Configuring traffic proxy on gateway CLI

We configure the traffic proxy on the gateway for forwarding secret launch.

Traffic proxy can only be configure via the CLI console.

To configure traffic proxy gateway:

1. In the CLI console, enter the following commands:

    config firewall vip
     edit "fortipam_vip_gw"
      set uuid d39c1138-032a-51ef-8508-24d8bb973e7a
      set type access-proxy
      set extip 10.59.112.97 
      set extintf "port1"
      set server-type https
      set extport 7443	
      set ssl-certificate "Fortinet_SSL"
     next
    end
    config firewall access-proxy
     edit "gw_access_proxy"
      set vip "fortipam_vip_gw"
      config api-gateway
       edit 2
        set url-map "/tcp"
        set service tcp-forwarding
        config realservers
         edit 1
          set address "all"
         next
        end
       next
      end
     next
    end
    config firewall policy
     edit 2
      set type access-proxy
      set uuid 380dc436-032b-51ef-0ef6-a260ec98f34b
      set srcintf "any"
      set srcaddr "all"
      set dstaddr "all"
      set action accept
      set schedule "always"
      set access-proxy "gw_access_proxy"
      set ssl-ssh-profile "deep-inspection"
     next
    end
   

extip and extport in the VIP table are configured in the gateway entry on FortiPAM server to proxy the traffic.