This explicit web proxy configuration is enabled by default. Toggle to disable this explicit web proxy configuration.

Enter the name of the explicit web proxy configuration.

Select the interface or interfaces that are being monitored by the explicit web proxy from the drop-down list.

Select an HTTP cncoming IP from the drop-down list. This field restricts the explicit HTTP proxy to accept sessions only from the specified IP address.

Enter the port number that HTTP traffic from client web browsers use to connect to the explicit proxy for the specific protocol.

Explicit proxy users must configure their web browser’s protocols proxy settings to use this port. The default port is 8080. You can enter a maximum of eight ports. Separate multiple ports with a comma. The range of values is 1-65535.

Select Use HTTP Port or select Specify and then enter the port number that HTTPS traffic from client web browsers use to connect to the explicit proxy for the specific protocol.

Explicit proxy users must configure their web browser’s protocols proxy settings to use this port. You can enter a maximum of eight ports. Separate multiple ports with a comma. The range of values is 1-65535.

Select this checkbox to enable FTP over HTTP for the explicit web proxy. Then select Use HTTP Port or select Specify and enter the port number.

The FTP over HTTP proxy engine supports PORT mode, FTP over HTTP CONNECT, and uploads through PUT (UTM scanning).

Select this checkbox to enable the SOCKS proxy. Then select Use HTTP Port or select Specify and enter the port number.

Select this option to enable HTTP/HTTPS proxy. The default is enabled.

Select whether the DNS result uses an IPv4 or IPv6 address.

You can select the action to take when the proxy server must handle an unknown HTTP version request or message. Set the unknown HTTP version to Best Effort, Reject, or Tunnel.

• Best Effort attempts to handle the HTTP traffic as best as it can.

• Reject treats known HTTP traffic as malformed and drops it.

Accept or deny explicit web proxy sessions when no web proxy firewall policy exists.

Select the strength of the encryption algorithms accepted in HTTPS deep scan.

Enter an authentication realm to identify the explicit web proxy.

The realm can be any text string of up to 63 characters. If the realm includes spaces, you need to enclose it in quotes. When a user authenticates with the explicit web proxy, the HTTP authentication dialog box includes the realm so that you can use the realm to identify the explicitly web proxy for your users.

Toggle this setting if you want to use IPv6 addresses.

Toggle this setting to allow the FortiProxy to remember the MAC address of the last hop and send responses to that MAC address instead of the default gateway.

Toggle this setting to use a proxy auto-config (PAC) file to define how web browsers can choose a proxy server for receiving HTTP content. PAC files include the FindProxyForURL(url, host) JavaScript function that returns a string with one or more access method specifications. These specifications cause the web browser to use a particular proxy server or to connect directly.

Select Use HTTP Port or select Specify and then enter the port number that traffic from client web browsers use to connect to the explicit proxy for the specific protocol. Explicit proxy users must configure their web browser’s protocols proxy settings to use this port.

Select Edit to make changes to a PAC file that was previously uploaded or select Download and then select Save to save a copy of the PAC file.