Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AlexeyKo
New Contributor

Unable to use SSL Inspection on NGFW Policy mode

Hi All,

 

Apologies ahead for my English as it not my native language.

 

We run on our LAN Fortigate 3000D with 6.0.4 OS, NGFW Policy mode inspection.

I want to apply SSL Inspection on Internet traffic on different ports, decrypt SSL on port 8080 towards our Proxy server and Decrypt SSL on port 443 for direct internet access.

I have configured different SSL-Inspection profiles for different ports and different certificates for each, however, when i went to apply a profile to some test policy the ssl-inspection bar is grey out.

Some point -

[ul]
  • Use multiple security profiles enabled under feature visibility.
  • When you pick NGFW policy mode on 6.0 you have to pick some default ssl-inspection profile, which i did for simple certificate inspection.
  • On YouTube i found some video made by Guru where i saw that different inspection profiles is an option on NGFW policy mode and there is no only one default profile for all my traffic. [link]https://www.youtube.com/watch?v=4rbcr5DcjKY[/link]3
  • Didnt find any option under CLI which enable or disable use of multiple ssl-profiles.[/ul]

    I have opened a TAC ticket but no answer yet so i turn to public help, does anyone faced same issue and were able to fix it?

     

    Thanks for any help,

    Alexey

  • 0 REPLIES 0
    Labels
    Top Kudoed Authors