Let's Encrypt and CNAME

[aagrafi1]

Hello,

I'm trying to issue a Let's Encrypt certificate through the FG GUI and I'm getting a message "Timeout during connect (likely a firewall problem)". Incoming ports 80 and 443 are open in the fw. Do you know if I need a CNAME record in my DNS settings in order for this to work?

Thanks

[ebilcari]

Hi,

As specified on the documentation the FortiGate must have a public IP address and a hostname in DNS (FQDN) that resolves to the public IP address. (a public DNS record)

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/822087/acme-certificate-support