Explicit web proxy

Explicit web proxy can be configured on FortiGate for proxying HTTP and HTTPS traffic.

To deploy explicit proxy, individual client browsers can be manually configured to send requests directly to the proxy, or they can be configured to download proxy configuration instructions from a Proxy Auto-Configuration (PAC) file.

When explicit proxy is configured on an interface, the interface IP address can be used by client browsers to forward requests directly to the FortiGate. FortiGate also supports PAC file configuration.

To configure explicit web proxy in the GUI:
  1. Enable and configure explicit web proxy:

    1. Go to Network > Explicit Proxy.

    2. Enable Explicit Web Proxy.

    3. Select port2 as the Listen on Interfaces and set the HTTP Port to 8080.

    4. Configure the remaining settings as needed.

    5. Click Apply.

  2. Create an explicit web proxy policy:

    1. Go to Policy & Objects > Proxy Policy.

    2. Click Create New.