1) Does FortiProxy Eval (VM) allow to do SSL interception? I tried (enabled deep inspection for a policy item) but nothing happens: I just see the original certs being used when browsing through the proxy.
openssl s_client -connect fpx.example.com:8080
no peer certificate available
No client certificate CA names sent
SSL handshake has read 0 bytes and written 319 bytes
UPDATE: Hmm. It's responding the same on (mgmt) port 443...
I started with SSL interception but then realized that SSL to mgmt doesn't even work with the same symptoms. So I'm going a step back and trying to find out first what could be the reason for SSL to mgmt not working (maybe the simpler issue to solve which is going to solve the other issue at the same time).
FortiProxy-VM64 # show system global
config system global
set admin-server-cert "Fortinet_Factory"
set alias "FortiProxy-VM64"
set hostname "FortiProxy-VM64"
set timezone 26
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.