Skip to main content
CAD
CAD
New Member
October 17, 2016
Question

Clarify some terms

  • October 17, 2016
  • 2 replies
  • 6115 views

Hello everyone,

 

I got confused , could you please help to understand below terms:

 

1- Wan-opt ,Explicit proxy ,web chache

2- why should use ssl offloading ? 

 

I've read some of the topics, but I did not understand very well, because my not so good.

 

Thanks

    2 replies

    CAD
    CADAuthor
    New Member
    October 17, 2016

    I hope one interacts 

     

    1-do you configure of wanopt requires at least 2 FortiGate devices? ,or if it is configured on a single device performs the same purpose.

     

    2-what the benefit of allowing internet through Explicit proxy?

     

    Thanks

    CAD
    CADAuthor
    New Member
    October 17, 2016

    i want to enable web cache  for the following topology:

     

    Internet ----->forigate------>internal network  

     

    do you i need to configure explicit proxy and wanopt to enable web cache? please advise

    CAD
    CADAuthor
    New Member
    October 18, 2016

    well, i want someone review my config below and advise me accordingly:

    -config system settings

    - set wccp-cache-engine enable

     

    --------------------config wanopt profile-------------------------- edit "default" set transparent enable set comments "" set auth-group '' config http set status enable set secure-tunnel disable set byte-caching enable set prefer-chunking fix set tunnel-sharing private set log-traffic enable set port 80 set ssl disable set unknown-http-version tunnel set tunnel-non-http disable end config cifs set status enable set secure-tunnel disable set byte-caching enable set prefer-chunking fix set tunnel-sharing private set log-traffic enable set port 445 end config mapi set status disable set secure-tunnel disable set byte-caching enable set tunnel-sharing private set log-traffic enable set port 135 end config ftp set status disable set secure-tunnel disable set byte-caching enable set prefer-chunking fix set tunnel-sharing private set log-traffic enable set port 21 end config tcp set status enable set secure-tunnel disable set byte-caching disable set byte-caching-opt mem-only set tunnel-sharing private set log-traffic enable set port 1-65535 set ssl disable end

     

    Note: i have FG200D running with firmware 5.2.8

    CAD
    CADAuthor
    New Member
    October 19, 2016

    Thanks for reply,

    Already read this topic, but I need your advice to. Based on your experience.

     

    Thanks

    CAD
    CADAuthor
    New Member
    October 23, 2016

    the above configuration is correct ?

    Terms & ConditionsAccessibility statement