Hi All,
My boss has asked to me is it possible to accessing proxy server via public IP or FQDN which published to public?
The goals is he want to use proxy from internet while out of office.
I have suggest to use PAC for another option but he asked for first option possibility.
Can you guys help me for the solution like this is possible or do you have alternate solution to achieve the goals?
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello youmustbecrazy, :)
So the use case is to provide secure user access to remote users connecting from anywhere.
Your suggestion should work in this case even though it might not be the best user experience for remote users. Traffic in this case will be redirected internally to your FGT, then FPX for inspection and to internet.
However i would suggest a more elegant and simpler solution by using SASE SIA with secure web gateway (SWG) functionality. This is an agentless solution that uses same Explicit web proxy feature of FortiOS but as a cloud instance.
It will provide following benefits:
- Simpler administration and configuration.
- Remove the extra load of Remote user traffic inspection from the on-premise Instrastructure.
- Scalable solution in case number of Remote user increases in the future.
You can check this guide for reference showing how this works:
SASE SIA demo from fortinet video library:
https://video.fortinet.com/latest/fortisase-sia-demo
Regards
Hello youmustbecrazy, :)
So the use case is to provide secure user access to remote users connecting from anywhere.
Your suggestion should work in this case even though it might not be the best user experience for remote users. Traffic in this case will be redirected internally to your FGT, then FPX for inspection and to internet.
However i would suggest a more elegant and simpler solution by using SASE SIA with secure web gateway (SWG) functionality. This is an agentless solution that uses same Explicit web proxy feature of FortiOS but as a cloud instance.
It will provide following benefits:
- Simpler administration and configuration.
- Remove the extra load of Remote user traffic inspection from the on-premise Instrastructure.
- Scalable solution in case number of Remote user increases in the future.
You can check this guide for reference showing how this works:
SASE SIA demo from fortinet video library:
https://video.fortinet.com/latest/fortisase-sia-demo
Regards
Hi @Sx11 thank you very much for your advice. The proxy can be able using public IP via NAT, and it works perfectly!.
maybe I will tell my boss to consider using SASE, need to review it first.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1031 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.