FortiProxy
FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching
kltam
Staff
Staff
Article Id 380020
Description This article describes a configuration example to ensure all web traffic is intercepted and processed by the proxy, preventing users from bypassing security controls within FortiProxy's transparent mode
Scope FortiProxy.
Solution

To enable and configure the Force Proxy Option in FortiProxy:

  1. In GUI, go to Policy & Objects -> Policy -> Edit Policy -> Enable 'Force Proxy' under Proxy Options.

 

force proxy.png

 

  1. In CLI, 

 

config firewall policy
    edit <id>
        set force-proxy enable

    end

 

set force-proxy ?
enable
<----- Force all TCP transparent traffic to the proxy.
disable
<----- Do not force TCP transparent traffic to the proxy.

 

Note:

  • Force proxy sends all TCP traffic to WAD without UTM enabled 
  • It does not support traffic with expected sessions
Contributors