuthor

Visitor III

Then its not working.

Translate

Sign up

Login with SSO

Login to the community

Login with SSO