FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
_martin_
Staff
Staff
Article Id 278574
Description This article describes how to resolve an issue where doing Deep Inspection on Chromebook devices causes a network connection failure to appear.
Scope

FortiOS, Chromebook.

Solution

pic.png

 

To prevent this from occurring, it is necessary to exempt Google domains from Deep Inspection under Security Profile -> SSL/SSH Inspection -> Deep Inspection Profile -> Exempt from SSL Inspection -> Addresses.


As of November 2024, here are the domains to be exempted which are needed for ChromeOS to function:

 

chrome.PNG

 

See this Google support article for a full list of hostnames to allow:

Set up TLS (or SSL) inspection on Chrome devices Set up a hostname allowlist .