Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 16 of 114
Free Preview · 114 of 380 · questions 1–114 of 380 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
- The FortiGate SSL/SSH inspection profile is configured for Full SSL Inspection, which is necessary to analyze encrypted HTTPS traffic. However, the firewall policy is protecting an SSL server (the Linux server hosting the website), and currently, the SSL/SSH profile only applies to client-side SSL inspection. To detect HTTPS-based attacks targeting the Linux server: # FortiGate must act as an SSL intermediary to inspect encrypted traffic destined for the web server. # The administrator must upload the SSL certificate of the Linux web server to FortiGate so that the server- side SSL inspection can decrypt incoming HTTPS traffic before analyzing it.