Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
NotMine
Contributor

Server load balancing - redirect HTTP to HTTPS

Hi guys,

 

I've set up a 100D to load balance HTTPS traffic between two real servers. So, I have one virtual server of type HTTPS, SSL offloading Client<->FortiGate and two real servers. But the problem is that users have to type in https://www.webserveraddress.dom every time they want to access my website.

 

What I would like is to automatically redirect their HTTP requests (i.e. http://www.webserveraddress.dom) to HTTPS (i.e. https://www.webserveraddress.dom).

 

Is there any way to do this on FGT-100D?

 

Thanks!

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
1 Solution
Dinesh_FTNT
Staff
Staff

HI,

Your requirement can be achieved with Fortiweb but with Fortigate HTTP to HTTPS redirection is not possible.

View solution in original post

6 REPLIES 6
garyxd
New Contributor

I think you need a FortiWeb for this case.  Or other dedicated load balancer (F5, A10, Kemp, etc.) / WAF that supports SSL offloading.

NotMine
Contributor

Hi,

FortiGate-100D does support SSL Offloading, and I've created a virtual server of HTTPS type. This works great. The certificate is being presented to the client by the FGT (SSL offloading is Client<->FortiGate), and the connections are being load balanced between two real servers.

 

But, it works only if the client types in https://www.serveraddres.lab in the address bar. If they go to the http://www.serveraddress.lab, they get nothing.

 

What I would like is that FortiGate automatically redirects all clients from http to https. It is a simple thing to do in TMG.

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
Dinesh_FTNT
Staff
Staff

HI,

Your requirement can be achieved with Fortiweb but with Fortigate HTTP to HTTPS redirection is not possible.

NotMine
Contributor

OK, thank you... It's a shame, really. It's only a minor feature, and I don't think it would be hard to implement, too. Especially when you consider that FGT is perfectly capable to automatically redirect administrative users from HTTP to HTTPS, when they try to login.

 

Thanks anyway, it's a correct answer - even though I don't like it. :)

 

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
DW_FTNT

HTTP to HTTPS redirect was added to 6.2.1 Code   you can terminate 443 on the fortigate or just pass 443 all the way to the server. This link shows how to terminate/offload 443 on the fortigate https://docs.fortinet.com...ect-for-load-balancing here is a link to offloading https://help.fortinet.com...db-ssl-tls-offload.htm     if you want to just pass 443 to the server and not terminate the session on the fortigate edit the vip "virtual-server-https" --->  set server-type tcp

 

you can also redirect other ports like 8080  using http edit "virtual-server-http"     set extport 80 to    set extport 8080     be sure to use proxy mode

Markus
Valued Contributor

I know, very old post, but good news...

Starting with FortiOS 6.2.1, you can configure a virtual server with HTTP to HTTPS redirect enabled

https://docs.fortinet.com...ect-for-load-balancing

 

[Edit]

sorry, allready posted :)


________________________________________________________
--- NSE 4 ---
________________________________________________________

________________________________________________________--- NSE 4 ---________________________________________________________
Labels
Top Kudoed Authors