Some applications display this information under Application Details, as shown above, while others require select it to view the necessary details:
| Description | This article describes how to perform Deep Packet Inspection (DPI) on generative AI applications. |
| Scope | FortiGate, Deep Inspection, Generative AI Prompts. |
| Solution |
FortiGate is capable of performing deep packet inspection (DPI) on traffic destined for major AI applications, including, but not limited to: ChatGPT, Gemini, and Copilot.
However, a specific configuration is required to ensure inspection works correctly for Microsoft destinations.
Beyond applying the Application Control profile that allows or monitors the Generative AI category or application required, it is necessary to disable the certificate exemption, which is often enabled by default for Microsoft domains, to inspect this traffic successfully. This is achieved by creating a Custom Deep Inspection Profile, removing the 'Microsoft' FQDN, and applying the custom SSL inspection profile to the firewall policy:
Firewall policy sample:
To check the logs: Security Events -> Logs -> Application Control:
|
