Skip to main content
flbits
flbits
New Member
April 11, 2022
Question

Authenticate with Curl to be redirected to the proxy url on a fortigate.

  • April 11, 2022
  • 1 reply
  • 3023 views

Hello,

 

I'm looking for a way for a web application(it uses cURL) to get access to the webpage on a host (running a webserver 10.0.4.55) behind a fortigate. I have a user setup, who can login from a remote location. This will show him a SSLVPN web bookmark, that when clicked will redirect him to the proxy url :screenshot.207.jpg

Is there a way that I can use POST or other method that works with cURL, to send credential information, and get redirected directly to this proxy url?
Or is there a way that I can generate a working fgt_sslvpn_sid to build the url?

 

Kind regards

1 reply

Debbie_FTNT
Staff & Editor
Debbie_FTNT
Staff & Editor
April 12, 2022

Hey flbits,

I'm not sure if there is a way to use cURL or something to interact with SSLVPN web bookmarks, sorry.

The goal is to have a secure connection to the webbrowser (which you're achieving through web SSLVPN at the moment), correct?

You could look into ZNTA, a new feature introduced in 7.0.

That allows you to create reverse HTTP proxies on the FortiGate (much like VIP) with additional security (such as authentication requirements and/or, if you have FortiClient EMS, specific tags).

If you don't have an EMS, you can also create ZTNA rules without tags, and just require authentication.

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/855420/zero-trust-network-access-introduction

flbits
flbitsAuthor
New Member
April 14, 2022

@Debbie_FTNT  thank you for the tip, but ZTNA won't work my purpose.

 

I'm back to the SSLVPN web bookmarks. So far I've been able to authenticate server-side to the fortigate and found a workaround to get the link.

 

But is there maybe a API to do this?

 
 
 
Terms & ConditionsAccessibility statement