FortiGate NGFW - Use Web Category in SSL Inspection & Authentication Policy

[PampuTV]

Hi there,

regarding a FortiGate in NGFW mode:

Anyone else wondering why it is not possible to use web categories in SSL inspection & authentication policies? You are able to us web categories in exemptions of the SSL/SSH profiles.

The most vendors I am used to (PAN, Cisco) offer this option. 

Is there a way to do this or is there anything planed for the future releases? I am already on 7.0.2.

Thanks together.

Kind regards

Dominik

FortiGate

[AEK]

I don't think I understand well you question, but if you intend to exempt or force SSH inspection for some categories then you should do it in your firewall policies, i.e: you create a firewall policy with SSH inspection enabled and with some web categories, and another FW policy for other web categories and just disable SSL inspection for it.