ssl offloading configuration
Hello,
Does anyone have configured ssl offloading on the fortigate? I have used the 'cookbook' but it doesn't explain too well how to configure half mode ssl server configuration.
I need to decrypt incoming https and forward this unencrypted to backend http server.
What I configured:
conf firewall policy
set dstaddr "vip-to-webserver" => 157.52.x.x to 172.16.16.15
set service https
set webcache enable
set webcache-https ssl-server
and:
config wanopt ssl-server
edit webserver1
set ip 172.16.16.15
set port 443
set ssl-mode half
set mapped-port 80
set ssl-cert <webserver certificate>
Please advise.
Thank you in advance,
Kind regards,
Ralph