Skip to main content
seadave
New Member
August 4, 2015
Question

SSL Inspection and TLS

  • August 4, 2015
  • 1 reply
  • 4292 views

When I review the SSL Inspection settings, TLS is not one of the protocols shown as being scanned.  Since TLS is essentially SSL v4.x, I would think that Fortigate SSL scanning would support decrypting such streams.  But we are seeing a situation where the TLS encoded traffic from our hosted spam filtering provider is not being decrypted as it passes the Fortigate to our Exchange Hub Transport.  This has allowed a few malicious files to pass.  Is there any solution to this?  We are running 5.2.3 on a 500D.  We are using deep inspection with all protocols enabled.

1 reply

vanc
New Member
August 4, 2015

dfollis wrote:

When I review the SSL Inspection settings, TLS is not one of the protocols shown as being scanned.  Since TLS is essentially SSL v4.x, I would think that Fortigate SSL scanning would support decrypting such streams.  But we are seeing a situation where the TLS encoded traffic from our hosted spam filtering provider is not being decrypted as it passes the Fortigate to our Exchange Hub Transport.  This has allowed a few malicious files to pass.  Is there any solution to this?  We are running 5.2.3 on a 500D.  We are using deep inspection with all protocols enabled.

SSL is just a general term which covers TLS as well. Just like the library OpenSSL which does support TLS. FortiGate's SSL deep inspection does cover TLS.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT