What configuration must be ensuring for SSL inspection to function properly on FortiGate?

For SSL inspection to function properly on FortiGate, it is essential to distribute SSL certificates to users' browsers. This step is critical because SSL inspection involves the FortiGate device acting as a proxy and decrypting the SSL traffic for inspection. To achieve this without generating security warnings or trust issues in the users' browsers, the device's SSL certificate must be trusted by the client systems.

When the browser encounters an SSL certificate from the FortiGate device during inspection, it needs to recognize that certificate as valid. By distributing the appropriate SSL certificate to users' browsers, the firewall can create a trusted relationship, ensuring seamless SSL inspection without interruptions.

This configuration helps to maintain security compliance as browsers will not flag the certificate as untrusted, thus allowing for effective visibility into the encrypted traffic that would otherwise be inaccessible.