App-control requirements v6.0.X and v6.2.X

[___innit___]

As per information available in FortiOS-6.2.4-Cookbook.pdf - page 276, All cloud applications require SSL Inspection set to deep-inspection on the firewall policy. For example, Facebook_ File.Download can monitor Facebook download behavior which requires SSL deep-inspection to parse the deep information in the network packets. For cloud apps, this requirement of having SSL Inspection set to deep-inspection  in the firewall policy is NOT specified in FortiOS-6.0-Handbook.pdf Q1: Does cloud application control work in v6.0.X, with the default SSL inspection profile, without doing SSL full-inspection (as this requirement isn´t specified in Forti´s official documentation)?

Q2:  For cloud apps and the default SSL inspection profile, can the main App be controlled in the security policies (i.e. Facebook) but any dependent App (i.e. Facebook chat) cannot be controlled (allowed/blocked/ etc...)?

Q3: Why do cloud apps have this requirement for SSL deep-inspection, but other apps do not need SSL deep-inspection enabled?

Thanks.

Ho