IPv6 proxy address and address group object support

FortiGate now supports IPv6 proxy address and proxy address group objects, enabling proxy-based policy matching for IPv6 traffic.

IPv6 proxy address and address group objects can be configured using the CLI and used as IPv6 address objects in proxy policies and authentication rules. They provide the same matching capabilities as IPv4 proxy address and address group objects, except that the host definitions use IPv6 firewall address objects.

IPv6 proxy address and address group objects can be applied to both the srcaddr6 and dstaddr6 options, allowing granular IPv6 traffic matching based on URL, header, method, user agent, category, SaaS application, and other proxy criteria.

IPv6 proxy address and address group objects:

config firewall proxy-address6

config firewall proxy-addrgrp6

IPv6 proxy objects in proxy policies:

config firewall proxy-policy
    set srcaddr6 {proxy-address6 | proxy-addrgrp6}
    set dstaddr6 {proxy-address6 | proxy-addrgrp6}
end

IPv6 proxy objects in authentication rules:

config authentication rule
    set srcaddr6 {proxy-address6 | proxy-addrgrp6}
    set dstaddr6 {proxy-address6 | proxy-addrgrp6}
end

Example

To configure an IPv6 proxy address object and use it in a proxy policy:

1. Configure an IPv6 proxy address:

   config firewall proxy-address6
       edit "ipv6-proxy-url"
           set type url
           set path "/example"
       next
   end
   

2. Apply the IPv6 proxy address to a proxy policy:

   config firewall proxy-policy
       edit 1
           set srcaddr6 "ipv6-proxy-url"
           set dstaddr6 "all"
       next
   end