Skip to main content
JFGauth
New Member
Jan 14, 2025 10:51 PM UTC
Question

Web redirect

Hello everyone,

 

We have a DNS record that currently points to one of our Public IP Addresses.
With a VIP, the traffic is sent to our Big IP F5 where an irule is defined to redirect the traffic to an external public website (https). 

 

I would like to do the same but directly from the Fortigate and not use the our F5.

Can this be done ?
Thanks

 

10 replies

AEK
SuperUser
SuperUser
Jan 15, 2025 8:14 AM UTC

Hi JF

You should be able to do it with a VIP and a firewall rule.

Add a VIP to map the virtual IP to the real IP (on the required TCP port, like 443 and/or 80), then add firewall rule that allow traffic from ALL (as source) to the VIP (as destination).

 
Translate
AEK
JFGauth
JFGauthAuthor
New Member
Jan 15, 2025 2:49 PM UTC

Hello AEK

I tried that and it doesn't work.

Translate
AEK
SuperUser
SuperUser
Jan 15, 2025 2:51 PM UTC

Can you share the configuration? (you can hide the public IP addresses)

Translate
AEK
JFGauth
JFGauthAuthor
New Member
Jan 15, 2025 2:53 PM UTC

I took it out already since it didn't work :)

Thing is, the F5 rule is also presenting a certificate on the redirect (wildcard) and this can't be done with a VIP... So I also tried with a Virtual Server... but no luck there either.

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024