Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiProxy 7.2.6 CLI Reference
    7.2.6
    7.6.0
    7.4.6
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.12
    7.2.11
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.0.19
    7.0.18
    7.0.17
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    2.0.13
    2.0.12
    2.0.0
    1.2.4

    config user exchange

    config user exchange

    Configure MS Exchange server entries.

    config user exchange
    Description: Configure MS Exchange server entries.
    edit <name>
        set server-name {string}
        set domain-name {string}
        set username {string}
        set password {password}
        set ip {ipv4-address-any}
        set connect-protocol [rpc-over-tcp|rpc-over-http|...]
        set auth-type [spnego|ntlm|...]
        set auth-level [connect|call|...]
        set http-auth-type [basic|ntlm]
        set ssl-min-proto-version [default|SSLv3|...]
        set auto-discover-kdc [enable|disable]
        set kdc-ip <ipv41>, <ipv42>, ...
    next
end

    config user exchange

    Parameter

    Description

    Type

    Size

    Default

    name

    MS Exchange server entry name.

    string

    Maximum length: 35

    server-name

    MS Exchange server hostname.

    string

    Maximum length: 63

    domain-name

    MS Exchange server fully qualified domain name.

    string

    Maximum length: 79

    username

    User name used to sign in to the server. Must have proper permissions for service.

    string

    Maximum length: 64

    password

    Password for the specified username.

    password

    Not Specified

    ip

    Server IPv4 address.

    ipv4-address-any

    Not Specified

    0.0.0.0

    connect-protocol

    Connection protocol used to connect to MS Exchange service.

    option

    -

    rpc-over-https

    Option

    Description

    rpc-over-tcp

    Connect using RPC-over-TCP. Use for MS Exchange 2010 and earlier versions. Supported in MS Exchange 2013.

    rpc-over-http

    Connect using RPC-over-HTTP. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

    rpc-over-https

    Connect using RPC-over-HTTPS. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

    auth-type

    Authentication security type used for the RPC protocol layer.

    option

    -

    kerberos

    Option

    Description

    spnego

    Negotiate authentication.

    ntlm

    NTLM authentication.

    kerberos

    Kerberos authentication.

    auth-level

    Authentication security level used for the RPC protocol layer.

    option

    -

    privacy

    Option

    Description

    connect

    RPC authentication level 'connect'.

    call

    RPC authentication level 'call'.

    packet

    RPC authentication level 'packet'.

    integrity

    RPC authentication level 'integrity'.

    privacy

    RPC authentication level 'privacy'.

    http-auth-type

    Authentication security type used for the HTTP transport.

    option

    -

    ntlm

    Option

    Description

    basic

    Basic HTTP authentication.

    ntlm

    NTLM HTTP authentication.

    ssl-min-proto-version

    Minimum SSL/TLS protocol version for HTTPS transport.

    option

    -

    default

    Option

    Description

    default

    Follow system global setting.

    SSLv3

    SSLv3.

    TLSv1

    TLSv1.

    TLSv1-1

    TLSv1.1.

    TLSv1-2

    TLSv1.2.

    auto-discover-kdc

    Enable/disable automatic discovery of KDC IP addresses.

    option

    -

    enable

    Option

    Description

    enable

    Enable automatic discovery of KDC IP addresses.

    disable

    Disable automatic discovery of KDC IP addresses.

    kdc-ip <ipv4>

    KDC IPv4 addresses for Kerberos authentication.

    KDC IPv4 addresses for Kerberos authentication.

    string

    Maximum length: 79

    Previous
    Next

    config user exchange

    config user exchange

    Configure MS Exchange server entries.

    config user exchange
    Description: Configure MS Exchange server entries.
    edit <name>
        set server-name {string}
        set domain-name {string}
        set username {string}
        set password {password}
        set ip {ipv4-address-any}
        set connect-protocol [rpc-over-tcp|rpc-over-http|...]
        set auth-type [spnego|ntlm|...]
        set auth-level [connect|call|...]
        set http-auth-type [basic|ntlm]
        set ssl-min-proto-version [default|SSLv3|...]
        set auto-discover-kdc [enable|disable]
        set kdc-ip <ipv41>, <ipv42>, ...
    next
end

    config user exchange

    Parameter

    Description

    Type

    Size

    Default

    name

    MS Exchange server entry name.

    string

    Maximum length: 35

    server-name

    MS Exchange server hostname.

    string

    Maximum length: 63

    domain-name

    MS Exchange server fully qualified domain name.

    string

    Maximum length: 79

    username

    User name used to sign in to the server. Must have proper permissions for service.

    string

    Maximum length: 64

    password

    Password for the specified username.

    password

    Not Specified

    ip

    Server IPv4 address.

    ipv4-address-any

    Not Specified

    0.0.0.0

    connect-protocol

    Connection protocol used to connect to MS Exchange service.

    option

    -

    rpc-over-https

    Option

    Description

    rpc-over-tcp

    Connect using RPC-over-TCP. Use for MS Exchange 2010 and earlier versions. Supported in MS Exchange 2013.

    rpc-over-http

    Connect using RPC-over-HTTP. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

    rpc-over-https

    Connect using RPC-over-HTTPS. Use for MS Exchange 2016 and later versions. Supported in MS Exchange 2013.

    auth-type

    Authentication security type used for the RPC protocol layer.

    option

    -

    kerberos

    Option

    Description

    spnego

    Negotiate authentication.

    ntlm

    NTLM authentication.

    kerberos

    Kerberos authentication.

    auth-level

    Authentication security level used for the RPC protocol layer.

    option

    -

    privacy

    Option

    Description

    connect

    RPC authentication level 'connect'.

    call

    RPC authentication level 'call'.

    packet

    RPC authentication level 'packet'.

    integrity

    RPC authentication level 'integrity'.

    privacy

    RPC authentication level 'privacy'.

    http-auth-type

    Authentication security type used for the HTTP transport.

    option

    -

    ntlm

    Option

    Description

    basic

    Basic HTTP authentication.

    ntlm

    NTLM HTTP authentication.

    ssl-min-proto-version

    Minimum SSL/TLS protocol version for HTTPS transport.

    option

    -

    default

    Option

    Description

    default

    Follow system global setting.

    SSLv3

    SSLv3.

    TLSv1

    TLSv1.

    TLSv1-1

    TLSv1.1.

    TLSv1-2

    TLSv1.2.

    auto-discover-kdc

    Enable/disable automatic discovery of KDC IP addresses.

    option

    -

    enable

    Option

    Description

    enable

    Enable automatic discovery of KDC IP addresses.

    disable

    Disable automatic discovery of KDC IP addresses.

    kdc-ip <ipv4>

    KDC IPv4 addresses for Kerberos authentication.

    KDC IPv4 addresses for Kerberos authentication.

    string

    Maximum length: 79

    Previous
    Next