Technical Tip: Session scaling issue with explicit web proxy on FortiGate-6000/7000 series
| Description | This article describes the workaround how to fix the explicit web proxy session scaling issue on 6000/7000 if using single interface IP. |
| Scope | FortiGate-6000/7000. |
| Solution | For each FPC, each IP can have only 2.1k sessions via explicit web proxy. Due to this limitation, some users may get a '504 gateway timeout: remote server did not respond to the proxy' error.
HTTP clients -----------Explicit proxy(FGT6KF)------------HTTP server
Using IP Pools in the proxy policy will make the outbound flow to use the number of IP addresses in the IP Pool instead of just using the outbound interface's IP address. This will help to scale the web proxy sessions (2.1k * IP Pool addresses).
 |