Skip to main content
NotMine
NotMine
Explorer III
February 2, 2015
Solved

HTTPS load balancing missing on FGT-60D

  • February 2, 2015
  • 3 replies
  • 8470 views

Hello everyone,

 

I'm trying to set up server load balancing on my FGT-60D, with SSL offloading. But, when I try to configure a new virtual server, I don't have an option to select HTTPS type. Here's CLI configuration process:

 

 

Is it possible that 60D does not support HTTPS load balancing?

 

Thanks!

Slavko

    Best answer by lkorbasiewicz_FTNT

    Hello,

     

    Indeed, your device will not support SSL offloading. Please find more in our Feature / Platform matrix on http://docs.fortinet.com/fortigate/reference or directly for FortiOS 5.2.2 version http://docs.fortinet.com/uploaded/files/2204/fortios-feature-platform-matrix-522.pdf

     

    Best Regards,

    Lukasz Korbasiewicz

    3 replies

    lkorbasiewicz_FTNT
    Staff
    lkorbasiewicz_FTNTAnswer
    Staff
    February 2, 2015

    Hello,

     

    Indeed, your device will not support SSL offloading. Please find more in our Feature / Platform matrix on http://docs.fortinet.com/fortigate/reference or directly for FortiOS 5.2.2 version http://docs.fortinet.com/uploaded/files/2204/fortios-feature-platform-matrix-522.pdf

     

    Best Regards,

    Lukasz Korbasiewicz

    NotMine
    NotMineAuthor
    Explorer III
    February 2, 2015

    That's what I was afraid of. :(

     

    Actually, what I really need is SSL offloading for FGT-90D, but according to this document, this model also does not support SSL offloading in version 5.2.2. Curiously enough, it is supported on FGT-90D in version 5.0.5... Why would they do this?

    emnoc
    emnoc
    New Member
    February 3, 2015

    it is supported on FGT-90D in version 5.0.5... Why would they do this?

     

    Because SSL offloading can be  cpu/memory resource impacting and the smaller footprints do performance at best for this model and the role in question. A FGT60D is at best a entry level firewall or a  desktop SMB and that means more closer to the S in SMB

     

    If you need  true SSL-offloading, than look a SLB or a bigger firewall.

     

     

    Terms & ConditionsAccessibility statement