FortiGate SSL Deep Inspection Issues
application Not working when enabling SSL Deep Inspection






(HTTPS) (SSL) .
(C&C) . .
FortiGate SSL . .
HTTPS SSL SMTPS POP3S IMAPS FTPS.





FortiGate FortiGate Fortinet_CA_SSL Fortinet_CA_Untrusted CA .
Fortinet_CA_SSL FortiGate. CA Fortinet_CA_SSL FortiGate .
Fortinet_CA_SSL Fortinet_CA_U . Fortinet_CA_ .

Fortinet_CA_SSL :



  1. FortiGate > SSL / SSH Inspection .
  2. CA Fortinet_CA_SSL .
  3. .


  4. .
  5. . .




.

.
. IP IP IP FQDN wildcard-FQDN .



FortiGuard.



SSL SSL / SSH. FortiGuard. .





creating exempts for SSL Inspections on Policy & Objects > SSL Inspection.

:
https://docs.fortinet.com/document/f...eep-inspection
https://forum.fortinet.com/tm.aspx?m=123920
https://forum.fortinet.com/tm.aspx?m=159601
https://forum.fortinet.com/tm.aspx?m=141086
https://forum.fortinet.com/tm.aspx?m=143673