Quick Answer

The answer is certificate inspection and deep inspection. FortiGate uses these two distinct types for HTTPS traffic in a security policy because certificate inspection only validates the server certificate’s authenticity and expiration without decrypting the payload, while deep inspection fully decrypts the SSL/TLS session to scan the content for threats. On the Fortinet NSE 4 Network Security Professional exam, this distinction tests your understanding that flow-based and proxy-based are inspection modes for other security profiles, not HTTPS inspection types themselves—a common trap where candidates confuse processing modes with inspection types. Remember the memory tip: “Cert checks the wrapper, deep reads the letter.”