Technical Tip: How to resolve the warning message 'The no-inspection profile doesn't perform SSL inspection, so it shouldn't be selected with other UTM profiles'

[anoushiravan]

Description	This article describes that after the firmware upgrade (from v6.4.x) the below warning message might be seen on firewall policies on which the UTM profile has been enabled on. This policy has the following issues: 'The no-inspection profile doesn't perform SSL inspection, so it shouldn't be selected with other UTM profiles'.
Scope	FortiGate.
Solution	The above warning message is for the new available SSL inspection profile named 'no-inspection' in the latest firmware patches and it does not affect the network traffic. Note: The warning message is applied only to the use of the SSL inspection profile 'no-inspection'.  If cloning the 'no-inspection' and using the clone on firewall policy, it will not generate the warning. This is a design choice for 'newer' security admin to not assume the default profile 'no-inspection' works in tandem with other UTM profiles for encrypted traffic. The assumption is that if the security admin has created his own profile, understanding the impact on the different types of traffic. To use 'no-inspection' on the firewall policy, follow below steps: Edit the firewall policy and disable all the Security Profiles then select 'OK'. Edit the firewall policy again.  Select 'no-inspection' for SSL Inspection before enabling Security Profiles then select 'OK'. A warning will appear. Select 'OK'. Related documents: Technical Tip: How to disable SSL Inspection SSL Inspection