Technical Tip: How to configure License validation, FortiGuard Antivirus and Antispam queries via Web proxy

[aaborehab]

Description	This article describes how to configure License validation, Antivirus, and Antispam queries via Web proxy.
Scope	FortiMail v6.4, v7.0, v7.2, v7.4 and v7.6.
Solution	FortiMail offers the option to configure License validation, FortiGuard Antivirus queries, and FortiGuard Antispam queries via Web proxy via HTTPS protocol only. Licensing and FortiGuard Antivirus and Antispam queries can be configured via Web proxy from the CLI as follows: config system fortiguard antivirus     set tunneling-address <host_ipv4>      set tunneling-password <password_str>      set tunneling-port <port_int>     set tunneling-status {enable | disable}      set tunneling-username <username_str>  Tunneling-username and tunneling-password can be only used if the web proxy requires authentication. Only starting from v7.4.0, FortiGuard Antispam queries will be supported by using a web proxy. Before that it was only possible for Licensing and Fortiguard Antivirus queries to be tunneled. The configuration for both Antispam and Antivirus will be under the command 'config system Fortiguard antivirus'. A sample configuration by using FortiGate as a web proxy: From FortiMail: Where 10.10.10.1:8080 is the Web proxy. On the web proxy, it is possible to create rules to allow communication with FortiGuard servers. After that, it is possible to validate the license under System -> FortiGuard -> License to see the status of the services.