HI
Anyone have experience and idea how to configure and process generate CSR at FGT and sign by FAC for internal access in order the webpage won't show warning and address bar show "not secure" ?
I did try generate CSR in fortigate and signed by FAC. I did import the local CA from FAC to the end user devices. However, still see the warning and address bar show "not secure"
Appreciate anyone could share the idea and the step i missing
I did refer link below as well
Solved! Go to Solution.
https://docs.fortinet.com/document/fortigate/7.2.0/new-features/499047/new-default-certificate-for-h... This document confirms that if the SAN is not valid the browsers will give the error as you have observed.
Yes, SAN is added as a requirement on modern browser for every web page (not related to FGT only). You will still need to add the SAN even if you have specified the same domain as the common name.
Hi @ck8882 ,
Could you please share more, possibly a screenshot of the warning details.
Regards!
HI Dbu,
Please see the error screen below. According to the document link, i didn't configured the SAN value, would like to know is it required must configured SAN?
Hello
I request you to refer this video link to make it secure.
https://www.youtube.com/watch?v=gMWEH32L4aE\
Thanks & Regards
Mayank Sharma
HI Smayank,
I have to sign the CSR by other side instead of use built-in self create cert.
Thanks
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1740 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.