A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

Question

A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.

What is the reason for the failed virus detection by FortiGate?

Kevin Lizano · Accepted Answer

The website is exempted from SSL inspection.

Kevin Lizano · Accepted Answer

The selected SSL inspection profile has certificate inspection enabled.

Kevin Lizano · Answer

The EICAR test file exceeds the protocol options oversize limit.

Kevin Lizano · Answer

The browser does not trust the FortiGate self-signed CA certificate.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 28 - NSE4_FGT-7.2 discussion

Suggested answer: A, C

0 comments