Fortinet black logo

Handbook

Proxy addresses

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:708516
Download PDF

Proxy addresses

This category of address is different from the other addresses in that it is not designed to be used in the normal firewall policy configuration. It is intended to be used only with explicit web proxies.

In some respects they can be like a FQDN addresses in that they refer to an alpha-numeric string that is assigned to an IP address, but then goes an additional level of granularity by using additional information and criteria to further specify locations or types of traffic within the website itself.

Creating an proxy address

  1. Go to Policy & Objects > Addresses.
  2. Select Create New. A drop down menu is displayed. Select Address.
  3. In the Category field, choose Proxy Address.
  4. Input a Namefor the address object.
  5. For the Type field, select one of the options from the drop down menu.

    Within the Explicit Proxy Address category there are eight types of addresses. Each of these types will have associated field(s) that also need to have values entered to make the object specific to its address.

    Type = URL Pattern

    • In the Host field, choose from drop down menu
    • In the URL Path Regex field, enter the appropriate string

    Host Regex Match

    • In the Host Regex Pattern field, enter the appropriate string

    URL Category

    • In the Host field, choose from drop down menu
    • In the URL Category field, choose from drop down menu

    HTTP Method

    • In the Host field, choose from drop down menu
    • In the Request Method field, choose from drop down menu:
      • CONNECT
      • DELETE
      • GET
      • HEAD
      • OPTIONS
      • POST
      • PUT
      • TRACE

    User Agent

    • In the Host field, choose from drop down menu
    • In the User Agent field, choose from drop down menu
      • Apple Safari
      • Google Chrome
      • Microsoft Internet Explorer or Spartan
      • Mozilla Firefox
      • Other browsers

    HTTP Header

    • In the Host field, choose from drop down menu
    • In the Header Name field, enter the appropriate string value
    • In the Header Regex field, enter the appropriate string value

    Advanced (Source)

    • In the Host field, choose from drop down menu
    • In the Request Method field, choose from drop down menu (see HTTP Method type for option list)
    • In the User Agent field, choose from drop down menu (see User Agent type for option list)
    • In the Header Group table, create, edit or delete Header Name strings and associated Header Regex strings

    Advance (Destination)

    • In the Host field, choose from drop down menu
    • In the Host Regex Pattern field, enter the appropriate string
    • In the URL Category field, choose from drop down menu
  6. Select the desired on/off toggle setting for Show in Address List. If the setting is enabled the address will appear in drop down menus where it is an option.
  7. Input any additional information in the Comments field.
  8. Click OK.

Proxy addresses

This category of address is different from the other addresses in that it is not designed to be used in the normal firewall policy configuration. It is intended to be used only with explicit web proxies.

In some respects they can be like a FQDN addresses in that they refer to an alpha-numeric string that is assigned to an IP address, but then goes an additional level of granularity by using additional information and criteria to further specify locations or types of traffic within the website itself.

Creating an proxy address

  1. Go to Policy & Objects > Addresses.
  2. Select Create New. A drop down menu is displayed. Select Address.
  3. In the Category field, choose Proxy Address.
  4. Input a Namefor the address object.
  5. For the Type field, select one of the options from the drop down menu.

    Within the Explicit Proxy Address category there are eight types of addresses. Each of these types will have associated field(s) that also need to have values entered to make the object specific to its address.

    Type = URL Pattern

    • In the Host field, choose from drop down menu
    • In the URL Path Regex field, enter the appropriate string

    Host Regex Match

    • In the Host Regex Pattern field, enter the appropriate string

    URL Category

    • In the Host field, choose from drop down menu
    • In the URL Category field, choose from drop down menu

    HTTP Method

    • In the Host field, choose from drop down menu
    • In the Request Method field, choose from drop down menu:
      • CONNECT
      • DELETE
      • GET
      • HEAD
      • OPTIONS
      • POST
      • PUT
      • TRACE

    User Agent

    • In the Host field, choose from drop down menu
    • In the User Agent field, choose from drop down menu
      • Apple Safari
      • Google Chrome
      • Microsoft Internet Explorer or Spartan
      • Mozilla Firefox
      • Other browsers

    HTTP Header

    • In the Host field, choose from drop down menu
    • In the Header Name field, enter the appropriate string value
    • In the Header Regex field, enter the appropriate string value

    Advanced (Source)

    • In the Host field, choose from drop down menu
    • In the Request Method field, choose from drop down menu (see HTTP Method type for option list)
    • In the User Agent field, choose from drop down menu (see User Agent type for option list)
    • In the Header Group table, create, edit or delete Header Name strings and associated Header Regex strings

    Advance (Destination)

    • In the Host field, choose from drop down menu
    • In the Host Regex Pattern field, enter the appropriate string
    • In the URL Category field, choose from drop down menu
  6. Select the desired on/off toggle setting for Show in Address List. If the setting is enabled the address will appear in drop down menus where it is an option.
  7. Input any additional information in the Comments field.
  8. Click OK.