Fortinet black logo

Handbook

SSH

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:503390
Download PDF

SSH

FortiGate supports SSH traffic through IPv6. When the proxy option is set to ssh in a proxy policy, IPv6 source and destination address options become available and SSH profiles can be assigned to IPv6 firewall policies.

Syntax in IPv6 firewall policy

config firewall policy6

edit 1

set utm-status enable

set ssh-filter-profile <example>

end

Syntax in proxy policy

config firewall proxy-policy

edit 1

set proxy ssh

set srcaddr6 "all"

set dstaddr6 "all"

end

Logging

When a proxy policy is being used, SSH traffic logs are generated by wad instead of the kernel.

SSH

FortiGate supports SSH traffic through IPv6. When the proxy option is set to ssh in a proxy policy, IPv6 source and destination address options become available and SSH profiles can be assigned to IPv6 firewall policies.

Syntax in IPv6 firewall policy

config firewall policy6

edit 1

set utm-status enable

set ssh-filter-profile <example>

end

Syntax in proxy policy

config firewall proxy-policy

edit 1

set proxy ssh

set srcaddr6 "all"

set dstaddr6 "all"

end

Logging

When a proxy policy is being used, SSH traffic logs are generated by wad instead of the kernel.