Technical Tip: Explanation of 'Inspect All' in SSL/SSH inspection profile

[dingjerry_FTNT]

Description	This article explains the behavior of 'Inspect All' in an SSL/SSH inspection profile.
Scope	FortiProxy.
Solution	When creating or editing an SSL/SSH inspection profile, there is an option called 'Inspect All'. Full SSL Inspection: Performs complete deep inspection of detected SSL traffic. SSL Certificate Inspection: Only inspects SSL certificates. Disable (Default): Disables the inspect-all mechanism, and relies only on port matching (the 'Protocol Port Mapping' list). For example, if the traffic is detected as HTTPS traffic with port 443, it matches one port in the 'Protocol Port Mapping' list, so the method in the 'Inspection Method' will be used to inspect the traffic. If the traffic is detected as HTTPS traffic with port 444 which is not on the 'Protocol Port Mapping' list: If 'Disable' is selected, FortiProxy will bypass the traffic with no SSL inspection. If either 'Full SSL Inspection' or 'SSL Certificate Inspection' is selected, FortiProxy performs the level of SSL Inspection respectively on this port-444 HTTPS traffic.