Technical Tip: How to configure the load balance o...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 232230

Description

This article describes how to configure the load balance on ICAP servers.

Scope

FortiGate.

Solution

1) Create the 2 ICAP servers:

# config icap server
edit "ICAP-1"
set ip-address 10.120.5.119
next
edit "ICAP-2"
set ip-address 192.168.5.119
next
end

2) Configure the ICAP server group:

# config icap server-group
edit "SERVER-GRP"
set ldb-method active-passive
config server-list
edit "ICAP-1"
next
edit "ICAP-2"
next
end
next
end

Create the ICAP servers profile :

# config icap profile
edit "ICAP-PROFILE"
set request-server "SERVER-GRP"
set response-server "SERVER-GRP"
end
end

Then Specify the ICAP profile in the firewall policy:

# config firewall policy
edit <policy-id>
set icap-profile "ICAP-PROFILE"
next
end

331

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to configure the load balance on ICAP servers