Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Fortinet Certified Solution Specialist: Enterprise Firewall & Secure Networking 7.6 Architect · Fortinet
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
- The FortiGate SSL/SSH inspection profile is configured for Full SSL Inspection, which is necessary to analyze encrypted HTTPS traffic. However, the firewall policy is protecting an SSL server (the Linux server hosting the website), and currently, the SSL/SSH profile only applies to client-side SSL inspection. To detect HTTPS-based attacks targeting the Linux server: # FortiGate must act as an SSL intermediary to inspect encrypted traffic destined for the web server. # The administrator must upload the SSL certificate of the Linux web server to FortiGate so that the server- side SSL inspection can decrypt incoming HTTPS traffic before analyzing it.