Skip to main content
BJBee
BJBee
Visitor III
December 10, 2021
Question

FortiADC Authentication policy based on IP range

  • December 10, 2021
  • 1 reply
  • 1507 views

Hi,

 

Is it possible to have an authentication profile which is always active on an Virtual Server except for one specific IP range/Subnet?

 

We had a rule on a Citrix Netscaler which we want to implement in a similar way on a FortiADC.

All connections to a Virtual machine must authenticate, use an Authentication profile, except for a specific IP range /Subnet they must not authenticate.

 

We could not find a "simple" solution for this on the FortiADC.

1 reply

AEK
SuperUser
AEK
SuperUser
May 19, 2022

I think you can achieve it this way:

- Publish twice your web server (e.g.: on VS1 & on VS2)

- Enable authentication policy on VS1

- Don't enable auth policy on VS2

- Add policy on your firewall to allow only your specific IP range to access VS2

- Allow all to access VS1

AEK
Terms & ConditionsAccessibility statement