Why is Fortinet blocking SSL connections to iCloud-related domains?

Hi Tuan

Your logs show UTM Blocked. That means in the policy that is blocking this traffic there some security profile (App Ctrl or Web Filter) denying this traffic.

According to the image, it is being blocked under the "Network Services" category, but I haven't blocked anything.

Please double click on the related log entry, on the right pan open the Security tab, there you should find more information on what blocked the traffic.

Hello @tuan2tech 

You can also check in Security Events logs for WebFilter, Application control, SSL... depending on which UTM profiles you have configured in firewall policy LAN to WAN. 

Same issue here..

Possibly it is an SSL block with event subtype certificate-probe-failed? Please check: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-fix-SSL-connection-is-blocked-due-to/ta-p/362052