- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fortimanager Central DNAT VIP Policy Load balance
Good day,
What is the difference, when creating a Central DNAT VIP policy in Fortimanager, between "Static NAT" type and "Load balance" type?
The documentation is a bit sparse...
Thanks.
- Labels:
-
FortiManager
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is more about FortiGate configuration than FortiManager, here's some relevant documentation for you:
https://docs.fortinet.com/document/fortigate/7.0.6/administration-guide/157796/vip-groups
https://community.fortinet.com/t5/FortiGate/Technical-Tip-VIP-creation-with-same-external-IP-and-map...
"The difference between static-nat and load-balance is that load-balance is used to balance the traffic between different Servers behind a FortiGate.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Mark,
Thanks for the response.
I've had no issue distinguishing between the two and working with them on FortiGate but it seems to be different in FortiManager. I see no way of implementing Virtual Servers on FortiManager. The "load balance" option does not expose any functionality for multiple "inside" servers.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It might be worth opening a TAC ticket for this.
I checked 6.4.7 and 7.0.4 VM's, Load Balance type didn't show up in 6.4 GUI but can be defined by installing a script to the ADOM DB. It looks like this was added in 7.0.
I only see options for configuring a single external IP/range but this applies to both FMG and FGT GUI.
