Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
COPPER
New Contributor

What is differences between certificate-inspection and upg_certificate-inspection?

Model: fortigate 400d

After I upgraded firmware from 5.4.5 to 6.2.3 I found that there are certificate-inspection and upg certificate-inspection. (refer to the attached picture.) At the moment, Fortigate 400d is using both certificates. Which one I should use?

Thank you

1 Solution
Dave_Hall
Honored Contributor

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware.  This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions.  Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

View solution in original post

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
1 REPLY 1
Dave_Hall
Honored Contributor

During the upgrade process some "conversion" scripts are run on the configuration to make some "older features" more compatible with newer firmware.  This renaming/converting can get pretty "ugly" when going through 3 or 4 major revisions.  Personally, as far as I can tell you could go back or switch to using the "stock" certificate-inspection, which is made "readonly" in the new firmwares. IMO.

 

 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors