A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy.
When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the and does not block the file allowing it to be downloaded.
The administrator confirms that the traffic matches the configured firewall policy.
What are two reasons for the failed virus detection by FortiGate? (Choose two.)

Question

A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy.

When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the and does not block the file allowing it to be downloaded.

The administrator confirms that the traffic matches the configured firewall policy.

What are two reasons for the failed virus detection by FortiGate? (Choose two.)

TONG CHEE LOONG · Accepted Answer

The selected SSL inspection profile has certificate inspection enabled

TONG CHEE LOONG · Accepted Answer

The website is exempted from SSL inspection

TONG CHEE LOONG · Answer

The browser does not trust the FortiGate self-siqned CA certificate

TONG CHEE LOONG · Answer

The EICAR test file exceeds the protocol options oversize limit

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 72 - FCP_FGT_AD-7.4 discussion

Suggested answer: A, D

0 comments