Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

bgetz_FTNT
Staff
Staff

Exempting Application control form SSL inspection

Hello,

What is Fortinet’s approach to bypassing SSL inspection for Application Control? Alternatively, is there a way of selectively sending applications for SSL inspection?

2 REPLIES 2
DaviWang1
Staff
Staff

I don't think you can do that now. Please keep in mind, applications may need SSL deep inspection before detected. So the only possible apps could be used for exemption are those not depending on decrypted data payload.

 

But anyway, application based SSL exemption could be a nice addon to current FQDN/address/URL rating based ones. You may file a formal NFR.

bgetz_FTNT

Thanks David. Appreciate the response.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.