FG - Block ALL internet except DNS https://vbr.butler.veeam.com/

[Daagvandermeer]

Is there a way to Block all Internet traffic except Veeam Malware detection URL?

The DNS is changing every time (IP's) so based on IPaddress Its not working always.

And I also created a DNS filter 

But I see still traffic to others based on IP (I think)

Is there another way to fix this?

Kind regards

Daag

[AEK · Accepted solution]

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.

[Jean-Philippe_P]

Hello Daagvandermeer, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[Jean-Philippe_P]

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

[AEK]

DNS filter may not work in such case because clients can access some locations without any DNS query.

Try use Web filter instead.

[Daagvandermeer]

Thanks,

Now I tried.

But when I'm opening the website on the specific Server, Ill get Certificate errors.
(cant validate the certificate...)

[AEK]

butler.veeam.com doesn't exist. Can you try open vbr.butler.veeam.com?

[Daagvandermeer]

My mistake, here is the full url.

[AEK]

Please share the cert error on the browser, and the Web filter profile.

[Daagvandermeer]

here is the Webfilter: 
and here is the screenshot on the server.

[AEK · Accepted solution]

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.