Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • XML Reference Guide

    Home FortiClient 6.4.3 XML Reference Guide
    6.4.3
    7.4.1
    7.4.0
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0

    FortiProxy settings

    FortiProxy settings

    The <fortiproxy></fortiproxy> XML tags contain FortiProxy information. FortiProxy is responsible for HTTP/HTTPS filtering and SMTP/POP3 AV scanning. Use these settings to configure FortiProxy’s behavior.

    <forticlient_configuration>

    <system>

    <fortiproxy>

    <enabled>1</enabled>

    <enable_https_proxy>1</enable_https_proxy>

    <http_timeout>60</http_timeout>

    <client_comforting>

    <pop3_client>1</pop3_client>

    <pop3_server>1</pop3_server>

    <smtp>1</smtp>

    </client_comforting>

    <selftest>

    <enabled>0</enabled>

    <last_port>-172</last_port>

    <notify>0</notify>

    </selftest>

    </fortiproxy>

    </system>

    </forticlient_configuration>

    The following table provides the XML tags for FortiProxy settings, as well as the descriptions and default values where applicable.

    XML tag

    Description

    Default value

    <enabled>

    Enable FortiProxy. When set to 0, FortiProxy is disabled. HTTP/HTTPS filtering and SMTP/POP3 AV scanning are disabled.

    Boolean value: [0 | 1]

    1

    <enable_https_proxy>

    Enable HTTPS proxy. When the Boolean value is set to 0, FortiProxy is unable to perform filtering on HTTPS traffic.

    Boolean value: [0 | 1]

    1

    <http_timeout>

    Connection timeout in seconds. FortiProxy determines if the remote server is available based on this timeout value. Lower this timeout value if your client requires a faster fail response.

    60

    <client_comforting> elements

    Some email clients require continuous response from the server or a connection error may be triggered. Use these settings to enable this feature.

    <pop3_client>

    Enable POP3 client comforting. Client comforting helps to prevent POP3 clients from complaining that the server has not responded in time.

    Boolean value: [0 | 1]

    1

    <pop3_server>

    Enable POP3 server comforting. Server comforting helps to prevent POP3 servers from complaining that the client has not responded in time. This may be used in a situation where FortiClient is installed on a mail server.

    Boolean value: [0 | 1]

    1

    <smtp>

    Enable SMTP client comforting. SMTP comforting helps to prevent SMTP clients from complaining that the server has not responded in time.

    Boolean value: [0 | 1]

    1

    <selftest> elements

    FortiProxy can detect if other software is disrupting internal traffic between FortiProxy's internal modules. It does this by sending packets periodically to 1.1.1.1, which are intercepted by FortiClient and dropped (they never leave the computer). If the packets are not detected, then it is deemed highly likely that third party software is intercepting the packets, signaling that FortiProxy is not able to perform regular traffic filtering.

    <enabled>

    Enable self tests. FortiProxy periodically checks its own connectivity to determine if it is able to proxy other applications' traffic.

    Boolean value: [0 | 1]

    1

    <last_port>

    Last port number used. This is the highest port number you want to allow FortiProxy to listen on. Use to prevent FortiProxy from binding to another port that another service normally uses.

    Port range: 65535 to 10000

    65535

    <notify>

    When enabled, the user sees a bubble notification when self-testing detects that a third party program has blocked HTTP/HTTPS filtering and SMTP/POP3 AV scanning.

    Boolean value: [0 | 1]

    1
    Previous
    Next

    FortiProxy settings

    FortiProxy settings

    The <fortiproxy></fortiproxy> XML tags contain FortiProxy information. FortiProxy is responsible for HTTP/HTTPS filtering and SMTP/POP3 AV scanning. Use these settings to configure FortiProxy’s behavior.

    <forticlient_configuration>

    <system>

    <fortiproxy>

    <enabled>1</enabled>

    <enable_https_proxy>1</enable_https_proxy>

    <http_timeout>60</http_timeout>

    <client_comforting>

    <pop3_client>1</pop3_client>

    <pop3_server>1</pop3_server>

    <smtp>1</smtp>

    </client_comforting>

    <selftest>

    <enabled>0</enabled>

    <last_port>-172</last_port>

    <notify>0</notify>

    </selftest>

    </fortiproxy>

    </system>

    </forticlient_configuration>

    The following table provides the XML tags for FortiProxy settings, as well as the descriptions and default values where applicable.

    XML tag

    Description

    Default value

    <enabled>

    Enable FortiProxy. When set to 0, FortiProxy is disabled. HTTP/HTTPS filtering and SMTP/POP3 AV scanning are disabled.

    Boolean value: [0 | 1]

    1

    <enable_https_proxy>

    Enable HTTPS proxy. When the Boolean value is set to 0, FortiProxy is unable to perform filtering on HTTPS traffic.

    Boolean value: [0 | 1]

    1

    <http_timeout>

    Connection timeout in seconds. FortiProxy determines if the remote server is available based on this timeout value. Lower this timeout value if your client requires a faster fail response.

    60

    <client_comforting> elements

    Some email clients require continuous response from the server or a connection error may be triggered. Use these settings to enable this feature.

    <pop3_client>

    Enable POP3 client comforting. Client comforting helps to prevent POP3 clients from complaining that the server has not responded in time.

    Boolean value: [0 | 1]

    1

    <pop3_server>

    Enable POP3 server comforting. Server comforting helps to prevent POP3 servers from complaining that the client has not responded in time. This may be used in a situation where FortiClient is installed on a mail server.

    Boolean value: [0 | 1]

    1

    <smtp>

    Enable SMTP client comforting. SMTP comforting helps to prevent SMTP clients from complaining that the server has not responded in time.

    Boolean value: [0 | 1]

    1

    <selftest> elements

    FortiProxy can detect if other software is disrupting internal traffic between FortiProxy's internal modules. It does this by sending packets periodically to 1.1.1.1, which are intercepted by FortiClient and dropped (they never leave the computer). If the packets are not detected, then it is deemed highly likely that third party software is intercepting the packets, signaling that FortiProxy is not able to perform regular traffic filtering.

    <enabled>

    Enable self tests. FortiProxy periodically checks its own connectivity to determine if it is able to proxy other applications' traffic.

    Boolean value: [0 | 1]

    1

    <last_port>

    Last port number used. This is the highest port number you want to allow FortiProxy to listen on. Use to prevent FortiProxy from binding to another port that another service normally uses.

    Port range: 65535 to 10000

    65535

    <notify>

    When enabled, the user sees a bubble notification when self-testing detects that a third party program has blocked HTTP/HTTPS filtering and SMTP/POP3 AV scanning.

    Boolean value: [0 | 1]

    1
    Previous
    Next