Fortigate Web Gui Certificate

Forum|Forum|2 years ago
May 13, 2024
9 replies
3269 views

Hi there,

I am accessing my FortiGate web GUI using a public IP address.

My question is, whenever I access the web GUI using the domain name, it does not show any error regarding an unsecured connection. However, whenever I try to access it using the IP address, it shows an unsecured connection error.

I want the FortiGate to only be accessible via the domain name with a secured, encrypted connection, and not via the IP address

FortiGate

Best answer by ozkanaltas

Hello @Daniyal007 ,

If you can add the IP address of FortiGate to the San area. You will not see a warning when you connect with the IP address.

ozkanaltas

Valued Contributor III

Hello @Daniyal007,

This is normal behavior. If your fqdn and certificate san or cn area are matched this warning disappears.

Probably your certificate san or cn area does not include your IP address. Because of that, you see a warning if you connect with an IP address instead of fqdn.

There is no option for just connecting with fqdn on Fortigate. You need to resume this way.

Daniyal007Author

Explorer

so i have to add CN as domain name and ip address as SAN right?

ozkanaltasAnswer

Valued Contributor III

Hello @Daniyal007 ,

If you can add the IP address of FortiGate to the San area. You will not see a warning when you connect with the IP address.

Daniyal007Author

Explorer

my main focus is not to get warning when i access fortigate.

so according to your recommendation i have to add domain name in CN and ip address in SAN . thats how i dont get waring even when i access with domain or ip Right?

pminarik

Staff

The validity of the certificate is evaluated based on whether the website address in the address bar matches the identity claimed in the certificate (in "subject alternative name" (SAN) attribute), among other things.

Your description is a strong indication that the current certificate has the domain name included in the SAN, but not the IP.

Sign up

Login with SSO

Login to the community

Login with SSO