Application Control and Antivirus without SSL inspection

[SamuelWyatt]

Hello,Do FortiGate's Application Control and Antivirus work when only SSL Certificate Inspection is used (no full SSL inspection)?I ask because I've read in the NSE4 material that the only security feature you can apply with SSL Certificate Inspection is Web Filtering. Nevertheless, I've used Application Control in my network which does not have Full SSL Inspection implemented, and the FortiGate does identify at least some of the applications we use. What am I missing here?Thanks in advance for any insight.

[abarushka]

Hello,

Some application control signatures require deep inspection, otherwise signature will not be triggered. In case of antivirus deep inspection is required in order to scan encrypted traffic.