Skip to main content
Ken_Durrant
New Member
March 15, 2024
Question

FortiGate Transparent Proxy

  • March 15, 2024
  • 1 reply
  • 932 views

Have a use case to allow Chrome and MS-Edge to have access to internet, but all other browsers should be denied.

Following the guide. https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/720455

Showing mixed results using the proxy, where Opera browser is mostly broken, (The Goal), but internal by IP still responds).  The method from doc we are using is user-agent, which shows ua-min and max versions.  Question is shouldn't Opera, Netscape, Firefox, and Browser X fail, since they are not defined?  These are done in Address objects, and only MS-Edge and Chrome are defined.  These objects show no reference to anything, which may be cosmetic.  We do set Proxy Policy rules getting hit.

 

1 reply

hbac
Staff & Editor
Staff & Editor
March 16, 2024

Hi @Ken_Durrant.,

 

Based on the admin guide, policy will only allow or block requests from the specified user agent. I believe the policy will only match traffic with specified browser. Have you checked the logs to see which policy it matched? 

 

Regards, 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!