SSL/SSH inspection

[ramiroATC]

.

[jhussain_FTNT]

Hi,

Deep inspection (also known as SSL/SSH inspection) is typically applied to outbound policies where destinations are unknown. Depending on your policy requirements, you can configure the following:

• Which CA certificate will be used to decrypt the SSL encrypted traffic
• Which SSL protocols will be inspected
• Which ports will be associated with which SSL protocols for inspection
• Whether or not to allow invalid SSL certificates
• Whether or not SSH traffic will be inspected
• Which addresses or web category allowlists can bypass SSL inspection

Kindly refer the below document which explain about the SSL/SSH inspection.

https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/929997/ssl-ssh-inspection

Regards

Jamal