Explicit Proxy in "Policy-based" mode?

[dontmindme]

Hi.

I switched from profile-based to policy-based and i cant find anywhere to add a explicit proxy on my firewall anymore? I have search for any features that are not available when enabling "policy-based" but i cant find any mentions of the explicit proxy feature dissapearing.

Any input?

[peter7979 · Accepted solution]

NGFW policy-based I think is only flow based i.e. you cannot have proxy features

[Debbie_FTNT]

Hi @dontmindme ,

as @peter7979 mentioned, FortiGates or VDOMs in policy-mode are exclusively in flow-mode inspection; the Explicit Proxy feature however requires proxy-mode inspection (inspection mode used to be set per-VDOM even in profile-based mode), so explicit proxy is currently not possible in policy-mode.

A note mentioning that policy-mode means flow-inspection only can be found here:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/978598/profile-based-ngfw-vs-policy-base...

Sorry to be the bearer of bad news.

[dontmindme]

Thank you for the clarification!