FortiPAM Web launcher from WAN

[AEK]

Hello PAM admins

FortiPAM 1.4.1.

I'm very new in FortiPAM and I have questions regarding Web launcher.

When I'm in company's local network all works fine, Web launcher, RDP launcher and SSH launcher.

However when I'm outside and connect from public IP and try run Web launcher it doesn't work, while SSH launcher and RDP launcher still work fine.

I noticed that for both RDP and SSH launcher, PAM opens the browser tab with address bar contains a public address like https://pam.mycompany.com/someaddress.

While for Web launcher it opens the private IP of the target, which naturally can't work from WAN without some proxy on the client.

If I'm not wrong I think it needs FortiClient in order to work, right?

So my question:

• Does it work with FortiClient for Windows, Linux & MacOS?
• Does it require EMS?
• Is there a plan to make it work in future release without FortiClient? (other PAM products can do it without agent)

[Anthony_E]

Hello Abdelkrim,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello Abdelkrim,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[AEK]

Thanks Antony for your support

Nothing urgent for now.

[Anthony_E]

Thank you Abdelkrim :)!

[chrisbenny]

Hi,

In the target of the secret under advanced settings, have you enabled "Web proxy" and "Domain list" with access mode as "proxy" and then set up a FQDN or IP list?

https://docs.fortinet.com/document/fortipam/1.4.0/examples/699270/configuring-the-web-proxy-feature-...

https://docs.fortinet.com/document/fortipam/1.4.1/administration-guide/460943/web-proxy