Skip to main content
SamuelWyatt
New Member
November 24, 2020
Question

Application Control and Antivirus without SSL inspection

  • November 24, 2020
  • 1 reply
  • 3382 views
Hello,

Do FortiGate's Application Control and Antivirus work when only SSL Certificate Inspection is used (no full SSL inspection)?

I ask because I've read in the NSE4 material that the only security feature you can apply with SSL Certificate Inspection is Web Filtering. Nevertheless, I've used Application Control in my network which does not have Full SSL Inspection implemented, and the FortiGate does identify at least some of the applications we use. What am I missing here?

Thanks in advance for any insight.

    1 reply

    abarushka
    Staff
    Staff
    July 26, 2022

    Hello,

    Some application control signatures require deep inspection, otherwise signature will not be triggered. In case of antivirus deep inspection is required in order to scan encrypted traffic.