Troubleshooting Tip: 'This Connection Is Not Private'

[Raghu_Kumar]

Description	This article addresses the error message 'This Connection Is Not Private', which commonly occurs when accessing any website.
Scope	FortiGate.
Solution	This error, 'This Connection Is Not Private', usually occurs due to an issue with the SSL certificate on the website being accessed (For Eg,www.example.com). It can be triggered by a few common issues: Expired or Invalid SSL Certificate: If the website's SSL certificate has expired or is invalid, users will see this warning. Check the certificate validity on www.example.com DNS Resolution Issues: Sometimes, DNS misconfigurations can lead to SSL warnings if the wrong IP address is associated with the domain. Confirm the DNS settings on FortiGate and ensure they’re pointing to valid and reliable DNS servers. FortiGate Web Filter or SSL Inspection: If SSL/HTTPS inspection is enabled on the FortiGate, it can cause SSL certificate issues if not configured correctly. Review the SSL/HTTPS inspection policies on FortiGate. If SSL inspection is enabled, ensure the FortiGate's certificate is trusted on client devices. Captive Portal Settings: If the FortiGate's interface has a captive portal, it might interfere with SSL connections, especially if the portal is misconfigured or there's an authentication issue. Ensure that the captive portal settings are correct and users can authenticate properly. FortiGuard Servers Reachability: If FortiGuard services (such as Web Filtering) are enabled, they rely on connectivity to FortiGuard servers. If FortiGate cannot reach these servers, it may result in SSL errors or restrictions when browsing. Related Documents: Expired or Invalid SSL Certificate  DNS Server Configuration   FortiGate Certificate Issues  Captive Portal Settings  Troubleshooting Tip: FortiGuard Servers Reachability