Problems with SSL inspection and Web filter

[jcvm]

Hello,

We are applying WEB filtering policies with deep SSL inspection.

but instead of getting the predefined message in fortigate we are having this error in all browsers:

There is an application that prevents Chrome from connecting to this website securely
"Fortinet" has not been installed correctly on your computer or network:
Try uninstalling or disabling "Fortinet"
Try connecting to another network
NET :: ERR_CERT_AUTHORITY_INVALID

How can we solve it?

[akristof]

Hello,

When page is blocked and replacement message is shown to client, this is still HTTPS page. And by default, FortiGate is using certificate that is signed by untrusted CA. So if you have your own certificate signed by trusted CA, you can change this:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Encrypting-replacement-messages-with-a-cus...

Other option is to disable HTTPS replacement message, but this will cause that only blank page will be displayed if page is blocked. And that can be confusing for client.

Adrian