FortiADC use SNI value without ClientSSL profile

[sklotz]

Is it possible to use the SNI value (for a whitelisting) in scripting without terminating SSL on the FortiADC?

It seems there is only the CLIENT_HANDSHAKE event, but this requires a clientssl-profile. With F5 iRules there is an additional event CLIENTSSL_CLIENTHELLO, which works without a clientssl-profile. Here only a SSL-persistence profile is required.

Is this somehow also possible with FortiADC?

Thank you!

Regards Stefan :)

[sklotz]

Just for your information, official Fortinet-Support finally confirmed, that this special use-case is currently NOT possible/supported. SNI host-header can't be processed without SSL termination.

Thank you!

Regards Stefan :)