Skip to main content
blackmail88
blackmail88
New Member
June 25, 2015
Question

Fortigate as Web-Proxy

  • June 25, 2015
  • 4 replies
  • 7829 views

Hi guys,

 

today i setup web proxy feature on my fortigate, and its working as expected. i cannot browsing to internet without setting my browser proxy. but i found a problem when i open my outlook, which is everytime i open my outlook a certificate prompt always shows up and even i have install the certificate the certificate prompt keeps pop ups when i re-open the outlook, but when i disable proxy setting on control panel i can open outlook without any problem. is this problem comes from the fortigate or not ? need advice 

 

thanks and best regards

    4 replies

    gschmitt
    gschmitt
    New Member
    June 25, 2015

    What kind of mail provider is behind the outlook mailbox? Exchange or an external provider?

    Are you using a deep inspection SSL inspection profile?

    blackmail88
    blackmail88Author
    New Member
    June 25, 2015

    hi gschmitt thanks for the fast respone,

     

    im using exchange and yes i also using deep inspection SSL profile

    Matthijs
    Matthijs
    New Member
    July 1, 2015

    blackmail88 wrote:

    hi gschmitt thanks for the fast respone,

     

    im using exchange and yes i also using deep inspection SSL profile

    When using SSL deep inspection you need to import the CA certificate of the FortiGate onto your client PC's.

    To download the CA certificate you might need to add it to the GUI first.

     

    Go to system -> config -> Features and turn on certificates

    Go to system -> certificates and download the CA certificate.

     

    Import it as a trusted root certificate on your client (google for instructions since it is different per OS and device)

     

    NOTE: You might want to create a custom CA certificate to do do deep inspection since you are not sure if you can trust the pre installed one ;)

    hklb
    hklb
    Visitor III
    July 1, 2015

    Hi

     

    How do you configure your browser (wpad, proxy.pac or GPO) ?

     

    Your exchange is in your LAN network ? if yes, you need to specify that destination traffic within the local network don't pass through your proxy.

     

    Lucas

     

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!