What is differences between certificate-inspection and upg_certificate-inspection?

COPPER · ‎01-30-2020

Model: fortigate 400d

After I upgraded firmware from 5.4.5 to 6.2.3 I found that there are certificate-inspection and upg certificate-inspection. (refer to the attached picture.) At the moment, Fortigate 400d is using both certificates. Which one I should use?

Thank you

Dave_Hall · ‎01-30-2020

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware. This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions. Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

View solution in original post

Dave_Hall · ‎01-30-2020

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware. This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions. Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C