Source address in ZTNA proxy policy

Forum|Forum|1 year ago
December 8, 2024
3 replies
955 views

Hi EMS/FGT admins

When creating ZTNA proxy rule (in Policy & Object > Proxy Policy) for clients that are off-fabric, is there anything valid that we can put in "Source" field other than "all"?

Trying to put the public source address of the client, or even the client's private source address behind its router, but nothing seem to match, only "all" works. It seems srcaddr in ZTNA proxy rules means something different than in standard rules, but can't find what.

Any idea?

sjoshi

Staff

Hi,

Can you share the snapshot of the proxy policy setup for better clarity

Thanks, Salon

sjoshi

Staff

setting up private IP should work as in the wad debug you will see the traffic coming with the private PC ip

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Sample-configuration-Proxy-ZTNA/ta-p/242053

Thanks, Salon

AEKAuthor

SuperUser

Hi Joshi

Thanks for your response.

Here is the screenshot:

On the tech tip you shared, they are also using "all" as source address in the ZTNA rule.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded