FortiPAM behind a FortiGate device

If the FortiPAM interface cannot be reached from a web browser on Windows as the FortiPAM interface is behind FortiOS, configure a VIP on the FortiOS side to forward to the FortiPAM interface IP and VIP. You must add the VIP to your DNS server and give it an FQDN.

On the FortiPAM side, add the FQDN to your web proxy configuration:

config web-proxy global
 set proxy-fqdn [FQDN]
end

The remaining configuration is the same as shown for the topology diagram in Configuring the web proxy feature to prevent web credentials from leaking.

You can now launch the web account secret with the web proxy feature.