Deep inspection

5 replies
4550 views

Hi all,

I wanted to know in my fortigate firewall with fortios 7.0.11, if I am using app control profile in policy then deep packet inspection is required compulsory?

Issue : Actually I am having existing policy with app control with normal certificate inspection but I am getting intermittent issue in zoom meetings if I am using Dpi then too sometimes I am getting issue so if using Dpi then zoom need to be bypass from it?

FortiGate

Kashif_shaikhAnswer

New Member

Thanks @Markus_M

Markus_M

Staff & Editor

Hi Kashif,

DPI is kind of required. The reason is that the App control etc are working on the readable traffic/destination addresses etc inside the traffic. DPI ensure that fgt can actually read it. If we cannot read or only the TLS tunnel headers prior encrypting the whole stream, we cannot act on the encrypted traffic.

Alternatively explicit proxy might be worth a shot.

Best regards,

Markus

Best regards, Markus

Kashif_shaikhAuthorAnswer

New Member

Thanks @Markus_M

Sign up

Login with SSO

Login to the community

Login with SSO