Download of malware via https not blocked

[jklupp]

Hi,

while testing the setup of the FGT 60D, I tried to download the EICAR signature from their site (http://www.eicar.org/85-0-Download.html).

The download via http was blocked. However the link to "Download area using the secure, SSL enabled protocol https" worked and the test virus went through the FGT and was only blocked on workstation level. 

Likely to be obvious mistake from a non-expert. But maybe someone can give me a hint.

Thanks in advance.

Jay

[jklupp]

Solved: See FortiGate Cookbook 5.2 pp.252 "Why you should use SSL inspection".