Public IP SSL from any IP

Forum|Forum|2 years ago
October 12, 2023
3 replies
2330 views

Is it possible for the Public IP of FortiGate?

I have configured DDNS for my FortiGate but if I access that FortiGate using a public IP it gives me a "Not Secure" warning.
And that XXX.fortiddns.com working fine without a warning
Does anyone have an idea on this please share the steps to be performed
I want to remove that warning for that public IP #fortigate

FortiGate

smayank

Staff

Hello

So as per your query whenever you take access from DDNS URl it works fine and when you take access with ip address it shows error.

So once ddns provides ip address to clinet it does ssl handshake inside client hello there will be ddns url in SNI field.

When firewall receives this packet it matches common name with certificate.
If common name and SNI field matches it presents certificate which is configured in administraticve settings in clients.

When you access with IP address it checks common name and SAN if it not matches it shows warning.

https://www.youtube.com/watch?v=gMWEH32L4aE

Please refer this video to mitigate this issue

Thanks & Regards

Mayank Sharma

hbac

Staff

Hi @Mehulp,

It depends on the certificate you are using for FortiGate HTTPS access. I believe the certificate CN only matches your DDNS but doesn't match the IP address.

Regards,