Examine the exhibit shown below then answer the question that follows it. Within the UTM
Proxy Options, the CA certificate Fortinet_CA_SSLProxy defines which of the following:
A.
FortiGate unit’s encryption certificate used by the SSL proxy.
B.
FortiGate unit’s signing certificate used by the SSL proxy.
C.
FortiGuard’s signing certificate used by the SSL proxy.
D.
FortiGuard’s encryption certificate used by the SSL proxy.
Answer is B
From the FortiOS Handbook
The FortiGate SSL decrypt/encrypt
process intercepts these keys and uses a built-in signing CA certificate named Fortinet_CA_SSLProxy to create
keys to send to the client and the server. This signing CA certificate is used only by the SSL decrypt/encrypt
process. The SSL decrypt/encrypt process then sets up encrypted SSL sessions with the client and server and
uses these keys to decrypt the SSL traffic to apply content scanning and inspection.
2
0