Skip to main content
Myrella
New Member
September 11, 2014
Question

Access to an app from outside

  • September 11, 2014
  • 5 replies
  • 5392 views
Hello guys, I am new to fortinet, and a junior IT I need help with something please. I have an app on a server and I need people access to it from outside. I have no idea how to do it. When I test it internal, it works. Thank you for your help

    5 replies

    ede_pfau
    SuperUser
    SuperUser
    September 11, 2014
    Hi Myrella, and welcome to the forums. You can access internal hosts (or only certain ports on it) from outside via ' Virtual IP' . This a a firewall object that translates and externally used IP address into an internal one (so, it does Destination NAT). Follow these steps: 1. Create a VIP ext address: (your FGT' s public IP) ext port: <port number used by your app> mapped to addr: <internal IP of server> mapped to port: <same port number as above> port forwarding: enable 2. Create an incoming policy to make the VIP work src interface: wan1 src addr: 0.0.0.0/0 dest int: internal dest addr: your_new_VIP service: <corresponding to mapped port> action: accept Please note that you cannot test server access with ' ping' if using port forwarding. You could as well NOT use port forwarding if you have more than one public IP address. Please try this and let us know how it worked.
    Myrella
    MyrellaAuthor
    New Member
    September 11, 2014
    Thank you so much ede_pfau Yes it works :) So grateful. On more question. How can I make it a name like myapps.com what is better than a IP address Thank you again
    Jonathan_Rennie_FTNT
    Staff
    Staff
    September 11, 2014
    This is the best document to explain how to implement FortiDDNS http://docs-legacy.fortinet.com/cb/recipes/associating-a-domain-name-with-an-interface-that-has-a-dynamic-IP.pdf
    ede_pfau
    SuperUser
    SuperUser
    September 12, 2014
    IP address and name (FQDN) are connected via DNS. DNS are run by ISPs. So, if your public IP address is static (does not change over time) then your ISP should be able to make a DNS entry for you. If your public IP address is dynamic (i.e. is assigned to you randomly and changeing every 24 hours or so) then you can use " Dynamic DNS" to associate a name with this address. From FortiOS v5 on Fortinet offers a DDNS service for free - that is, as long as you have a paid support contract. Nothing is for free. There are many other service providers on the Net that offer DDNS services for a small fee. One of the best known is dyndns.org (dyn.com). You configure your FQDN (fully qualified domain name, like ' myservice.dyndns.org' ) and your account information in the FGT config. Please see the document cited by Jonathan for details. You can use FortiDDNS or any other provider, as you like.
    Myrella
    MyrellaAuthor
    New Member
    September 12, 2014
    Good evening Ede, Didn' t try it yet, but I will. Thank you very much for everything Myrella
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!