Deep packet inspection is a MUST to enable any control of sub-URLs in
the content filters. Without DPI the Fortigate is not able to see any
content in encrypted packets. The host name could be visible, though, if
it is a part of the SSL/TLS handshaki...
agree with Cudin.Or, If you need access to Webservices only, you could
make use of a Web proxy with a smart proxy.pac script that the VPN
clients should use. The script could manage the access a smart way: AWS
access through the Web proxy using the I...
I think it is worth to ask Fortinet support for help. Just thinking
loud: AFAIK the SNMP counters for a network interface are just increased
continuously with each byte flowing through the interface. At some point
the counter, which may be defined as...
