Created on
10-18-2024
12:24 AM
Edited on
03-20-2025
05:22 AM
By
Jean-Philippe_P
Description |
This article describes an example of bypassing specific application traffic through FortiProxy. |
Scope | FortiProxy. |
Solution |
The user application connects to the destination server through an internal firewall and proxy, the application traffic flow is shown below: Application -> Internal Firewall -> Explicit Proxy -> Internet -> Destination.
Example: User application (10.169.2.76) accesses the destination URL www.example.com (93.184.215.14).
By default, FortiProxy does not intercept application traffic using the not-explicit proxy port, and configuring a transparent proxy policy is needed to bypass this specific traffic.
In this example, the application would forward toward the Internet, and central snap mapping must be configured to translate the traffic accordingly.
Use the CLI command to confirm the application traffic through the transparent proxy and NAT translation.
fpx # diagnose wad filter src <client-ip> fpx # diagnose wad session list
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.