Fortinet white logo
Fortinet white logo

Proxy web filter with SSL inspection may fail for websites that allow TLS versions below 1.3 after upgrading to FortiOS 6.4.1

Proxy web filter with SSL inspection may fail for websites that allow TLS versions below 1.3 after upgrading to FortiOS 6.4.1

Bug ID

Description

617934

If web filtering is enabled using a proxy-based firewall policy with SSL inspection also enabled, then connections to servers that still support less secure TLS versions may fail. Browser errors seen:

Chrome: ERR_CONNECTION_CLOSED

Firefox: PR_END_OF_FILE_ERROR

Workaround: toggle affected firewall policies to flow-based inspection.

Proxy web filter with SSL inspection may fail for websites that allow TLS versions below 1.3 after upgrading to FortiOS 6.4.1

Proxy web filter with SSL inspection may fail for websites that allow TLS versions below 1.3 after upgrading to FortiOS 6.4.1

Bug ID

Description

617934

If web filtering is enabled using a proxy-based firewall policy with SSL inspection also enabled, then connections to servers that still support less secure TLS versions may fail. Browser errors seen:

Chrome: ERR_CONNECTION_CLOSED

Firefox: PR_END_OF_FILE_ERROR

Workaround: toggle affected firewall policies to flow-based inspection.