FortiProxy related configurations

Configuring a VIP on FortiProxy

To configure a VIP on FortiProxy:

1. In the FortiProxy CLI console, enter the following commands to configure a VIP:

    config firewall vip 
      edit "test_vip"
       set type access-proxy
       set server-type https
       set extip 172.16.80.112
       set extintf "any"
       set h2-support disable
       set extport 443
       set ssl-certificate "Fortinet_GUI_Server"
       set ssl-min-version tls-1.3
      next
     end

Configuring an IPv4 access proxy on FortiProxy

To configure an IPv4 access proxy:

1. In the FortiProxy CLI console, enter the following commands to configure an IPv4 access proxy:

    config firewall access-proxy
     edit "test_access_proxy"
      set vip "test_vip" #from Configuring a VIP on FortiProxy
      set client-cert disable
      set auth-portal enable
      config api-gateway
       edit 1
        set url-map "/tcp"
        set service tcp-forwarding
        config realservers
         edit 1
          set address "all"
         next
        end
       next
      end
     next
    end

Configuring a firewall proxy

To configure a firewall proxy:

1. In the FortiProxy CLI console, enter the following commands to configure a firewall proxy:

    config firewall policy
     edit 1
      set type access-proxy
      set srcintf "any"
      set srcaddr "all"
      set dstaddr "all"
      set action accept
      set schedule "always"
      set access-proxy "test_access_proxy" #from  Configuring an IPv4 access proxy on FortiProxy
     next
    end