SSL-FP Resources
The SSL-FP Resources module contains configurations to support SSL Forward Proxy functionality, including SSL decryption exceptions using L2 Exception Lists and Web Filtering, and Certificate Caching that enhance performance by storing certificates to avoid repeated retrievals.
The Server Load Balance > SSL-FP Resources sub-menu contains the following configurations and pages:
- L2 Exception List — The L2 Exception List configures exceptions for SSL decryption, allowing exclusion of specific websites based on FortiGuard categories or custom host name/destinations IP/source IP, ensuring compliance with jurisdictional restrictions. For details, see Configuring an L2 exception list.
- Web Filter Profile — The Web Filter Profile allows you to group FortiGuard categories for inclusion in the L2 Exception List. For details, see Creating a Web Filter Profile configuration.
- Web Category — The Web Category page allows you to view the Web Categories imported from FortiGuard used to create the Web Filter Profile. For details, see Viewing Web Filter categories.
- Certificate Caching — Certificate Caching enables the system to store presented certificates for future use which can enhance performance by avoiding repeated retrievals from the remote server and locally resigned certificate by SNI. For details, see Configuring certificate caching.