Skip to main content
Duy2003
Explorer
February 19, 2025
Question

Configure VIP for Application on FortiADC

  • February 19, 2025
  • 3 replies
  • 967 views

Dear Team,
In my system, I am using an app service. This app has 2 NAT ports to the outside, port 4432 (used to encrypt HTTPS links) and port 802 (used to get HTTP app data). But the main protocol used is L7/TCP for the app api to work, it cannot use Profile HTTPS or HTTP. Is there a way for me to use L7/TCP and still configure content routing for port 802 and 4432?

3 replies

Jean-Philippe_P
Staff & Editor
Staff & Editor
February 21, 2025

Hello Duy2003, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
February 24, 2025

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

 

Thanks,

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Staff & Editor
February 25, 2025

Hello Duy2003,

 

Can you tell me if the following steps fix the issue?

 

To configure content routing for ports 802 and 4432 using L7/TCP on FortiADC, follow these steps:

 

1. Create a Custom Application Profile:

- Navigate to the application profiles section in FortiADC.

- Create a new custom application profile with the type set to TCP.

- This profile will allow you to handle L7/TCP traffic without using standard HTTP or HTTPS profiles.

 

2. Configure Virtual Server:

- Set up a virtual server to listen on ports 802 and 4432.

- Assign the custom TCP application profile to this virtual server.

 

3. Set Up Content Routing:

- Define content routing policies based on your requirements.

- Since you are using L7/TCP, you may need to use other criteria for routing decisions, such as source IP or other TCP header information, as HTTP headers won't be available.

 

4. Assign Content Routing Policies:

Apply the content routing policies to the virtual server configured for ports 802 and 4432.

 

5. Test Configuration:

Ensure that the configuration is working as expected by testing the application traffic through the FortiADC. By following these steps, you can use L7/TCP for your application while still implementing content routing for the specified ports.

 

Hope this helps!

Jean-Philippe - Fortinet Community Team