Override HTTPS-Websites (Webfilter override) with Full SSL Inspection
Hello,
I use the webfilter on my FortiGate 60D (with the newest FortiOS 5.2.3) to controll the access of websites in var. web categories.
Some web categories should be override with a local user (group) on my Forti. Everything works fine with overriding HTTP-Websites with a local User in this Group (Allow Blocked Override). But if I click on the "Override-Button" of a blocked HTTPS-Website (for example: 'https://www.twitter.com') it doesn't work --> loop / no override possible.
The "Fortinet_CA_SSLProxy"-certificate is imported in the "Trusted Root Certification Authorities" on all Clients thus the Full SSL Inspection works fine / no certificate warning/error or something. Blocked HTTPS-Websites are blocked and allowed HTTPS-Websites are allowed by opening them in the Client-Webbrowser.
Override Blocked HTTP-Websites also works. But only the override of HTTPS-Websites doesn't work! Has anyone a solution or a "best practice" for this problem?
Greets!
