ssl/ssh inspection breaking outlook

[dirkdigs]

i enabled full ssl inspection in the default ssh/ssl policy and then outlook stopped working.

There is a problem with the proxy server' s certificate authority. Outlook is unable to connect to the proxy server mail.server.ca (Error Code 8)

It was suggested to do this by the fortigate when i went to Fortiview > Cloud Applications in my FortiOS 5.2

Full SSL inspection enabled for HTTPS in a SSL/SSH Inspection profile

any idea why?

[Baptiste]

I guess the certificate used by your Exchange server is replaced by the fortigate certificate with full ssl inspection

[NeilG]

Exchange server uses mutual certificate auth, which prevents SSL inspection in general. http://technet.microsoft.com/en-us/library/dd439371(v=EXCHG.80).aspx

[lunhas2k4]

Hi guys,

I suggest making a policy above the other policies without the ssl inspection with the specific destination of the server you want to get connection to.

That is what I did to resolve my issue.