Fortigate Proxy chaining to use Authentification

Hello Alex,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks

Hello Alex,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

Hi Alex,

To configure FortiGate proxy chaining with authentication:

1. Set up the first FortiGate unit with authentication, such as Kerberos.
2. Configure the second FortiGate unit with a different authentication method, like NTLM.
3. Ensure that the first FortiGate forwards traffic to the second FortiGate.
4. Note that the second FortiGate will respond with HTTP 407 (Proxy Authentication Required) to the client.
5. Understand that the client may get confused as it is already authenticated with the first FortiGate.
6. The first FortiGate unit will not forward the Proxy-Authorization header to the second FortiGate unit to prevent credential leaks.
7. It is not possible to achieve dual mixed authentication in this setup.
8. The supported setup involves authentication on the first FortiGate unit while the second FortiGate unit performs authorization using the x-auth-user header.

Hope it will help.

Regards,