Which of the following statements correctly describes the deepscan option for HTTPS?

When deepscan (referring to full SSL/TLS inspection) is disabled for HTTPS, the FortiGate will still inspect the web server certificate to ensure it is valid and trusted, but it will not perform decryption of the encrypted content, meaning no further inspection of the payload occurs.

Enabling deepscan does more than just further check the server certificate; its primary function is to decrypt and inspect the *content* of the encrypted traffic for security threats or policy violations.

Deepscan functionality is primarily associated with HTTP/HTTPS and other encrypted protocols for content inspection, not exclusively mail protocols, and its purpose is not limited to checking IP addresses in headers.

While deepscan generally implies thorough scanning, the decompression and scanning of archived files is a feature of antivirus/sandboxing engines, not the core definition of 'deepscan' specifically for HTTPS protocol handling in the context of SSL inspection.