Webfilter and Full SSL Inspection

Forum|Forum|2 years ago
January 26, 2024
4 replies
4143 views

Dear Sir,

I planning to implement the Fortigate Webfitler .

What is the effect to the Fortigate Webfilter if Full SSL Inspection is not enabled?

Without Full SSL Inspection, the function of the Webfilter is limited, as it cannot decrypt and analyse the whole URL inside the HTTPS connection, some harmful URL / Website cannot be blocked?

It is painful to install the Fortigate Certificate into huge amount of workstation manually. ..Is there alternative way to do the Webfilter task ?

FortiGate

sw2090

SuperUser

In fact without Deep Packet Inspection the URL filter cannot work. So the webfilter in this case can only check domain names against the FortiGuard cathegories since this information can be gathered out of the request without decrypting it. So this is the limit it then has.

Also all other UTM filters like IPS, AppControl or FileFilter etc will not work without DPI.