Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
COPPER
New Contributor

Created on ‎01-30-2020 02:41 AM

What is differences between certificate-inspection and upg_certificate-inspection?

Model: fortigate 400d

After I upgraded firmware from 5.4.5 to 6.2.3 I found that there are certificate-inspection and upg certificate-inspection. (refer to the attached picture.) At the moment, Fortigate 400d is using both certificates. Which one I should use?

Thank you

Preview file
36 KB
Labels:
2892
0 Kudos
1 Solution
Dave_Hall
Honored Contributor

Created on ‎01-30-2020 06:47 AM

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware.  This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions.  Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

View solution in original post

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
2052
0 Kudos
1 REPLY 1
Dave_Hall
Honored Contributor

Created on ‎01-30-2020 06:47 AM

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware.  This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions.  Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
2053
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.