Is SSL Deep Inspection screwing up the certification path?

[sw2090]

I just ran into this.

I have https://dealerportal.piaggiogroup.com

If I open this in Browser without Deep Inspection enabled and look into the certification path I see:

DigiCert => DigiCert SHA2 Secure Server CA => dealerportal.piaggiogroup.com

If I do the same with Deep Inspection enabled I see:

<mycompany CA> => <suboridinary CA of company CAused by Deep Inspection> => dealerportal.piaggiogroup.com.

DigiCert plus the following intermediate CA seem to be gone

My Browser then complains that the certificate of dealerportal.piaggiogroup.com does not have a valid digital sigature...

Did anyone else encounter this to?

I also openend a ticket with TAC on this.

Greetings

Sebastian

[sw2090]

To give an update:

In my test environment here at HQ it does not. But it did on productive FGT.

Still investigating on...

[mcdaniels]

And you do exactly the same in your test environment?