ssl and ssh inspection

[sims]

Hi,

How to disable ssl inspection and keep only AV and IPS

Thanks

[Elthon_Abreu]

https://kb.fortinet.com/kb/documentLink.do?externalID=FD35340

[emnoc]

I would advise not todo that. Since most of the current traffic is web and HTTPS, with ssl-inspection disable and AV/IPS you will not detect any AV attacks since you can inspect the payload. Disabling ssl-inspection will hamper your security inspection and you risk exposure to these attacks. Just my 2ct opinion from a security analyst perspective

Ken Felix