Skip to main content
COPPER
New Member
January 30, 2020
Solved

What is differences between certificate-inspection and upg_certificate-inspection?

  • January 30, 2020
  • 1 reply
  • 3763 views

Model: fortigate 400d

After I upgraded firmware from 5.4.5 to 6.2.3 I found that there are certificate-inspection and upg certificate-inspection. (refer to the attached picture.) At the moment, Fortigate 400d is using both certificates. Which one I should use?

Thank you

Best answer by Dave_Hall

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware.  This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions.  Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

 

 

1 reply

Dave_Hall
Dave_HallAnswer
New Member
January 30, 2020

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware.  This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions.  Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

 

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!