Explicit proxy authentication

FortiGate supports multiple authentication methods. This topic explains using an external authentication server with Kerberos as the primary and NTLM as the fallback.

To configure Explicit Proxy with authentication:
  1. Enable and configure the explicit proxy.
  2. Configure the authentication server and create user groups.
  3. Create an authentication scheme and rules.
  4. Create an explicit proxy policy and assign a user group to the policy.
  5. Verify the configuration.

Enable and configure the explicit proxy

To enable and configure explicit web proxy in the GUI:
  1. Go to Network > Explicit Proxy.

  2. Enable Explicit Web Proxy.

  3. Select port2 as the Listen on Interfaces and set the HTTP Port to 8080.

  4. Configure the remaining settings as needed.

  5. Click Apply.