FG - Block ALL internet except DNS https://vbr.butler.veeam.com/

[Daagvandermeer]

Is there a way to Block all Internet traffic except Veeam Malware detection URL?

The DNS is changing every time (IP's) so based on IPaddress Its not working always.

And I also created a DNS filter 

But I see still traffic to others based on IP (I think)

Is there another way to fix this?

Kind regards

Daag

[AEK · Accepted solution]

Are you using deep inspection? If so then it seems the internal server is not trusting the signing CA on FG.

[Daagvandermeer · Accepted solution]

Thanks, I changed the SSL inspection to No Inspection. And that fixed it.

[AEK]

You need to set it to "Certificate Inspection", not "no-inspection".

[Daagvandermeer]

Then its not working.