FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes an issue where Chromebook users are not able to log in to the device using a Google account when SSL deep inspection is enabled even if the FortiGate certificate was imported to the Chromebook.
Scope
FortiGate.
Solution
It is because Chromebook only imports the certificate at the user level and it does not apply to some device-level traffic. Chromebook needs to reach Google to authenticate the user.
Hence, traffic to some Google sites needs to be exempted from SSL deep inspection. Google provides a list of URLs that need to be exempted:
