Skip to main content
AlexC-FTNT
Staff
Staff
March 14, 2022

Technical Tip: address-ip-rating no longer present in 'web-proxy global' config after upgrade

  • March 14, 2022
  • 0 replies
  • 454 views

Description

 

This article describes a CLI config change implemented in FortiProxy 2.0.8.

 

Scope

 

FortiProxy.

 

Solution

 

If required, IP-based URL rating can be disabled for SSL-exemption and proxy-address objects.

By default, IP-based URL rating is enabled.

 

Use the following CLI commands:

 

config web-proxy global
    set address-ip-rating disable
end


(See the release notes here.)

 

Solution

 

Configuration can be changed through the following configuration options:

 

config firewall profile-protocol-options
   edit 'your_proxy_profile_name'
       config http
           set address-ip-rating disable
end

config firewall ssl-ssh-profile
    edit 'deep_inspection_profile_used'
        set ssl-exemption-ip-rating disable
    next
end

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.