FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
mtse
Staff
Staff
Article Id 334617
Description

This article describes how to redirect clients from specific source IP addresses to another web server IP address.

Scope FortiWeb.
Solution

This procedure is about configuring Custom Policy and Rule for redirecting clients from specific source IP (e.g. source 11.11.1.9 in the example below) to another URL (e.g. 99.99.99.99 in the example below).

 

  1. Create a Custom Policy for specific Source IP and URL and action as 'Redirect'.

Web Protect -> Advanced Protection -> Custom Policy. Then create new 'Custom Policy'. Add 'Custom Rule' to specify 'Source IP'.

 

mtse_0-1724137681769.png

 

 

  1. Create a Web Protect Profile and apply the Custom Policy created above to it. Also, specify the 'Redirect URL' (any source IP specified in the Custom Policy with the action 'Redirect' will be redirected to this URL configured).

Policy -> Web Protection Profile.

 

mtse_1-1724137681773.png

 

mtse_2-1724137681776.png

 

  1. Apply the Web Protect Profile to the Server Policy.

Policy -> Server Policy.

mtse_3-1724137681780.png

 

FortiWeb will then redirect the user with source IP address 11.11.1.9 to another site IP 99.99.99.99.

 

mtse_4-1724137681785.png

 

Related documents:

Custom Policy

Configuring a protection profile for inline topologies

Contributors