Fortigate Reverse Proxy

[student1363]

hi guys,

I read this in FortiOS handbook:

In reverse proxy mode, the FortiGate unit functions more like a web server for clients on the Internet. Replicated content is delivered from the proxy cache to the external client without exposing the web server or the private network residing safely behind the firewall.

My question is, those lines mean that the connections from public users in internet won't go directly to my web-services which are behind fortigate?

I want to be sure that servers behind firewall will not get in touch directly with users in internet.

Thanks

[aagrafi · Accepted solution]

Yes, that is correct. The FG answers on behalf of the server. For that reason, if the traffic is HTTPS, the server's certificate must be installed in the FG.