Use CLI to configure SSL/SSH exemption list?

[jgreen456]

Hi All,

Does anyone have an efficient way of adding SSL/SSH DPI exemptions? 

Right now, besides the GUI, the CLI method only allows me to select from an existing entry.

This is my reference:

https://help.fortinet.com/cli/fos60hlp/60/Content/FortiOS/fortiOS-cli-ref/config/firewall/ssl-ssh-pr...

Any insight/help will be greatly appreciated. 

[abarushka]

Hello,

You may consider to create address/address group and then use them in SSL/SSH deep inspection profile exemption list.