Skip to main content
TimB_Unbound
New Member
October 18, 2016
Question

'Reputable Websites' for SSL inspection

  • October 18, 2016
  • 7 replies
  • 28008 views

What defines a reputable website? 

 

With the new Reputable Websites option in 5.4.1 I'd really like to understand what actually defines a reputable website. I understand from the documentation that it is a "secure white list database" of "reputable domain names that cain be excluded from ssl deep inspection".

 

When working with something that can potentially poke a very large hole in my security fabric I'd really like a better understanding of exactly how this works. For any Fortinet staff, if this is something proprietary a general answer would be great..

 

Although I'm looking for a general answer I'm mostly concerned with how sites that include user content are handled. 

7 replies

telecosistem
New Member
October 25, 2016

This new feature above 5.4 firmware help you to indicate a white list of websites. This database is syncrhonized through Fortiguard. On this way won't apply the SSL content for these websites.

 

Best regards,

 

Follow us: 

SSL Content - Fortinet en español. https://networkingcontrol.../ssl-content-fortinet/
TimB_Unbound
New Member
November 10, 2016

telecosistem, thanks for the input but it doesn't really help describe what this function would allow through unencrypted.

 

A couple cases that I would have thought should have been addressed - google.com and a couple core addresses used for Skype for Business - are both still being inspected with this option enabled. 

 

We should have better understanding of the what these products are actually doing. 

tmacca
New Member
November 18, 2016

+1 from me

 

I would like to know more about the 'reputable websites'

Where can I find out what sites are on this list? How is it maintained? What constitutes a 'reputable site'?

 

Thanks

 

gsarica
New Member
November 18, 2016

I could be wrong, but I believe it's the list in System -> Reputation. You can type in a site like www.google.com and see the reputation, maybe if it's listed as 'trusted' here it's passed through inspection?

tmacca
New Member
November 21, 2016

Hi gsarica, thanks for your response

 

I can't see that menu option? (600c running 5.2.8)

Where exactly do I find this?

 

TIA 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.