Is anyone suddenly receiving certificate errors? A large number of customers are reporting certificate errors when browsing exempted/trusted domains. The SSL logs in the GUI show, "Server certificate blocked".
Talked to support. They've confirmed they're working on it, but it is an issue with the Identrust expiration. Probably going to turn off the expired cert filter. I think that's about all we can do for now.
I'm almost positive it's an issue with change of Let's Encrypt over to the ISRG certificate. Every site that was reported blocked that I've reviewed is using a Let's Encrypt certificate. I've got a case open and I'm waiting on a fix. In the meantime, I've done the only thing I can by allowing expired certificates so people can continue to work. Let's Encrypt is too commonly used to simply block any site using them.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.