Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
snobs
New Contributor II

IPv6+TLS1.3: HTTPS website doesn´t load?

Hello,

 

https://www.degen.solutions/ uses TLS 1.3. When I try to access this homepage the browser shows a white page, only. Disabling IPv6 one my client, the homepage loads without any problem.

 

I am running FortiOS 6.0.5. I already entered a new outgoing IPv6 rule for this single homepage without any IPS/webfilter enabled. Unfortunately the homepage still doesn´t load.

 

Has anyone a solution for this? Is there any known problem?

 

Regards

2 REPLIES 2
Grave_Rose
New Contributor III

Hey snobs,

 

I don't know if this is a firewall issue. It seems that the site doesn't have an associated AAAA record. It has a CNAME but the linked CNAME also doesn't have a AAAA record.

 

--SNIP--

> set type=AAAA > www.degen.solutions Server:         127.0.0.53 Address:        127.0.0.53#53 Non-authoritative answer: www.degen.solutions     canonical name = ext-cust.squarespace.com. > ext-cust.squarespace.com Server:         127.0.0.53 Address:        127.0.0.53#53 Non-authoritative answer: *** Can't find ext-cust.squarespace.com: No answer > set type=A > ext-cust.squarespace.com Server:         127.0.0.53 Address:        127.0.0.53#53 Non-authoritative answer: Name:   ext-cust.squarespace.com Address: 198.49.23.145 Name:   ext-cust.squarespace.com Address: 198.49.23.144 Name:   ext-cust.squarespace.com Address: 198.185.159.145 Name:   ext-cust.squarespace.com Address: 198.185.159.144 > --SNIP--

 

Is the site reachable over IPv6 when not behind the FortiGate?

 

Sean (Gr@ve_Rose)

Site: https://tcpdump101.com Twitter: https://twitter.com/Grave_Rose Reddit: https://reddit.com/r/tcpdump101 Discord: https://discordapp.com/invite/2MZCqn6
emnoc
Esteemed Contributor III

FWIW ssllab does not show this site as ipv6 nor does the ipv6 test 

 

http://socpuppet.blogspot.com/2013/03/ipv6-and-how-to-test-google-style.html

 

https://ipv6-test.com/validate.php

 

 Ken Felix

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Top Kudoed Authors