Skip to main content
rezafathi
Explorer III
Feb 22, 2025 7:53 PM UTC
Solved

block vip admin page

hi

I have a server configured as a vip in my fortigate to be accesses from internet. I want to block it's admin page. (my.domain.com/admin) . I tried the policy with deep packet and ssl inspection along with creating a webfilter and blocked *\admin* but still admin page reachable from internet. how can i block admin page?

dingjerry_FTNT
Staff
Apr 30, 2025 3:26 PM UTC

Hi @rezafathi ,

 

Please use the "Protecting SSL Server" option and install a valid server certificate on your FGT to decrypt and inspect traffic destined to the real server. 

 

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/55107/protecting-an-ssl-server

17 replies

dingjerry_FTNT
Staff
Staff
Feb 22, 2025 10:00 PM UTC

Hi @rezafathi ,

 

Which one did you use, Simple, WildCard or Regex?

 

Anyway, why did you put a backslash in the entry?   

 

*\admin*

Translate
rezafathi
rezafathiAuthor
Explorer III
Feb 23, 2025 4:55 AM UTC

hi

I tried with simple and wildcard and also removed / but still admin page is accessible from internet.

Translate
dingjerry_FTNT
Staff
Staff
Feb 23, 2025 5:23 AM UTC

Hi @rezafathi ,

 

Please provide:

 

1) The firewall policy with VIP applied;

2) The VIP configuration;

3) The SSL Inspection profile configuration;

4) The URL Filter list configuration.

Translate
rezafathi
rezafathiAuthor
Explorer III
Mar 11, 2025 5:10 PM UTC

any help?

Translate
rezafathi
rezafathiAuthor
Explorer III
Apr 30, 2025 5:22 AM UTC

any help?

Translate
dingjerry_FTNT
Staff
Staff
Apr 30, 2025 5:41 AM UTC

Please share your SSL/SSH Inspection profile used for this VIP traffic.

Translate
rezafathi
rezafathiAuthor
Explorer III
Apr 30, 2025 7:21 AM UTC

 

Hi

screencapture-192-168-30-1-4433-utm-ssl-ssh-profile-2025-04-30-10_47_41.png

screencapture-192-168-30-1-4433-utm-ssl-ssh-profile-2025-04-30-10_47_41.png

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024