How many of you are running ssl deep-inspection for IPS on your fortigates?

[reijee]

Hey all,

Sitting up fortigates for my work recently and I'm curious how many of you actually use the "deep-inspection" for ssl inspection, particularly for the IPS vs just the "certificate-inspection".

Seems like it would really slow down internet traffic and cause performance issues, plus the need to throw a cert on all clients.

[kaman]

Hi reijee,

Configuring IPS profiles in FortiGate is a crucial step in securing the network against threats.

Please refer to the documents below on best practices for admins using IPS profiles:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Best-Practices-for-Admin-users-to-implemen...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPS-best-practices-Intrusion-Prevention-Sy...

Regards,
Aman