Uploading a certificate for deep inspection mode

By default, you can download the certificate authority (CA) certificate of the FortiSASE CA, Fortinet_CA_SSL, who signs the certificate used in encrypting SSL connections when performing deep inspection. If desired, you can upload a custom CA certificate and key to perform deep inspection.

To upload a certificate for deep inspection mode:

1. Go to Configuration > Security.
2. In the SSL Inspection widget, click Customize.
3. Enable Deep Inspection.
4. From the CA Certificate dropdown list, select Create.
5. Configure the fields and upload the certificate and key files as needed.
6. Click OK.