FortiGate allowlist

You can enable a feature that gathers a list of reputable domain names that can be excluded from SSL deep inspection. This list is periodically updated and downloaded to FortiGate units through FortiGuard.

Go to Security Profiles > SSL Inspection, enable Exempt from SSL Inspection, and enable Reputable Websites.The reputable websites are rated by FortiGuard. Web Filtering.

CLI syntax:

config firewall ssl-ssh-profile

edit deep-inspection

set whitelist enable

end

end