Intra vlan security profiles

[rezafathi]

Hi 

I want to secure vlans to vlans traffic with my 200f fgt. Which security profiles can i enable between vlans?

[ozkanaltas]

Hello @rezafathi ,

In my opinion, IPS and AV are enough for these traffics. You can configure it with the default profile on your policy or you can customize the profile according to your preferences.

[rezafathi]

Thanks. Should i use deep ssl profile or not?

[ozkanaltas]

Hello @rezafathi ,

This is generally not recommended for internal traffic. If you do a deep inspection, many applications may not work and you will need to install a certificate on each client.

[rezafathi]

If i dont use deep inspection av would not work

[ozkanaltas]

This is partly true. If the protocol used is not secure, it will detect viruses. However, many protocols are sensitive. If you do deep inspection it won't work. That's why deep inspection is often used for web traffic.

[rezafathi]

So can i disable ssl inspection?

[ozkanaltas]

My advice is, yes you can close.