Fortinet white logo
Fortinet white logo

CLI Reference

config firewall access-proxy-virtual-host

config firewall access-proxy-virtual-host

Configure Access Proxy virtual hosts.

config firewall access-proxy-virtual-host
    Description: Configure Access Proxy virtual hosts.
    edit <name>
        set client-cert [disable|enable]
        set empty-cert-action [accept|block|...]
        set host {string}
        set host-type [sub-string|wildcard]
        set replacemsg-group {string}
        set ssl-certificate <name1>, <name2>, ...
        set user-agent-detect [disable|enable]
    next
end

config firewall access-proxy-virtual-host

Parameter

Description

Type

Size

Default

client-cert

Enable/disable requesting client certificate.

option

-

enable

Option

Description

disable

Disable client certificate request.

enable

Enable client certificate request.

empty-cert-action

Action for an empty client certificate.

option

-

block

Option

Description

accept

Accept the SSL handshake if the client certificate is empty.

block

Block the SSL handshake if the client certificate is empty.

accept-unmanageable

Accept the SSL handshake only if the end-point is unmanageable.

host

The host name.

string

Maximum length: 79

host-type

Type of host pattern.

option

-

sub-string

Option

Description

sub-string

Match the pattern if a string contains the sub-string.

wildcard

Match the pattern with wildcards.

name

Virtual host name.

string

Maximum length: 79

replacemsg-group

Access-proxy-virtual-host replacement message override group.

string

Maximum length: 35

ssl-certificate <name>

SSL certificates for this host.

Certificate list.

string

Maximum length: 79

user-agent-detect

Enable/disable detecting device type by HTTP user-agent if no client certificate is provided.

option

-

enable

Option

Description

disable

Disable detecting unknown devices by HTTP user-agent if no client certificate is provided.

enable

Enable detecting unknown devices by HTTP user-agent if no client certificate is provided.

config firewall access-proxy-virtual-host

config firewall access-proxy-virtual-host

Configure Access Proxy virtual hosts.

config firewall access-proxy-virtual-host
    Description: Configure Access Proxy virtual hosts.
    edit <name>
        set client-cert [disable|enable]
        set empty-cert-action [accept|block|...]
        set host {string}
        set host-type [sub-string|wildcard]
        set replacemsg-group {string}
        set ssl-certificate <name1>, <name2>, ...
        set user-agent-detect [disable|enable]
    next
end

config firewall access-proxy-virtual-host

Parameter

Description

Type

Size

Default

client-cert

Enable/disable requesting client certificate.

option

-

enable

Option

Description

disable

Disable client certificate request.

enable

Enable client certificate request.

empty-cert-action

Action for an empty client certificate.

option

-

block

Option

Description

accept

Accept the SSL handshake if the client certificate is empty.

block

Block the SSL handshake if the client certificate is empty.

accept-unmanageable

Accept the SSL handshake only if the end-point is unmanageable.

host

The host name.

string

Maximum length: 79

host-type

Type of host pattern.

option

-

sub-string

Option

Description

sub-string

Match the pattern if a string contains the sub-string.

wildcard

Match the pattern with wildcards.

name

Virtual host name.

string

Maximum length: 79

replacemsg-group

Access-proxy-virtual-host replacement message override group.

string

Maximum length: 35

ssl-certificate <name>

SSL certificates for this host.

Certificate list.

string

Maximum length: 79

user-agent-detect

Enable/disable detecting device type by HTTP user-agent if no client certificate is provided.

option

-

enable

Option

Description

disable

Disable detecting unknown devices by HTTP user-agent if no client certificate is provided.

enable

Enable detecting unknown devices by HTTP user-agent if no client certificate is provided.