Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.4.2
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    icap profile

    Configure ICAP profiles.

      config icap profile
      Description: Configure ICAP profiles.
      edit <name>
          set replacemsg-group {string}
          set request [disable|enable]
          set response [disable|enable]
          set streaming-content-bypass [disable|enable]
          set preview [disable|enable]
          set preview-data-length {integer}
          set request-server {string}
          set response-server {string}
          set request-failure [error|bypass]
          set response-failure [error|bypass]
          set request-path {string}
          set response-path {string}
          set methods {option1}, {option2}, ...
          set response-req-hdr [disable|enable]
          set respmod-default-action [forward|bypass]
          config icap-headers
              Description: Configure ICAP forwarded request headers.
              edit <id>
                  set name {string}
                  set content {string}
                  set base64-encoding [disable|enable]
              next
          end
          config respmod-forward-rules
              Description: ICAP response mode forward rules.
              edit <name>
                  set host {string}
                  config header-group
                      Description: HTTP header group.
                      edit <id>
                          set header-name {string}
                          set header {string}
                          set case-sensitivity [disable|enable]
                      next
                  end
                  set action [forward|bypass]
                  set http-resp-status-code <code1>, <code2>, ...
              next
          end
      next
  end

    config icap profile

    Parameter Name Description Type Size
    replacemsg-group Replacement message group. string Maximum length: 35
    request Enable/disable whether an HTTP request is passed to an ICAP server.
    disable: Disable HTTP request passing to ICAP server.
    enable: Enable HTTP request passing to ICAP server.
    		 option -
    response Enable/disable whether an HTTP response is passed to an ICAP server.
    disable: Disable HTTP response passing to ICAP server.
    enable: Enable HTTP response passing to ICAP server.
    		 option -
    streaming-content-bypass Enable/disable bypassing of ICAP server for streaming content.
    disable: Disable bypassing of ICAP server for streaming content.
    enable: Enable bypassing of ICAP server for streaming content.
    		 option -
    preview Enable/disable preview of data to ICAP server.
    disable: Disable preview of data to ICAP server.
    enable: Enable preview of data to ICAP server.
    		 option -
    preview-data-length Preview data length to be sent to ICAP server. integer Minimum value: 0 Maximum value: 4096
    request-server ICAP server to use for an HTTP request. string Maximum length: 35
    response-server ICAP server to use for an HTTP response. string Maximum length: 35
    request-failure Action to take if the ICAP server cannot be contacted when processing an HTTP request.
    error: Error.
    bypass: Bypass.
    		 option -
    response-failure Action to take if the ICAP server cannot be contacted when processing an HTTP response.
    error: Error.
    bypass: Bypass.
    		 option -
    request-path Path component of the ICAP URI that identifies the HTTP request processing service. string Maximum length: 127
    response-path Path component of the ICAP URI that identifies the HTTP response processing service. string Maximum length: 127
    methods The allowed HTTP methods that will be sent to ICAP server for further processing.
    delete: Forward HTTP request or response with DELETE method to ICAP server for further processing.
    get: Forward HTTP request or response with GET method to ICAP server for further processing.
    head: Forward HTTP request or response with HEAD method to ICAP server for further processing.
    options: Forward HTTP request or response with OPTIONS method to ICAP server for further processing.
    post: Forward HTTP request or response with POST method to ICAP server for further processing.
    put: Forward HTTP request or response with PUT method to ICAP server for further processing.
    trace: Forward HTTP request or response with TRACE method to ICAP server for further processing.
    other: Forward HTTP request or response with All other methods to ICAP server for further processing.
    		 option -
    response-req-hdr Enable/disable addition of req-hdr for ICAP response modification (respmod) processing.
    disable: Do not add req-hdr for response modification (respmod) processing.
    enable: Add req-hdr for response modification (respmod) processing.
    		 option -
    respmod-default-action Default action to ICAP response modification (respmod) processing.
    forward: Forward response to icap server unless a rule specifies not to.
    bypass: Don't forward request to icap server unless a rule specifies to forward the request.
    		 option -

    config icap-headers

    Parameter Name Description Type Size
    name HTTP forwarded header name. string Maximum length: 79
    content HTTP header content. string Maximum length: 255
    base64-encoding Enable/disable use of base64 encoding of HTTP content.
    disable: Disable use of base64 encoding of HTTP content.
    enable: Enable use of base64 encoding of HTTP content.
    		 option -

    config respmod-forward-rules

    Parameter Name Description Type Size
    host Address object for the host. string Maximum length: 79
    action Action to be taken for ICAP server.
    forward: Forward request to ICAP server when this rule is matched.
    bypass: Don't forward request to ICAP server when this rule is matched.
    		 option -
    http-resp-status-code <code> HTTP response status code.
    HTTP response status code.    		 integer Minimum value: 100 Maximum value: 599

    config header-group

    Parameter Name Description Type Size
    header-name HTTP header. string Maximum length: 79
    header HTTP header regular expression. string Maximum length: 255
    case-sensitivity Enable/disable case sensitivity when matching header.
    disable: Ignore case when matching header.
    enable: Do not ignore case when matching header.
    		 option -
    Previous
    Next

    icap profile

    Configure ICAP profiles.

      config icap profile
      Description: Configure ICAP profiles.
      edit <name>
          set replacemsg-group {string}
          set request [disable|enable]
          set response [disable|enable]
          set streaming-content-bypass [disable|enable]
          set preview [disable|enable]
          set preview-data-length {integer}
          set request-server {string}
          set response-server {string}
          set request-failure [error|bypass]
          set response-failure [error|bypass]
          set request-path {string}
          set response-path {string}
          set methods {option1}, {option2}, ...
          set response-req-hdr [disable|enable]
          set respmod-default-action [forward|bypass]
          config icap-headers
              Description: Configure ICAP forwarded request headers.
              edit <id>
                  set name {string}
                  set content {string}
                  set base64-encoding [disable|enable]
              next
          end
          config respmod-forward-rules
              Description: ICAP response mode forward rules.
              edit <name>
                  set host {string}
                  config header-group
                      Description: HTTP header group.
                      edit <id>
                          set header-name {string}
                          set header {string}
                          set case-sensitivity [disable|enable]
                      next
                  end
                  set action [forward|bypass]
                  set http-resp-status-code <code1>, <code2>, ...
              next
          end
      next
  end

    config icap profile

    Parameter Name Description Type Size
    replacemsg-group Replacement message group. string Maximum length: 35
    request Enable/disable whether an HTTP request is passed to an ICAP server.
    disable: Disable HTTP request passing to ICAP server.
    enable: Enable HTTP request passing to ICAP server.
    		 option -
    response Enable/disable whether an HTTP response is passed to an ICAP server.
    disable: Disable HTTP response passing to ICAP server.
    enable: Enable HTTP response passing to ICAP server.
    		 option -
    streaming-content-bypass Enable/disable bypassing of ICAP server for streaming content.
    disable: Disable bypassing of ICAP server for streaming content.
    enable: Enable bypassing of ICAP server for streaming content.
    		 option -
    preview Enable/disable preview of data to ICAP server.
    disable: Disable preview of data to ICAP server.
    enable: Enable preview of data to ICAP server.
    		 option -
    preview-data-length Preview data length to be sent to ICAP server. integer Minimum value: 0 Maximum value: 4096
    request-server ICAP server to use for an HTTP request. string Maximum length: 35
    response-server ICAP server to use for an HTTP response. string Maximum length: 35
    request-failure Action to take if the ICAP server cannot be contacted when processing an HTTP request.
    error: Error.
    bypass: Bypass.
    		 option -
    response-failure Action to take if the ICAP server cannot be contacted when processing an HTTP response.
    error: Error.
    bypass: Bypass.
    		 option -
    request-path Path component of the ICAP URI that identifies the HTTP request processing service. string Maximum length: 127
    response-path Path component of the ICAP URI that identifies the HTTP response processing service. string Maximum length: 127
    methods The allowed HTTP methods that will be sent to ICAP server for further processing.
    delete: Forward HTTP request or response with DELETE method to ICAP server for further processing.
    get: Forward HTTP request or response with GET method to ICAP server for further processing.
    head: Forward HTTP request or response with HEAD method to ICAP server for further processing.
    options: Forward HTTP request or response with OPTIONS method to ICAP server for further processing.
    post: Forward HTTP request or response with POST method to ICAP server for further processing.
    put: Forward HTTP request or response with PUT method to ICAP server for further processing.
    trace: Forward HTTP request or response with TRACE method to ICAP server for further processing.
    other: Forward HTTP request or response with All other methods to ICAP server for further processing.
    		 option -
    response-req-hdr Enable/disable addition of req-hdr for ICAP response modification (respmod) processing.
    disable: Do not add req-hdr for response modification (respmod) processing.
    enable: Add req-hdr for response modification (respmod) processing.
    		 option -
    respmod-default-action Default action to ICAP response modification (respmod) processing.
    forward: Forward response to icap server unless a rule specifies not to.
    bypass: Don't forward request to icap server unless a rule specifies to forward the request.
    		 option -

    config icap-headers

    Parameter Name Description Type Size
    name HTTP forwarded header name. string Maximum length: 79
    content HTTP header content. string Maximum length: 255
    base64-encoding Enable/disable use of base64 encoding of HTTP content.
    disable: Disable use of base64 encoding of HTTP content.
    enable: Enable use of base64 encoding of HTTP content.
    		 option -

    config respmod-forward-rules

    Parameter Name Description Type Size
    host Address object for the host. string Maximum length: 79
    action Action to be taken for ICAP server.
    forward: Forward request to ICAP server when this rule is matched.
    bypass: Don't forward request to ICAP server when this rule is matched.
    		 option -
    http-resp-status-code <code> HTTP response status code.
    HTTP response status code.    		 integer Minimum value: 100 Maximum value: 599

    config header-group

    Parameter Name Description Type Size
    header-name HTTP header. string Maximum length: 79
    header HTTP header regular expression. string Maximum length: 255
    case-sensitivity Enable/disable case sensitivity when matching header.
    disable: Ignore case when matching header.
    enable: Do not ignore case when matching header.
    		 option -
    Previous
    Next