Issues with activating proxy mode in Cloudflare to hide WAN IP of FortiGate

[kpatio]

Hello community,

I need help hiding the WAN IP of my FortiGate, using proxy services like Cloudflare. I have currently set up my FortiGate with a subdomain (mifirewall.mypage.com) and an SSL certificate from Let's Encrypt, which works perfectly in DNS mode with Cloudflare. However, when I switch to proxy mode to enhance security and hide the IP, the system stops functioning as expected.

Additionally, this configuration with Cloudflare is used not only for managing the device but also as the address for SSL VPN clients. This makes it crucial to maintain constant functionality and accessibility through Cloudflare.

Has anyone faced a similar problem when activating proxy mode in Cloudflare? How did you resolve it? I am particularly interested in knowing if there are specific configurations or adjustments I could apply to solve this issue.

Thank you for your time and assistance.

[ozkanaltas · Accepted solution]

Hello @kpatio ,

In my opinion, this is not possible, especially the ssl-vpn part. But if you want to use proxy mode for Admin GUI access. You need to deploy the CloudFlare certificate to Fortigate. Because I remembered Cloudflare worked like that. 

I found a topic about that. Fortinet staff says you need a different solution for that request. You can review this topic. 

https://community.fortinet.com/t5/Support-Forum/Fortigate-SSL-VPN-Client-Unable-to-Maintain-Connecti...