Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ByteHaven
New Contributor II

Fortinac DNS configuration

Hello FNAC admins,

I'm reading this part of the administration guide "DNS configuration and I don't quite understand what this configuration actually do, is it a mandatory step in fortinac's deployment or we can skip it ?

 

Thanks in advance.

BR,

1 Solution
ebilcari
Staff
Staff

I believe this step was required when separate Application and Control servers were used to deploy FNAC. Now that both roles are on the same appliance, the Admin UI can be easily accessed using the IP during initialization, and then a domain can be configured and a certificate signed for that domain.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.

View solution in original post

5 REPLIES 5
ebilcari
Staff
Staff

I believe this step was required when separate Application and Control servers were used to deploy FNAC. Now that both roles are on the same appliance, the Admin UI can be easily accessed using the IP during initialization, and then a domain can be configured and a certificate signed for that domain.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.
ByteHaven
New Contributor II

Hello Emijron,

Okay I see, thank you for your answer. But isn't it a bit weird that this document/feature is still available in the latest FNAC version 7.6.0 even tho as you said it isn't required anymore cause they combined the two servers in one ?

BR,

ebilcari

I have already requested a revision of this section of the guide. Thank you for pointing that out.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.
ByteHaven
New Contributor II

Thank you so much for your help Emirjon

 

BR,

hayasma6
New Contributor

Ideally, when clients are isolated they aren't allowed to talk to anything but the NAC server. You can however allow this traffic to get access to the internet but you will need to create a DNS record for abc.com it on the NAC server so clients know how to reach it.

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors