FortiGate NGFW - Use Web Category in SSL Inspection & Authentication Policy

Forum|Forum|4 years ago
November 26, 2021
1 reply
1454 views

Hi there,

regarding a FortiGate in NGFW mode:

Anyone else wondering why it is not possible to use web categories in SSL inspection & authentication policies? You are able to us web categories in exemptions of the SSL/SSH profiles.

The most vendors I am used to (PAN, Cisco) offer this option.

Is there a way to do this or is there anything planed for the future releases? I am already on 7.0.2.

Thanks together.

Kind regards

Dominik

FortiGate

FortiGate

AEK

SuperUser

I don't think I understand well you question, but if you intend to exempt or force SSH inspection for some categories then you should do it in your firewall policies, i.e: you create a firewall policy with SSH inspection enabled and with some web categories, and another FW policy for other web categories and just disable SSL inspection for it.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO