New Member

Question

[FG100e - 6.4.4]SSL/SSH Inspection issue Youtube, Vimeo

Forum|Forum|5 years ago
March 2, 2021
2 replies
6147 views

Hi

When I tyr to acces: youtube, vimeo I get:

==============

NET::ERR_CERT_COMMON_NAME_INVALID

Subject: *.fortinet.com

Issuer: ESET SSL Filter CA

Expires on: 31 mar 2021

Current date: 2 mar 2021

================

trusted root certificate authorities: installed

FGT Firmware: 6.4.4

It doesn't matter if I choose: SSL Certificate or Full SSL Inspection.

I have downloaded .crt from Fortigate and installed on PC - this didn't helped.

After almost 4 days - I gave up...

none_inspection.jpg

Yurisk

SuperUser

I'd suggest:

[ol]

Enable port 443 inspection in Protocol MApping

Server certificate SNI check - Enable

Blocked certificates: Block

Log SSL anomalies: On (for debug)[/ol]

Also, are you trying to Allow or Block Youtube in WebFIltering ? As if you try to block Youtube ib Rules, this can be seen as you are being redirected to Fortinet Block page.

In addition, the certificate error seems to come not from Operating system, but from ESET antivirus, have you investigated this, e.g. https://support.eset.com/en/kb3126-disable-ssl-filtering-in-eset-windows-products ?

yurisk.info - all things Fortinet blog, no ads

itcAuthor

New Member

No change. In eset I've disabled SSL check:

Only change:

============

NET::ERR_CERT_COMMON_NAME_INVALID

Subject: *.fortinet.com

Issuer: FG100FTK20028697

Expires on: 31 mar 2021

Current date: 4 mar 2021

=========

Streaming and media added to exception, web filter allow all....

Serial number of site is different than one used on fortigate... WHY?! This wrong serial number is not visible on my Windows machine!

Sign up

Login with SSO

Login to the community

Login with SSO