Skip to main content
Kashif_shaikh
Kashif_shaikh
New Member
April 12, 2023
Solved

Deep inspection

  • April 12, 2023
  • 1 reply
  • 4523 views
  • Hi all,

 

I wanted to know in my fortigate firewall with fortios 7.0.11, if I am using app control profile in policy then deep packet inspection is required compulsory?

 

Issue : Actually I am having existing policy with app control with normal certificate inspection but I am getting intermittent issue in zoom meetings if I am using Dpi then too sometimes I am getting issue so if using Dpi then zoom need to be bypass from it?

Best answer by Kashif_shaikh

Thanks @Markus_M 

1 reply

Markus_M
Staff & Editor
Markus_M
Staff & Editor
April 12, 2023

Hi Kashif,

 

DPI is kind of required. The reason is that the App control etc are working on the readable traffic/destination addresses etc inside the traffic. DPI ensure that fgt can actually read it. If we cannot read or only the TLS tunnel headers prior encrypting the whole stream, we cannot act on the encrypted traffic.

Alternatively explicit proxy might be worth a shot.

 

Best regards,

 

Markus

Kashif_shaikh
Kashif_shaikhAuthorAnswer
New Member
April 13, 2023

Thanks @Markus_M 

Terms & ConditionsAccessibility statement