A webpage on our website is blocked internally and also intermittently

[WCSITM]

Hey there,

We have a website whose domain is the same as our internal Windows domain name. We have external and internal DNS in place along with a trusted GoDaddy certificate on the website and the specific webpage I'm referencing. This web page runs an inframe that links back to Salesforce.

On the Fortigate side, I have the website, webpage (it's a subdomain) both with wildcard allow rules on the Web Filter. I also have Salesforce allowed on the Application Control. However, the webpage is in a weird state to where it's mostly blocked with "connection reset" errors when you use any of the browsers. When I check the logs in the Fortigate, it shows me UTM Blocked because of SSL. However, the SSL is perfectly fine with a latest and greatest 1.3 certificate. To make matters worse, sometimes the webpage actually isn't blocked on Firefox and when I check those Fortigate logs, it shows as UTM Passing with SSL 1.3 through Microsoft Edge even though its Firefox.

So, I'm not sure what to do here.

[kaman]

Hi WCSITM,

What is your FortiGate firmware version?

Please check the SSL logs and see if you got the Message 'SSL connection is blocked due to unable to retrieve the server's certification'.

If yes, please refer to the document below and make the changes:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-fix-SSL-connection-is-blocked...

config firewall ssl-ssh-profile
edit <profile_name>
config https
set cert-probe-failure allow <--- Default setting is block, whereas allow is identical in behaviour to previous 7.2.x and 7.4.x for flow-based inspection.
end
end

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman