Why is Fortinet blocking SSL connections to iCloud-related domains?

[tuan2tech]

Hi everyone,

I'm seeing multiple denied SSL connections in my FortiGate logs, and I can't figure out exactly why this is happening or whether it's necessary to keep blocking them.

[AEK]

Hi Tuan

Your logs show UTM Blocked. That means in the policy that is blocking this traffic there some security profile (App Ctrl or Web Filter) denying this traffic.

[tuan2tech]

According to the image, it is being blocked under the "Network Services" category, but I haven't blocked anything.

[AEK]

Please double click on the related log entry, on the right pan open the Security tab, there you should find more information on what blocked the traffic.

[nweckel]

Hello @tuan2tech 

You can also check in Security Events logs for WebFilter, Application control, SSL... depending on which UTM profiles you have configured in firewall policy LAN to WAN. 

[primadeluxe]

Same issue here..

[Rino_B]

Possibly it is an SSL block with event subtype certificate-probe-failed? Please check: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-fix-SSL-connection-is-blocked...