Technical Tip: How to exempt government category from deep inspection profile

Description

This article describes how to exempt government categories from deep inspection profiles.

Scope

FortiGate.

Solution

There can be a case when the government websites do not work and can throw any error.

Example.
'This Site can’t be reached or any related.'

This can be due to the deep inspection which has been applied in the internet policy and it is necessary to exempt the government category from the deep inspection profile.

Follow the below steps to exempt the Govt category from the Deep inspection profile:

• Go to Security Profiles -> SSL/SSH Inspection
•  Check the deep inspection profile which is applied and edit it.
• Go to the section exempt from SSL Inspection as below:
  
  

• Select 'OK' to save the changes.
• Now, test the govt. website in a private window ie Incognito Mode or else clear the session for the user IP and then test.
• Clear the session for user IP: