Hi there!
Our PMG server is running in a DMZ with limited Internet access (behind outbound proxy).
We have set this in GUI->Configuration: System->Option->HTTP Proxy:
So far, this has not been a problem.
Today I tried to set up Let’s Encrypt certificate, but stumbled upon creating an ACME...