We have are deploying Fortiweb in between our Fortigate and Web Server,
in one-arm reverse proxy mode. Our webserver needs to capture the
original IP of web visitors, but the webserver could only see the IP of
the FortiWeb. I have already enabled X-F...
Hi All, Is there a way to increase the limit of certificates on the SSL
Inspection > Protecting SSL Server?Apparently, limit of certicates that
can be used is 10 as noted on the below article link and seems no
resolution on
it:https://community.forti...
I just setup a Fortigate under Azure recently, we have a web server
behind the Fortigate with Virtual IP configured. It is working fine, I
could access the website externally. But when I disable NAT, web server
is inaccessible. We would need the NAT ...
Hi kmak, The two link you forwarded are similar, it was for Apache. Do
have for IIS? There was a progress, X-Forwarded-For is appearing when on
HTTP. But on not HTTPS. Even the Fortiweb's attack log is showing
Original IP on HTTP but internal IP on H...
Thank you for your input gfleming and abelio. Would it be expensive?
Will have to look into the multi-domain SSL.I was thinking if we have a
workaround where we will set different firewall policy based on the
FQDN. It would be like:-Create a VIP via ...
I believe only plain text file format are accepted if you use IP Address
External Connector, that's why it says bad format. As for the huge
traffic on port 53, as @gfleming mentioned, if you do not need the
inbound access to port 53, you may want to ...
I have finally resolved it. Sharing what I found. Found out Azure VMs
has built-in NAT gateway that forces the internet outbound connection of
VM. (Even if you change the actualy gateway IP inside the VM.) Thats why
we get different IP when we run ip...
Great tips from other contributor. Found this helpful youtube video as
guide on how you can establish External Fabric Connecor as what Yurisk
has already mentioned:https://www.youtube.com/watch?v=CarI6_URN90
