Exempting Application control form SSL inspection

[bgetz_FTNT]

Hello,

What is Fortinet’s approach to bypassing SSL inspection for Application Control? Alternatively, is there a way of selectively sending applications for SSL inspection?

[DaviWang1]

I don't think you can do that now. Please keep in mind, applications may need SSL deep inspection before detected. So the only possible apps could be used for exemption are those not depending on decrypted data payload.

But anyway, application based SSL exemption could be a nice addon to current FQDN/address/URL rating based ones. You may file a formal NFR.

[bgetz_FTNT]

Thanks David. Appreciate the response.