CLI Reference

FortiProxy CLI Interface
alertemail
- config alertemail setting
antivirus
- config antivirus profile
- config antivirus quarantine
- config antivirus settings
application
- config application custom
- config application group
- config application list
- config application name
- config application rule-settings
authentication
- config authentication rule
- config authentication scheme
- config authentication setting
certificate
- config certificate ca
- config certificate crl
- config certificate local
- config certificate remote
dlp
- config dlp filepattern
- config dlp fp-doc-source
- config dlp sensitivity
- config dlp sensor
- config dlp settings
dnsfilter
- config dnsfilter domain-filter
- config dnsfilter profile
emailfilter
- config emailfilter block-allow-list
- config emailfilter bword
- config emailfilter dnsbl
- config emailfilter fortishield
- config emailfilter iptrust
- config emailfilter mheader
- config emailfilter options
- config emailfilter profile
endpoint-control
- config endpoint-control fctems
file-filter
- config file-filter profile
firewall
- config firewall access-proxy-ssh-client-cert
- config firewall access-proxy-virtual-host
- config firewall access-proxy
- config firewall access-proxy6
- config firewall address
- config firewall address6-template
- config firewall address6
- config firewall addrgrp
- config firewall addrgrp6
- config firewall auth-portal
- config firewall central-snat-map
- config firewall city
- config firewall country
- config firewall decrypted-traffic-mirror
- config firewall identity-based-route
- config firewall internet-service-addition
- config firewall internet-service-append
- config firewall internet-service-botnet
- config firewall internet-service-custom-group
- config firewall internet-service-custom
- config firewall internet-service-definition
- config firewall internet-service-extension
- config firewall internet-service-group
- config firewall internet-service-ipbl-reason
- config firewall internet-service-ipbl-vendor
- config firewall internet-service-list
- config firewall internet-service-name
- config firewall internet-service-owner
- config firewall internet-service-reputation
- config firewall internet-service-sld
- config firewall internet-service
- config firewall ippool
- config firewall ippool6
- config firewall policy
- config firewall profile-group
- config firewall profile-protocol-options
- config firewall proxy-address
- config firewall proxy-addrgrp
- config firewall region
- config firewall schedule group
- config firewall schedule onetime
- config firewall schedule recurring
- config firewall service category
- config firewall service custom
- config firewall service group
- config firewall shaping-policy
- config firewall shaping-profile
- config firewall sniffer
- config firewall ssh host-key
- config firewall ssh local-ca
- config firewall ssh local-key
- config firewall ssh setting
- config firewall ssl-server
- config firewall ssl-ssh-profile
- config firewall ssl default-certificate
- config firewall ssl keyring-list
- config firewall ssl setting
- config firewall traffic-class
- config firewall ttl-policy
- config firewall vendor-mac-summary
- config firewall vendor-mac
- config firewall vip
- config firewall vipgrp
- config firewall wildcard-fqdn custom
- config firewall wildcard-fqdn group
ftp-proxy
- config ftp-proxy explicit
hardware
- config hardware cpu
- config hardware memory
- config hardware nic
- config hardware status
icap
- config icap local-server
- config icap profile
- config icap remote-server-group
- config icap remote-server
image-analyzer
- config image-analyzer profile
ips
- config ips custom
- config ips decoder
- config ips global
- config ips rule-settings
- config ips rule
- config ips sensor
- config ips session
- config ips settings
- config ips view-map
ipsec
- config ipsec tunnel
isolator
- config isolator profile
log
- config log custom-field
- config log disk filter
- config log disk setting
- config log eventfilter
- config log fortianalyzer-cloud filter
- config log fortianalyzer-cloud override-filter
- config log fortianalyzer-cloud override-setting
- config log fortianalyzer-cloud setting
- config log fortianalyzer2 filter
- config log fortianalyzer2 override-filter
- config log fortianalyzer2 override-setting
- config log fortianalyzer2 setting
- config log fortianalyzer3 filter
- config log fortianalyzer3 override-filter
- config log fortianalyzer3 override-setting
- config log fortianalyzer3 setting
- config log fortianalyzer filter
- config log fortianalyzer override-filter
- config log fortianalyzer override-setting
- config log fortianalyzer setting
- config log fortiguard filter
- config log fortiguard override-filter
- config log fortiguard override-setting
- config log fortiguard setting
- config log gui-display
- config log memory filter
- config log memory global-setting
- config log memory setting
- config log null-device filter
- config log null-device setting
- config log setting
- config log syslogd2 filter
- config log syslogd2 override-filter
- config log syslogd2 override-setting
- config log syslogd2 setting
- config log syslogd3 filter
- config log syslogd3 override-filter
- config log syslogd3 override-setting
- config log syslogd3 setting
- config log syslogd4 filter
- config log syslogd4 override-filter
- config log syslogd4 override-setting
- config log syslogd4 setting
- config log syslogd filter
- config log syslogd override-filter
- config log syslogd override-setting
- config log syslogd setting
- config log tacacs+accounting2 filter
- config log tacacs+accounting2 setting
- config log tacacs+accounting3 filter
- config log tacacs+accounting3 setting
- config log tacacs+accounting filter
- config log tacacs+accounting setting
- config log threat-weight
- config log webtrends filter
- config log webtrends setting
mgmt-data
- config mgmt-data status
report
- config report layout
- config report setting
- config report sql status
router
- config router policy
- config router static
- config router static6
ssh-filter
- config ssh-filter profile
system
- config system accprofile
- config system acme
- config system admin
- config system affinity-interrupt
- config system affinity-packet-redistribution
- config system alarm
- config system alias
- config system api-user
- config system arp-table
- config system arp
- config system auto-install
- config system auto-script
- config system auto-update status
- config system auto-update versions
- config system automation-action
- config system automation-destination
- config system automation-stitch
- config system automation-trigger
- config system autoupdate schedule
- config system autoupdate tunneling
- config system central-management
- config system central-mgmt
- config system checksum status
- config system cmdb
- config system console
- config system csf
- config system custom-language
- config system ddns
- config system dedicated-mgmt
- config system dhcp6 server
- config system dhcp server
- config system dns-database
- config system dns-server
- config system dns
- config system dscp-based-priority
- config system email-server
- config system external-resource
- config system federated-upgrade
- config system fips-cc
- config system fortianalyzer-connectivity
- config system fortiguard-log-service
- config system fortiguard-service
- config system fortiguard
- config system fortindr
- config system fortisandbox
- config system fsso-polling
- config system ftm-push
- config system geoip-country
- config system geoip-override
- config system global
- config system gre-tunnel
- config system ha-monitor
- config system ha-nonsync-csum
- config system ha
- config system info admin ssh
- config system info admin status
- config system interface
- config system ip-conflict status
- config system ipam
- config system ips-urlfilter-dns
- config system ips-urlfilter-dns6
- config system ips
- config system ipv6-neighbor-cache
- config system link-monitor
- config system mac-address-table
- config system management-tunnel
- config system mgmt-csum
- config system nethsm
- config system network-visibility
- config system ntp
- config system object-tagging
- config system password-policy-guest-admin
- config system password-policy
- config system performance status
- config system performance top
- config system probe-response
- config system proxy-arp
- config system ptp
- config system replacemsg-group
- config system replacemsg-image
- config system replacemsg admin
- config system replacemsg alertmail
- config system replacemsg auth
- config system replacemsg automation
- config system replacemsg fortiguard-wf
- config system replacemsg ftp
- config system replacemsg http
- config system replacemsg icap
- config system replacemsg mail
- config system replacemsg nac-quar
- config system replacemsg spam
- config system replacemsg sslvpn
- config system replacemsg traffic-quota
- config system replacemsg utm
- config system replacemsg webproxy
- config system resource-limits
- config system saml
- config system sdn-connector
- config system session-ttl
- config system session
- config system session6
- config system settings
- config system sms-server
- config system snmp community
- config system snmp sysinfo
- config system snmp user
- config system source-ip status
- config system span-port
- config system speed-test-schedule
- config system speed-test-server
- config system sso-admin
- config system sso-forticloud-admin
- config system startup-error-log
- config system status
- config system storage
- config system vdom-dns
- config system vdom-exception
- config system vdom-link
- config system vdom-property
- config system vdom-radius-server
- config system vdom
- config system vne-tunnel
- config system vxlan
- config system wccp
- config system zone
test
- config test acd
- config test acsd
- config test autod
- config test awsd
- config test azd
- config test bfd
- config test csfd
- config test ddnscd
- config test dhcp6c
- config test dhcp6r
- config test dhcprelay
- config test dlpfingerprint
- config test dlpfpcache
- config test dnsproxy
- config test dsd
- config test fas
- config test fcnacd
- config test fds_notify
- config test fnbamd
- config test forticldd
- config test forticron
- config test fsd
- config test fsvrd
- config test gcpd
- config test harelay
- config test hasync
- config test hatalk
- config test ibmd
- config test imap
- config test init
- config test iotd
- config test ipamd
- config test ipamsd
- config test ipldbd
- config test ipsengine
- config test ipsmonitor
- config test ipsufd
- config test kubed
- config test l2tpcd
- config test lnkmtd
- config test miglogd
- config test mrd
- config test netxd
- config test nntp
- config test ocid
- config test openstackd
- config test ovrd
- config test pop3
- config test pptpcd
- config test quarantined
- config test radius-das
- config test radiusd
- config test radvd
- config test reportd
- config test rt_router
- config test sdncd
- config test sdnd
- config test sepmd
- config test sessionsync
- config test sfupgraded
- config test smtp
- config test snmpd
- config test syslogd
- config test updated
- config test uploadd
- config test urlfilter
- config test vned
- config test wad
- config test wccpd
- config test wf_monitor
- config test wiredapd
user
- config user adgrp
- config user certificate
- config user domain-controller
- config user exchange
- config user fortitoken
- config user fsso-polling
- config user fsso
- config user group
- config user krb-keytab
- config user ldap
- config user local
- config user password-policy
- config user peer
- config user peergrp
- config user pop3
- config user radius
- config user saml
- config user security-exempt-list
- config user setting
- config user tacacs+
videofilter
- config videofilter profile
- config videofilter youtube-channel-filter
- config videofilter youtube-key
vpn
- config vpn certificate ca
- config vpn certificate crl
- config vpn certificate local
- config vpn certificate ocsp-server
- config vpn certificate remote
- config vpn certificate setting
- config vpn ipsec phase1-interface
- config vpn ipsec phase2-interface
- config vpn ssl monitor
- config vpn ssl settings
- config vpn ssl web host-check-software
- config vpn ssl web portal
- config vpn ssl web realm
- config vpn ssl web user-bookmark
- config vpn ssl web user-group-bookmark
waf
- config waf main-class
- config waf profile
- config waf signature
- config waf sub-class
wanopt
- config wanopt auth-group
- config wanopt cache-service
- config wanopt content-delivery-network-rule
- config wanopt peer
- config wanopt profile
- config wanopt remote-storage
- config wanopt settings
web-proxy
- config web-proxy debug-url
- config web-proxy dynamic-bypass
- config web-proxy explicit-proxy
- config web-proxy forward-server-group
- config web-proxy forward-server
- config web-proxy global
- config web-proxy isolator-server
- config web-proxy pac-policy
- config web-proxy profile
- config web-proxy url-list
- config web-proxy url-match
- config web-proxy wisp
webcache
- config webcache prefetch
- config webcache reverse-cache-server
- config webcache settings
- config webcache user-agent
webfilter
- config webfilter categories
- config webfilter content-header
- config webfilter content
- config webfilter fortiguard
- config webfilter ftgd-local-cat
- config webfilter ftgd-local-rating
- config webfilter ftgd-statistics
- config webfilter ips-urlfilter-cache-setting
- config webfilter ips-urlfilter-setting
- config webfilter ips-urlfilter-setting6
- config webfilter override-usr
- config webfilter override
- config webfilter profile
- config webfilter search-engine
- config webfilter status
- config webfilter urlfilter
Change Log

Home FortiProxy 7.2.2 CLI Reference

7.2.2

config wanopt profile

Configure WAN optimization profiles.

config wanopt profile
    Description: Configure WAN optimization profiles.
    edit <name>
        set transparent [enable|disable]
        set comments {var-string}
        set auth-group {string}
        config http
            Description: Enable/disable HTTP WAN Optimization and configure HTTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config cifs
            Description: Enable/disable CIFS (Windows sharing) WAN Optimization and configure CIFS WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config mapi
            Description: Enable/disable MAPI email WAN Optimization and configure MAPI WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config ftp
            Description: Enable/disable FTP WAN Optimization and configure FTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config tcp
            Description: Enable/disable TCP WAN Optimization and configure TCP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set byte-caching-opt [mem-only|mem-disk]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
            set port {user}
            set ssl [enable|disable]
            set ssl-port {user}
        end
    next
end

config wanopt profile

Parameter

Description

Type

Size

Default

transparent

Enable/disable transparent mode.

option

enable

Option	Description
enable	Determine if WAN Optimization changes client packet source addresses. Affects the routing configuration on the server network.
disable	Disable transparent mode. Client packets source addresses are changed to the source address of the FortiProxy internal interface. Similar to source NAT.

comments

Comment.

var-string

Maximum length: 255

auth-group

Optionally add an authentication group to restrict access to the WAN Optimization tunnel to peers in the authentication group.

string

Maximum length: 35

config http

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

disable

Option	Description
enable	Enable SSL/TLS offloading.
disable	Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

fix

Option	Description
dynamic	Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.
fix	Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

protocol

Option	Description
protocol	Using protocol-specific optimization.
tcp	Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config cifs

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

fix

Option	Description
dynamic	Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.
fix	Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

protocol

Option	Description
protocol	Using protocol-specific optimization.
tcp	Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config mapi

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config ftp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

disable

Option	Description
enable	Enable SSL/TLS offloading.
disable	Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

fix

Option	Description
dynamic	Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.
fix	Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

protocol

Option	Description
protocol	Using protocol-specific optimization.
tcp	Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config tcp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

disable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

byte-caching-opt

Select whether TCP byte-caching uses system memory only or both memory and disk space.

option

mem-only

Option	Description
mem-only	Byte caching with memory only.
mem-disk	Byte caching with memory and disk.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

port

Port numbers or port number ranges for TCP. Only packets with a destination port number that matches this port number or range are accepted by this profile.

user

Not Specified

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

disable

Option	Description
enable	Enable SSL/TLS offloading.
disable	Disable SSL/TLS offloading.

ssl-port

Port numbers or port number ranges on which to expect HTTPS traffic for SSL/TLS offloading.

user

Not Specified

config wanopt profile

Configure WAN optimization profiles.

config wanopt profile
    Description: Configure WAN optimization profiles.
    edit <name>
        set transparent [enable|disable]
        set comments {var-string}
        set auth-group {string}
        config http
            Description: Enable/disable HTTP WAN Optimization and configure HTTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config cifs
            Description: Enable/disable CIFS (Windows sharing) WAN Optimization and configure CIFS WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config mapi
            Description: Enable/disable MAPI email WAN Optimization and configure MAPI WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config ftp
            Description: Enable/disable FTP WAN Optimization and configure FTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config tcp
            Description: Enable/disable TCP WAN Optimization and configure TCP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set byte-caching-opt [mem-only|mem-disk]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
            set port {user}
            set ssl [enable|disable]
            set ssl-port {user}
        end
    next
end

config wanopt profile

Parameter

Description

Type

Size

Default

transparent

Enable/disable transparent mode.

option

enable

Option	Description
enable	Determine if WAN Optimization changes client packet source addresses. Affects the routing configuration on the server network.
disable	Disable transparent mode. Client packets source addresses are changed to the source address of the FortiProxy internal interface. Similar to source NAT.

comments

Comment.

var-string

Maximum length: 255

auth-group

Optionally add an authentication group to restrict access to the WAN Optimization tunnel to peers in the authentication group.

string

Maximum length: 35

config http

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

disable

Option	Description
enable	Enable SSL/TLS offloading.
disable	Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

fix

Option	Description
dynamic	Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.
fix	Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

protocol

Option	Description
protocol	Using protocol-specific optimization.
tcp	Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config cifs

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

fix

Option	Description
dynamic	Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.
fix	Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

protocol

Option	Description
protocol	Using protocol-specific optimization.
tcp	Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config mapi

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config ftp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

enable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

disable

Option	Description
enable	Enable SSL/TLS offloading.
disable	Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

fix

Option	Description
dynamic	Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.
fix	Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

protocol

Option	Description
protocol	Using protocol-specific optimization.
tcp	Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

config tcp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

disable

Option	Description
enable	Enable WAN Optimization.
disable	Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

disable

Option	Description
enable	Enable SSL-secured tunnelling.
disable	Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

disable

Option	Description
enable	Enable byte-caching.
disable	Disable byte-caching.

byte-caching-opt

Select whether TCP byte-caching uses system memory only or both memory and disk space.

option

mem-only

Option	Description
mem-only	Byte caching with memory only.
mem-disk	Byte caching with memory and disk.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

private

Option	Description
shared	For profiles that accept nonaggressive and non-interactive protocols.
express-shared	For profiles that accept interactive protocols such as Telnet.
private	For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

enable

Option	Description
enable	Enable logging.
disable	Disable logging.

port

Port numbers or port number ranges for TCP. Only packets with a destination port number that matches this port number or range are accepted by this profile.

user

Not Specified

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

disable

Option	Description
enable	Enable SSL/TLS offloading.
disable	Disable SSL/TLS offloading.

ssl-port

Port numbers or port number ranges on which to expect HTTPS traffic for SSL/TLS offloading.

user

Not Specified

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

CLI Reference

config wanopt profile

config wanopt profile

config wanopt profile

config http

config cifs

config mapi

config ftp

config tcp

config wanopt profile

config wanopt profile

config wanopt profile

config http

config cifs