Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
NapaCab
New Contributor

Created on ‎06-20-2019 03:34 PM

Online Certificate Revocation Checking for SSL MITM Inspection?

I see that FortiOS has an option to check for certs w/an ocsp-server (responder) for the VPN certificate, but I cannot for the life of me find anything in the FortiOS 6.x guide to configure it (if it's supported) for SSL MITM decryption.

 

Does FortiOS support this?

 

TIA!

 

 

3248
0 Kudos
3 REPLIES 3
hubertzw
Contributor III

Created on ‎06-21-2019 09:43 AM

Hi

yes, search ssl full inspection

 

https://docs.fortinet.com/document/fortigate/6.0.5/handbook/646647/why-use-ssl-inspection

 

1825
0 Kudos
NapaCab
New Contributor
In response to hubertzw

Created on ‎07-03-2019 05:11 PM

I was looking for an option when using SSL inspection to configure an OSCP responder to check for expired/revoked certs?

1825
0 Kudos
hubertzw
Contributor III
In response to NapaCab

Created on ‎07-06-2019 06:38 AM

You don't need deep SSL inspection to do it. Check this doc: https://docs2.fortinet.co...icate-revocation-lists
1825
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.