We enabled deep inspection (using the internal Fortigate certificate and the default deep inspection policy) this morning on our FG100D (v5.2.10,build742) and one of our team thought to run a test on BADSSL.com and came back with interesting results where users aren't prompted if they want to continue to the site where for example there is a self-signed or untrusted-root certificate but instead they browse straight to the site, but if only certificate inspection is enabled they are prompted. (tests were in both IE11 and Chrome v58.0.3029.110)
So I am wondering if this behaviour is because when testing against badssl.com and using deep inspection, browsing is allowed to continue without any warnings because deep inspection of the traffic doesn't detect any threats or do I need to\should I configure additional settings in my policies
