and WEB being HTTP/HTTPS, right? I don' t have expeirence with Lync 201x but I do have with Avaya mobile communications. And guess what It is WEB application and it is supported on Fweb.
Unless you have something valuable to add, then add it and don' t play smart ;) here.
i am not playing anything here, maybe wasting my time;
you' re asking for things far from the usual logic behind a waf.
What exactly do you want to mean with " Lync 2010, or avaya stuff" ?
Do you have web servers hosting web applications using video conference stuff like Lync? Did you host a Lync web server hosted there?
Do you asking for pre-created signatures for protect it with a waf?
If so, what exactly do you want to accomplish?
If not,, what exactly do you want to do?
Reading your posts in fortiweb forum and your almost sarcastic comments, I think you' ve not read enough fortiweb specs and usage.
But nevermind, maybe i just " playing smart" as you said and not trying to understand your posts
being dumb, that' s the reason I asked community is there somebody with such a deployment. I know what Fweb is for and dealing with them few years now. They are not perfect but get 98% of stuff done. You reverted to me like I don' t have a clue what is waf or firewall device but me is dealing with Fortinet as os 1.9 or 1.8 FortiOS, Can' t remember year.
So if you haven' t done anything with Lync and Fweb, then you don' t have experience required to asnwer the question (of course you probably have wealth of other experience which is really useful here; not being sarcastic).
So for expert members here before you engage with help don' t underestimate other people. Sometimes other people maybe dealing with Fortinet just like aside responsibility and not being able to go thru manual for every particular thing.
I' m sorry Damir, it was never my intention underestimate another people; you could see all my old posts to confirm that.
I was here since fortios 2.5 too; but fortiweb , fortidb, fortiauthenticator and all the ' new' products are also relativately new for me, i' ,m gaining expertise with those over the months; I try to not to advise anything that I have not tested before.
Regarding the point, indeed, i did nothing yet with hosted Lync server behind a Fortiweb; however that it was not you first question in your first post.
Yes, if SIP is in questions ( I don' t have expeirence with Lync at all nor I know architecture behind) so I guess session border controller is best approach for this ... Any particular recommendation for Lync ? we are an avaya partner and gettint sipera thru contract but avaya is going to some lock ins on their platform so I rather avoid them in this project ...
After looking at the system requirements for Lync 2013 and glancing through some of the Lync server set-up guides (involving AD, IIS, PSTN analog gateways, dual/NIC teaming, QoS. etc), I would be more incline to deploy a more full-featured firewall appliance -- just because whatever Micrsoft may want you to install along/on top of Lync, that may need " protecting" .
Mind you, the Microsoft deployment guides assume/expect their edge server components are being installed.
The port list for Lync server is provided here. I do not know enough about FortiWeb to know if it can block/allow/port redirect/forwarding to/from all these ports.