Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
myrdin
New Contributor

FG keep using Fortigate_Factory cert for deep inspection

Hi,

 

to avoid certs error with deep inspection, we created and signed a cert with our CA which is trusted in the domain. 

 

I have sucessfully imported the cert and priv key into the firewall, the cert now appears in the CA list. 

 

If i change the cert that deep inspection uses to the new cert, it simply keep using fortigate_factory cert. I have checked in the cli and everything seems fine. There is already a case opened, but they couldnt figure it out. Even from support point of view the configuration is fine and the fortigate should be using the new cert, instead is ignoring that setting.

 

ideas?

 

1 REPLY 1
I_Hoffmann
New Contributor

hi,

 

I was trying to activate deep inspection for our mail server. So I configured a ssl inspection profile by selecting

"Protecting SSL Server" in the GUI. I also uploaded a signed certificate + key. With version 5.2.4 of the firmware the

fortigate was using the factory certificate.

After the update to version 5.2.5 a few days ago the fortigate is not inspecting the tsl traffic to our mail server at

all. I opened a ticket but I have no response from fortinet until now.

 

so...no ideas, but i'am in the same boat.

 

best regards

ingo

Labels
Top Kudoed Authors