Lets Encypt failing

Basically:  Let´s Encrypt Deep Dive & Debugging in SFOSv21.0 

Try an client in the internet (phone) and open your browser with https://domain:80 

It should at least show port 80 packets in the packet capture. If not --> You have an firewall issue / routing issue.

SFOS will start a WAF Rule - but the waf rule will expect traffic on Port 80. If this cannot flow, it could be blocked by something in front of the firewall.   

Yep, I'm seeing traffic in the packet capture doing that.

To be sure: You updated to V21.0 GA? Or are  you still running EAP1? 

GA.

Some additional info that I've just found. If I try and access port 80 on the firewalls primary Port B address, it works fine. If I try and access port 80 on the firewalls secondary addresses, all of them fail.

BUT, I can access ports that have active NAT rules on the secondary addresses going to various servers, so it looks like the firewall itself isn't responding to secondary addresses destined for the system itself.

I'll keep digging a bit further and see what I can find.

GA.

Some additional info that I've just found. If I try and access port 80 on the firewalls primary Port B address, it works fine. If I try and access port 80 on the firewalls secondary addresses, all of them fail.

BUT, I can access ports that have active NAT rules on the secondary addresses going to various servers, so it looks like the firewall itself isn't responding to secondary addresses destined for the system itself.

I'll keep digging a bit further and see what I can find.

All good - sorted this out - a stupid copy and paste error from the wrong field at the start of the process.