Cannot enable Explicit Proxy feature in F...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 316787

Description

This article describes the issue where Explicit Proxy cannot be enabled starting FortiOS 7.4.4.

Scope

FortiOS 7.4.4 and above.
Affected FortiGate models: FortiGate/FortiWiFi 40F, 60E, 60F, 80E, and 90E series of devices and their variants, and FortiGate-Rugged 60F.

Solution

In older builds, the explicit proxy feature can be enabled on FortiGate 2GB models after enabling the following commands:

config system global
set proxy-and-explicit-proxy enable
end

config system settings
set gui-proxy-inspection enable
end

Starting from v7.4.4, proxy-related features have been removed from 2GB models:

2 GB RAM FortiGate models no longer support FortiOS proxy-related features

Hence, the option to enable proxy-and-explicit-proxy has been removed:

Due to the respective, it would not be possible to enable the feature in GUI despite the option showing up in Feature Visibility:

If the explicit proxy is required, consider upgrading the FortiGate model with 4GB memory and above.

3227

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Cannot enable Explicit Proxy feature in FortiGate 2GB Model

You are leaving our website