NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #69 Discussion

A user reports that their computer was infected with malware after accessing a secured HTTPS website. However, when you check the FortiGate logs, you see that FortiGate did not detect the website as insecure, despite having an SSL certificate and the correct profiles applied on the policy. How can you ensure that FortiGate can analyze encrypted HTTPS traffic on a website? (Choose one answer)

• A. Enable server certificate SNI check to protect against unsecured HTTPS websites.
• B. Set min-allowed-ssl-version to tls-1.2.
• C. Set inspection-mode to proxy.
• D. Enable full SSL inspection in the SSL/SSH inspection profile to decrypt packets.

Brave-Dump Community Votes