Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which two actions will FortiGate take when using the default settings for SSL certificate inspection? (Choose two answers)

• A. FortiGate uses the SNI from the user's web browser.
• B. FortiGate does not decrypt the traffic if the traffic is blocked by the web filter profile.
• C. FortiGate uses the CN information from the Subject field in the server certificate.
• D. FortiGate does not decrypt the traffic if the traffic is allowed by the web filter profile.

Correct Answer: A,C

Brave-Dump Clients Votes