FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
faical
Staff
Staff
Article Id 353371
Description

The article explains how to enable health checks on the ForitWeb server pool when the back-ends have a URL to validate health status.

Scope FortiWeb.
Solution

Follow the steps clarified below:

On GUI, go to Server Object -> Server -> Health Check and create a new and add Type 'HTTP'. Then on the URL specify the path used to check the health of the real servers. Use 'Matched Content' so FortiWeb will consider the real server a part of the pool only when the server is returning the string 'health' on the HTML body:

 

HC.png

The real server that is not returning the string 'Health' will be shown down on the Server pool and FortiWeb will not send traffic to it:

 

HC2.png

The capture on the back-end is showing FortiWeb sending url : /Health to both real servers and the active server in the pool is the one sending the 'Health' string on the response body which will make it the only member of the server pool:

 

HC3.png