Outbound SSL Full inspection

[osaleem2_10]

Hi,

I was using FortiGate version 7.2 with SSL Full inspection mode, and all was good. Now I have moved to 7.6.4, the latest version, but I think the configuration goes differently.

I have generated a CSR from (Certificate). And sign it through my local CA. Then import it as base-64. Then import it to my FortiGate. Now the certificate appears under my Local CA.

When I go to settings, I'm able to use this certificate. But at the SSL/SSH Profile, I'm not able to use this certificate for my SSL Profile.

Kindly let me know the right way to do SSL full inspection with a certificate that is signed by my local CA for version 7.6.4

[ebilcari]

The certificate used for deep inspection should have the "CA:TRUE" and able to sign other certificates:

Make sure you have requested an intermediate CA from your local CA.