[FG100e - 6.4.4]SSL/SSH Inspection issue Youtube, Vimeo

[itc]

Hi

When I tyr to acces: youtube, vimeo I get:

==============

NET::ERR_CERT_COMMON_NAME_INVALID

Subject: *.fortinet.com

Issuer: ESET SSL Filter CA

Expires on: 31 mar 2021

Current date: 2 mar 2021

================

trusted root certificate authorities: installed

FGT Firmware: 6.4.4

It doesn't matter if I choose: SSL Certificate or Full SSL Inspection.

I have downloaded .crt from Fortigate and installed on PC - this didn't helped.

After almost 4 days - I gave up...

[Yurisk]

I'd suggest:

[ol]

Enable port 443 inspection in Protocol MApping

Server certificate SNI check - Enable

Blocked certificates: Block

Log SSL anomalies: On (for debug)[/ol]

Also, are you trying to Allow or Block Youtube in WebFIltering ? As if you try to block Youtube ib Rules, this can be seen as you are being redirected to Fortinet Block page. 

In addition, the certificate error seems to come not from Operating system, but from ESET antivirus, have you investigated this, e.g. https://support.eset.com/en/kb3126-disable-ssl-filtering-in-eset-windows-products  ?

[itc]

No change. In eset I've disabled SSL check:

Only change:

============

NET::ERR_CERT_COMMON_NAME_INVALID

Subject: *.fortinet.comIssuer: FG100FTK20028697Expires on: 31 mar 2021Current date: 4 mar 2021========= Streaming and media added to exception, web filter allow all.... Serial number of site is different than one used on fortigate... WHY?! This wrong serial number is not visible on my Windows machine!