Skip to main content
Mod_Smilzo
New Member
March 15, 2018
Question

Fortigate allow internet destination traficc only from http to any port.

  • March 15, 2018
  • 2 replies
  • 12316 views

Somebody knows the way to allow internet destination traffic in fortigate only from the HTTP type to any port. Regrats.

    2 replies

    ericli_FTNT
    Staff
    Staff
    March 15, 2018

    Mod.Smilzo wrote:

    Somebody knows the way to allow internet destination traffic in fortigate only from the HTTP type to any port. Regrats.

    Hi there,

     

    So, your question is how to filter HTTP1.x or HTTP2 traffic on the Fortigate? I'm not so sure about if I understand your question.

    Mod_Smilzo
    New Member
    March 15, 2018

    No what i want to do is allow all the outbound trafic only by http protocol . I mean if someone wants to use FTP protocol , should use over http no over FTP.

    ericli_FTNT
    Staff
    Staff
    March 15, 2018

    So in this case, I think you should better list all unwanted services and create one blocking policy, and put this policy in the top of other allow policies.

    Mod_Smilzo
    New Member
    March 16, 2018

    @OHIGL dude i miss underestand , thats exactly what i want to do , HTTP OUTBOUND TRAFIC to anyport , i miss underestood my boos whit the protocols ... !! Only need , allow http trafic to anyport , becouse when im on a streaming with someone , they use over http a few ports random and i have problems , becouse a have to allow manualy etc. So if i have allowed all the ports over http i will not have that problem anymore.

    rwpatterson
    New Member
    March 16, 2018

    I believe that it's simply a browser setting if that is all you want. Just add the port to the end of the domain name in the URL line:

     

    http://support.fortinet.com:(insert port here)/blah-blah-blah/.....

    eMZe
    New Member
    March 16, 2018

    If using explicit proxy is an option, this is the easiest way.

    Proxy policy should allow GET, POST, and perhaps PUT. Or, deny CONNECT method. 

     

    Check "explicit proxy" in feature select. 

    It can be somewhat hard job, if you are not familiar with forward proxy mechanisms.

     

    Martin