Hello everyone
After a series of upgrade from fortiOS 5.6 to 7.4.8 on a FG101 cluster, i can't enable SSL Inspection anymore.
Every policy where i have SSL Inspection + (Web filter or Application control), web pages end up with a 'ERR_CONNECTION_RESET' in the browser and a SSL Error is logged
If a choose a 'non-inspection' profile, no issue.
If I disable 'Server certificate SNI check' in a non working SSL profile, the error is gone too.
Any advice or experience ?
Thank you
Aymeric
FortiOS enhanced it's TLS support from 5.6 to 7.4, so SNI check is probably the cause of the issue. Check SSL logs for errors in SNI validation and take a look at the behavior when each of the actions is defined on the ssl inspection profile:
