Technical Tip: Firewall GUI incorrectly displays 'no-inspection' when a profile group is applied to a policy

When a firewall policy is configured with 'profile-type: group' and a 'profile-group' that contains an 'ssl-ssh-profile' (e.g., 'deep-inspection'), the firewall policy GUI page incorrectly displays 'no-inspection' in the SSL inspection column.

GUI:

CLI:

config firewall profile-group

    edit "prof-grp2-flow"
        set profile-protocol-options "protocol"
        set ssl-ssh-profile "deep-inspection"
        set av-profile "flow-av"
        set webfilter-profile ''
        set dnsfilter-profile ''
        set emailfilter-profile ''
        set dlp-profile ''
        set file-filter-profile ''
        set ips-sensor ''
        set application-list ''
        set voip-profile ''
        set ips-voip-filter ''
        set sctp-filter-profile ''
        set diameter-filter-profile ''
        set virtual-patch-profile ''
        set icap-profile ''
        set videofilter-profile ''
        set waf-profile ''
        set ssh-filter-profile ''
        set casb-profile ''
        set telemetry-profile ''
    next
end

config firewall policy
    edit 1
        set name "AV"
        set uuid ee12aff2-baaa-51f0-cba2-0d1d57a9dd9a
        set srcintf "port2"
        set dstintf "port1"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set profile-type group
        set profile-group "prof-grp2-flow"
        set nat enable
    next
end

This issue is currently under investigation at our end and will be resolved in the upcoming firmware version of 7.6.x.