FCP_FGT_AD-7.4 · Question #79
A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the…
The correct answer is A. The selected SSL inspection profile has certificate inspection enabled D. The website is exempted from SSL inspection. The selected SSL inspection profile has certificate inspection enabled If the SSL inspection profile is set to certificate inspection instead of full SSL inspection, FortiGate will only inspect the certificate of the HTTPS connection but will not decrypt and inspect the actual…
Question
A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the and does not block the file allowing it to be downloaded. The administrator confirms that the traffic matches the configured firewall policy. What are two reasons for the failed virus detection by FortiGate? (Choose two.)
Options
- AThe selected SSL inspection profile has certificate inspection enabled
- BThe browser does not trust the FortiGate self-siqned CA certificate
- CThe EICAR test file exceeds the protocol options oversize limit
- DThe website is exempted from SSL inspection
How the community answered
(42 responses)- A81% (34)
- B12% (5)
- C7% (3)
Explanation
The selected SSL inspection profile has certificate inspection enabled If the SSL inspection profile is set to certificate inspection instead of full SSL inspection, FortiGate will only inspect the certificate of the HTTPS connection but will not decrypt and inspect the actual traffic content, leading to a failure in virus detection. The website is exempted from SSL inspection If the website hosting the EICAR test file is exempt from SSL inspection, FortiGate will not decrypt the traffic, meaning it cannot inspect the file content for viruses, resulting in the file being downloaded without detection.
Topics
Community Discussion
No community discussion yet for this question.