Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Robert_Cerny
New Contributor II

Created on ‎06-23-2020 05:10 AM

SSL certificate inspection block

Hi folks,

looking for an idea here. I use ssl certificate-inspection (default, not deep) on HTTP/HTTPS firewall rule and it recently started to block server https://idos.idnes.cz. I had to allow invalid certificates to get this site to work. I also checked their certificate and it seems to be valid, issued by Sectigo RSA. Does anyone know what's going on here? Where can I find what our FG doesn't like?

 

Thanks

Robert

FG-100C FG-100A FW-50B FG-60C
FG-100C FG-100A FW-50B FG-60C
2243
0 Kudos
1 REPLY 1
andrewbailey
Contributor II

Created on ‎06-23-2020 06:05 AM

Hi Robert,

 

I'm running a Fortigate 60E at home on 6.4.1. I am also only using SSL Inpsection (not deep insepction). I'm set to block invalid certificates.

 

I don't seem to have any issues with that site and certainly as you say the certificate looks valid to me.

 

Not sure if that helps much? But perhaps points to config or software issue on your site maybe?

 

Kind Regards,

 

 

Andy.

 

1358
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.