Explicit and transparent proxies

This section contains instructions for configuring explicit and transparent proxies.

• Explicit web proxy

• Transparent proxy

• FTP proxy

• Proxy policy addresses

• Proxy policy security profiles

• Explicit proxy authentication

• Transparent web proxy forwarding

• Transparent web proxy forwarding over IPv6

• Upstream proxy authentication in transparent proxy mode

• Multiple dynamic header count

• Restricted SaaS access

• Explicit proxy and FortiGate Cloud Sandbox

• Proxy chaining

• WAN optimization SSL proxy chaining

• Agentless NTLM authentication for web proxy

• Multiple LDAP servers in Kerberos keytabs and agentless NTLM domain controllers

• Learn client IP addresses

• Explicit proxy authentication over HTTPS

• mTLS client certificate authentication

• CORS protocol in explicit web proxy when using session-based, cookie-enabled, and captive portal-enabled SAML authentication

• Display CORS content in an explicit proxy environment

• HTTP connection coalescing and concurrent multiplexing for explicit proxy

• Secure explicit proxy

• Secure explicit proxy with client certificates

• Explicit proxy logging

• Configuring fast fallback for explicit proxy

• Forward HTTPS requests to a web server without the need for an HTTP CONNECT message

• Specifying outgoing interface and VRF for a web proxy forward server or isolator server

• Isolator servers in proxy policies

This feature is not supported on FortiGate models with 2 GB RAM or less. See Proxy-related features not supported on FortiGate 2 GB RAM models for more information.