QuestionQ22

VerifiedCompliance and troubleshooting

You are investigating SSL-related issues on FortiWeb. An administrator reports receiving a certificate warning when accessing the FortiWeb GUI through HTTPS. Separately, your FortiWeb device makes outbound HTTPS requests to a back-end API server.

In which two situations does FortiWeb use its own certificates to establish or secure the connection?

Choose two
Explanation

FortiWeb presents its own HTTPS server certificate to authenticate the administrative Web UI to an administrator’s browser. For back-end HTTPS connections, it can use a certificate configured for the server-pool connection when the back-end server requires a valid client certificate. Transparent inspection does not make FortiWeb the TLS endpoint or cause it to present a certificate, and pass-through routing without decryption does not require a FortiWeb certificate.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!