Configuring the web proxy feature to prevent web credentials from leaking

To improve FortiPAM security and flexibility when accessing a web account secret, FortiPAM offers a new web proxy feature to dynamically operate on the web browser tab's PAC rule (on Google Chrome and Microsoft Edge) to successfully proxy the traffic to FortiPAM based on the configured domain. On Mozilla Firefox, FortiPAM sends the request to the web proxy instead.

This example shows how to configure the web proxy feature to prevent your web credentials from leaking.

We assume that the FortiPAM WAN interface is reachable from the web browser directly.

For information on how the web proxy feature works, see Web proxy in the latest FortiPAM Administration Guide.

To configure the web proxy feature:

1. Enabling the web proxy feature
2. Creating a secret target with web proxy
3. Creating a secret with web proxy

If FortiPAM is behind a FortiGate device, see FortiPAM behind a FortiGate device.