Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?
SNI and Certificate Mismatch: When the Server Name Indication (SNI) does not match either the Common Name (CN) or any of the Subject Alternative Names (SAN) in the server certificate, FortiGate's default behavior is to consider this as an invalid SSL/TLS configuration.
Default Action: FortiGate, under default settings for SSL certificate inspection, will close the connection to prevent potential security risks associated with mismatched certificates.
Otis
1 months agoShawnda
1 months agoMary
23 hours agoJose
5 days agoRomana
6 days agoKathrine
15 days agoWilda
1 months agoDustin
13 days agoMarge
15 days agoTwana
15 days agoHelene
22 days agoMirta
23 days agoOren
1 months agoErasmo
2 months agoStevie
2 months agoJesus
2 months agoShasta
2 months agoLindsey
2 months agoLuisa
2 months agoPansy
2 months agoCyril
2 months ago