Skip to main content
mhrth
mhrth
Explorer II
March 26, 2022
Solved

Fortigate VIP with and without port forwarding

  • March 26, 2022
  • 2 replies
  • 4867 views

Hi. I have a question to the community. What is the difference in creating VIP (NATting) with port forwarding and without port forwarding? If i VIP all service without port forwarding does that mean all services are exposed to the internet? Hope someone can have a clear explanation on this as I am quite confused about this matter. Thank you in advance!

    Best answer by ede_pfau

    One more difference is that a host-forwarding VIP will work even for port-less protocols. Like ICMP.

    Not all protocols are created equal.

    2 replies

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    March 26, 2022

    Simple answer is without specific port forwarding it's called host mapping because everything destined to the external IP will be forwarded to one local/internal IP/host.
    With port forwarding, you can forward different port to different host, like HTTP/HTTPS go to host-A, and RDP goes to host-B, and so on.

     

    Toshi

      ede_pfau
      SuperUser
      ede_pfauAnswer
      SuperUser
      March 26, 2022

      One more difference is that a host-forwarding VIP will work even for port-less protocols. Like ICMP.

      Not all protocols are created equal.

      Terms & ConditionsAccessibility statement