FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
dingjerry_FTNT
Article Id 376478
Description This article describes the requirements of a Server Certificate in an SSL Inspection profile while selecting 'Protecting SSL Server'.
Scope FortiGate.
Solution

When creating or editing an SSL Inspection profile, and selecting 'Protecting SSL Server', it will ask for a server certificate.

 

Server_Certificate.png

 

As long as this is a valid server certificate:

  • It does not have to be identical to the one on the real server.
  • The certificate's CN (Common Name) does not have to be the same as the one on the real server.
  • It does not have to be chained even if the certificate on the real server is chained.