Skip to main content
jfelix09
Staff
jfelix09
Staff
June 23, 2026

Troubleshooting Tip: Resolving Microsoft Copilot access issues with FortiGate inspecting traffic with a policy in proxy-mode and Application Control/IPS

  • June 23, 2026
  • 0 replies
  • 111 views

Description

This article describes a solution to resolve issues with Microsoft Copilot when using FortiGate to allow and inspect the traffic. The user may experience problems with Microsoft Copilot when SSL inspection is enabled in a firewall policy in proxy mode, and an application control, IPS, or DLP profile is applied.

Scope

FortiOS v7.6.7 and v8.0.0.

Solution

In a proxy inspection-mode firewall policy using the default profile-protocol-options and the default application control profile configured to monitor all application traffic, Copilot conversations hang after users submit a prompt.

To resolve the Microsoft Copilot issue with FortiGate SSL inspection, follow these steps:

  1. Go to FortiGate GUI -> Policy & Objects -> Protocol Options and clone the 'default' protocol options profile.

  2. Edit the cloned profile in CLI and enable Websocket by running the following commands: 


config firewall profile-protocol-options
    edit <NAME-OF-CLONED-PROFILE>
        config websocket
            set status enable
        end
    next
end


  1. Apply the cloned protocol-options profile to the policy ID that is responsible for the traffic.


Note: The issue is not reproducible when using a firewall policy in flow mode.


Related documents:

    Terms & ConditionsAccessibility statement