IPS - WAS - SSL Inspection on Inbound Traffic

[Kevin_Shanus]

Hello, 

We have some internet facing web services and I'm wondering if best practice is to utilize all three of these technologies? We currently just utilize IPS and I'm not that familiar nor ever setup WAF or Inbound SSL Inspection. Any feedback is appreciated. thanks

IPS - We currently have this enabled on the IPv4 Policy - wan -> lan with destination vip

Web Application Firewall - We don't have this feature visible but it seems like it will add extra protection?

https://cookbook.fortinet.com/protecting-web-applications-54/

Full SSL Inspection on Inbound Traffic - We put the private key of our web services on the Fortigate and we can get visibility into the data flow. 

https://cookbook.fortinet.com/why-you-should-use-ssl-inspection/