FortiSASE
FortiSASE delivers both a consistent security posture and an optimal user experience for users working from anywhere. Secure your hybrid workforce by closing security gaps, plus simplify operations.
kgeorge
Staff
Staff
Article Id 290145
Description This article describes why Certificate Inspection is used even though Deep Inspection is used in the SSL Inspection Profile.
Scope FortiSASE SSL Inspection.
Solution

When 'Force Certificate Inspection' is enabled in the Policy, it will ignore the SSL inspection mode defined in the selected profile group and instead use Certificate Inspection.

 

To fix it, disable 'Force Certificate Inspection' in policies where Deep Inspection is required.

 
SASE Inspection.png