WanOpt configuration changes in 6.4.0
Port configuration is now done in the profile protocol options. HTTPS configurations need to have certificate inspection configured in the firewall policy.
In FortiOS 6.4.0, set ssl-ssh-profile certificate-inspection
must be added in the firewall policy:
config firewall policy edit 1 select srcintf FGT_A:NET_CLIENT select dstintf FGT_A:WAN select srcaddr all select dstaddr all set action accept set schedule always select service ALL set inspection-mode proxy set ssl-ssh-profile certificate-inspection set wanopt enable set wanopt-detection off set wanopt-profile "http" set wanopt-peer FGT_D:HOSTID next end