Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)
A.
The host field in the HTTP header
B.
The subject alternative name (SAN) field in the server certificate
C.
The subject field in the server certificate
D.
The server name indication (SNI) extension in the client hello message
B. The subject alternative name (SAN) field in the server certificate
C. The subject field in the server certificate
D. The server name indication (SNI) extension in the client hello message
FortiGate Security 7.2 Study Guide (p.230):
"FortiGate parses server name indication (SNI) from client Hello, which is an extension of the TLS protocol. The SNI tells FortiGate the hostname of the SSL server, which is validated against the DNS name before receipt of the server certificate. If there is no SNI exchanged, then FortiGate identifies the server by the value in the Subject field or SAN (subject alternative name) field in the server certificate."
Reference and download study guide:
https://ebin.pub/fortinet-fortigate-security-study-guide-for-fortios-72.html
B. The subject alternative name (SAN) field in the server certificate
C. The subject field in the server certificate
D. The server name indication (SNI) extension in the client hello message
To determine hostname when looking at SSL certificate inspection
Fortigate uses the SNI (server name indication)
If there is no SNI then the FG will look at the Subject field and SAN (Subject alternative name)
B,C,D - Halmonte is correct
Answer are B,C, D
FortiGate Security 7.2 Study Guide page 230
During the exchange of hello messages at the beginning of an SSL handshake, FortiGate parses server name indication (SNI) from client Hello, which is an extension of the TLS protocol.
The SNI tells FortiGate the hostname of the SSL server, which is validated against the DNS name before receipt of the server certificate.
If there is no SNI exchanged, then FortiGate identifies the server by the value in the Subject field or SAN (subject alternative name) field in the server certificate.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
raydel92
Highly Voted 1 year, 7 months agoAMK2ENG
Most Recent 1 year, 4 months agocrose
1 year, 8 months agoHalmonte0780
1 year, 9 months agoTakumi
1 year, 9 months ago