Skip to main content
firdaus9090
New Member
Feb 18, 2025 2:28 AM UTC
Solved

HTTP Authentication Exclude by IP Address

hi Community,

 

We have a website that goes through our fortiweb with HTTP authentication with AD enable. Is there a possibilities to exclude this authentication rule based on IP Address?

 

thanks

AEK
AEKAnswer
SuperUser
Feb 18, 2025 3:28 PM UTC

Hi Firdaus

One possible solution is to create 2 VS.

  • The first VS is accessed by the first IP group and it uses a protection profile with HTTP authentication
  • The second VS accessed by the second group and it uses a protection profile without HTTP authentication policy

I personally don't know another way to achieve it.

Hope it helps.

AEK

1 reply

AEK
SuperUser
AEKAnswer
SuperUser
Feb 18, 2025 3:28 PM UTC

Hi Firdaus

One possible solution is to create 2 VS.

  • The first VS is accessed by the first IP group and it uses a protection profile with HTTP authentication
  • The second VS accessed by the second group and it uses a protection profile without HTTP authentication policy

I personally don't know another way to achieve it.

Hope it helps.

AEK
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT