SSL deep inspection client-cert-request

Forum|Forum|8 years ago
May 14, 2018
2 replies
4220 views

I have an SSL inspection profile set to deep-inspection.

What does this option actually do to the SSL handshake? And will the Fortigate still be able to inspect the traffic?

"set client-cert-request bypass"

Best answer by abelio

Hi

By default, those SSL sessions using "client-certificates" bypass the SSL inspection.

You could also control that using inspect or block the traffic

abelioAnswer

SuperUser

Hi

By default, those SSL sessions using "client-certificates" bypass the SSL inspection.

You could also control that using inspect or block the traffic

jonlarsenAuthor

New Member

Hi :) Okay, I have changed the SSL inspection on HTTPS from 443 to all ports, and this also disabled the bypass setting for client-certificates. I see I can change it in the CLI under "config ssl".

Thanks!

Sign up

Login with SSO

Login to the community

Login with SSO