Definition
FortiGate deep TLS inspection can examine selected encrypted sessions when policy, compatibility and legal requirements permit.
How it works
The device terminates and re-establishes TLS connections, presenting a certificate signed by a trusted authority to the client. Certificate-pinned applications may fail.
Real-world example
A managed workstation can undergo HTTPS inspection to enable richer web or malware controls, using a deployed trusted CA.
Limits and best practices
Assess privacy and legal obligations, define justified exclusions, protect CA keys, test applications and size processing capacity.
Technical detail to remember
Applications using certificate pinning may reject connections when FortiGate replaces the TLS certificate during deep inspection. Document justified exceptions, protect the inspection CA and validate privacy requirements.