Technical Tip: SSL exemptions are not working

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 392736

Description

This article describes a workaround for the issue when SSL exemptions are not working.

Scope

FortiGate v7.2.11 and v7.4.7,

Solution

SSL exemptions are configured as FQDN or web categories.

One of the following changes should be made:

Option 1:

config firewall ssl-ssh-profile
edit "profile_name"
config https
set cert-probe-failure allow
end
end

Option 2:

config firewall ssl-ssh-profile
edit "profile_name"
config https
set sni-server-cert-check disable
end
end

303

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: SSL exemptions are not working

You are leaving our website