Running your browser through FortiIsolator

You can run browsers on FortiIsolator in the following modes:

• IP forwarding mode

• Proxy mode

Using FortiIsolator with Mozilla Firefox

Prerequisites

Download the FortiIsolator certificate (ca.crt) and import it into the Mozilla Firefox browser.

1. In the Mozilla Firefox browser address bar, type http://<internal_IP_address>/ca.crt (for example, http://172.30.157.1/ca.crt).
   • where <internal_IP_address> is the IP address of the FortiIsolator internal interface
   • For example , the IP address of the internal interface that you configured in step 3 of Installing FortiIsolator 1000F.

2. In the Downloading Certificate window, select the Trust this CA to identity websites checkbox.

   

3. Click OK.

Using IP forwarding mode with Mozilla Firefox

In the Mozilla Firefox browser address bar, type https://<internal_IP_address>/isolator/https://www.google.com (for example, https://172.30.157.1/isolator/https://www.google.com).

• where <internal_IP_address> value is the IP address of the FortiIsolator internal interface

Using proxy mode with Mozilla Firefox

1. Open the Mozilla Firefox browser.

2. In the menu, click Options.

3. Click General.

4. In the Network Proxy section, click Settings.

5. In the Connection Settings window, select Manual proxy configuration, and enter the following settings (values shown here are examples):

   • HTTP Proxy: 172.30.157.1, Port: 8888
   • SSL Proxy: 172.30.147.207, Port: 8888
   • No Proxy for: “localhost, 127.0.0.1,172.30.157.0/24”
6. Click OK.

Verifying that FortiIsolator is working in Mozilla Firefox

1. In the Mozilla Firefox browser, type: https://www.google.com.

   The URL redirects the browser to forti_isolator for a short period of time. For example, https://www.google.com/forti_isolator_redir2?ftnturl=https%3a%2f%2fwww.google.com%2f&ftntcid=5f4084e8-7978-4c89-97c5-31ef3640600c&ftntpasswd=35026d03-9a1c-42e9-959e-fca18d67e4c0.

   The page should load successfully with the URL displayed as you typed it (https://www.google.com).

2. Check the browser console to make sure that it is connecting to the internal IP address of FortiIsolator (for example, 172.30.157.1).

Using FortiIsolator with Google Chrome

Prerequisites

Download the FortiIsolator certificate (ca.crt) and import it into your Google Chrome browser.

1. In the Google Chrome browser address bar, type http://<internal_IP_address>/ca.crt (for example, http://172.30.157.1/ca.crt).
   • where <internal_IP_address> value is the IP address of the FortiIsolator internal interface
   • For example , the IP address of the internal interface that you configured in step 3 of Installing FortiIsolator 1000F.
2. In the security warning at the bottom of the browser, click Keep to download the certificate.

   

3. Click Open to import the ca.crt certificate into Google Chrome.

   

4. Click Install Certificate.

   

5. Select Current User, and click Next.

   

6. Select Trusted Root Certificate Authorities, and click OK.

   

Using IP forwarding mode with Google Chrome

In the Google Chrome browser address bar, type https://<internal_IP_address>/isolator/https://www.google.com (for example, https://172.30.157.1/isolator/https://www.google.com).

• where <internal_IP_address> value is the IP address of the FortiIsolator internal interface

Using proxy mode with Google Chrome

1. Open the Google Chrome browser.

2. In the menu, click Settings.

3. Expand Advanced.
4. In the System section, click Open proxy settings.



5. In the Internet Properties window, click Settings.
6. In the Proxy server section, select Use a proxy server for this connection, and enter the following setting (values shown here are examples):
   • Address: 172.30.157.1, Port: 8888



7. Click OK.
8. In the Internet Properties window, click LAN settings.

   

9. In the Proxy server section, select Use a proxy server for your LAN, and enter the following setting (values shown here are examples):
   • Address: 172.30.157.1, Port: 8888

   

10. Click Advanced.
11. In the Proxy Settings window, enter the following settings (values shown here are examples):
    • In the Servers section, HTTP: 172.30.157.1, Port: 8888
    • In the Exceptions section, type 172.30.157.1;localhost;
12. Click OK to accept the settings in all windows.

Verifying that FortiIsolator is working in Google Chrome

1. In the Google Chrome browser, type: https://www.facebook.com.

   The URL redirects the browser to forti_isolator for a short period of time. For example, https://www.facebook.com/forti_isolator_redir2?ftnturl=https%3a%2f%2fwww.facebook.com%2f&ftntcid=0efc5a21-ec6a-418d-b903-4ad99d5ddd69&ftntpasswd=b44ba56f-d5db-45a3-a651-02fda3d26650.

   The page should load successfully with the URL displayed as you typed it (https://www.facebook.com).

2. Check the browser console to make sure that it is connecting to the internal IP address of FortiIsolator (for example, 172.30.157.1).