Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Browser Isolation Deployment

    Home FortiProxy 7.4.4 Browser Isolation Deployment
    7.4.4
    7.6.0
    7.4.6
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.12
    7.2.11
    7.2.11
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.0

    Using the FortiNBI application

    Using the FortiNBI application

    The FortiNBI application allows users to monitor isolation status and change the FortiProxy IP address that the application is connected to when needed.

    Status tab

    The Status tab shows the statuses of several components.

    Rating service

    Status of the FortiNBI rating service. Click the button to start or stop the service.

    Rating service connection

    Status of the connection between the GUI and the FortiNBI rating service.

    Rating server detection mode

    Mode in which the FortiProxy detects the rating server IP address:

    • Automatic: The rating server IP address is resolved using the user's proxy settings.

    • Manual: The rating server IP address is manually configured with a custom FortiProxy IP address. In this mode, the client machine does not need to have a proxy configured.

    Rating server

    IP address of the rating server.

    Isolator

    Status of the isolator. Click the button to start or stop the isolator.

    Settings tab

    Use the Settings tab to configure the following:

    Rating server detection mode

    • Automatic: The rating server IP address is resolved using the user's proxy settings. The FortiNBI detects the rating server IP address using the following:

      • DNS WPAD

      • PAC URL

      • User's proxy configuration

      Note For DNS WPAD and PAC URL, you must set direct access to system.fortinbi.fortinet.com and proxy https://pacdetectproxy.fortinbi.fortinet.com to the FortiProxy with the configured FortiNBI profile. The web server must be configured to allow .pac files to be downloaded and specified using the MIME type application/x-ns-proxy-autoconfig in the Content-Type header.

    • Manual: Manually enter a custom FortiProxy IP address. In this mode, the client machine does not need to have a proxy configured. However, you must ensure that the Defective Session option under Policy & Objects > Isolator Setting > Setting is configured for the manual mode to work. Refer to step 6 in Configuring native browser isolation in FortiProxy for detailed instructions.

    Note Fortinet recommends that you use Automatic mode as much as you can. Use Manual mode only if an issue with automatic mode prevents the system from detecting the rating server IP address.
    Use Microsoft graphics for Linux

    Enable or disable the Windows built-in Linux graphics, which add sound support and boost performance significantly. When the toggle is disabled, the old graphic engine is used.

    Note

    For the Windows built-in Linux graphics to work, you must also configure the FortiNBI isolator module by running the wsl –update command and installing the software. Alternatively, configure Windows Update in one the following ways:

    • Enable Receive updates for other Microsoft products when you update Windows under Windows Update > Advanced options

    • Use Group Policy

    • Use Windows registry

    About tab

    The About tab shows the version of FortiNBI that is installed and provides quick access to debug logs. The Collect user logs button collects logs for the user while the Collect all logs button collects the user’s logs AND service logs. Privilege is required to access service logs to protect other users' data on the machine.

    To quit the FortiNBI application:

    Clicking the Close button in the FNBI application window does not quit the application: it will still run in the background in the system tray. To stop the FortiNBI application and the isolator completely, right-click the Fortinet icon in the system tray and click Quit.

    Previous
    Next

    Using the FortiNBI application

    Using the FortiNBI application

    The FortiNBI application allows users to monitor isolation status and change the FortiProxy IP address that the application is connected to when needed.

    Status tab

    The Status tab shows the statuses of several components.

    Rating service

    Status of the FortiNBI rating service. Click the button to start or stop the service.

    Rating service connection

    Status of the connection between the GUI and the FortiNBI rating service.

    Rating server detection mode

    Mode in which the FortiProxy detects the rating server IP address:

    • Automatic: The rating server IP address is resolved using the user's proxy settings.

    • Manual: The rating server IP address is manually configured with a custom FortiProxy IP address. In this mode, the client machine does not need to have a proxy configured.

    Rating server

    IP address of the rating server.

    Isolator

    Status of the isolator. Click the button to start or stop the isolator.

    Settings tab

    Use the Settings tab to configure the following:

    Rating server detection mode

    • Automatic: The rating server IP address is resolved using the user's proxy settings. The FortiNBI detects the rating server IP address using the following:

      • DNS WPAD

      • PAC URL

      • User's proxy configuration

      Note For DNS WPAD and PAC URL, you must set direct access to system.fortinbi.fortinet.com and proxy https://pacdetectproxy.fortinbi.fortinet.com to the FortiProxy with the configured FortiNBI profile. The web server must be configured to allow .pac files to be downloaded and specified using the MIME type application/x-ns-proxy-autoconfig in the Content-Type header.

    • Manual: Manually enter a custom FortiProxy IP address. In this mode, the client machine does not need to have a proxy configured. However, you must ensure that the Defective Session option under Policy & Objects > Isolator Setting > Setting is configured for the manual mode to work. Refer to step 6 in Configuring native browser isolation in FortiProxy for detailed instructions.

    Note Fortinet recommends that you use Automatic mode as much as you can. Use Manual mode only if an issue with automatic mode prevents the system from detecting the rating server IP address.
    Use Microsoft graphics for Linux

    Enable or disable the Windows built-in Linux graphics, which add sound support and boost performance significantly. When the toggle is disabled, the old graphic engine is used.

    Note

    For the Windows built-in Linux graphics to work, you must also configure the FortiNBI isolator module by running the wsl –update command and installing the software. Alternatively, configure Windows Update in one the following ways:

    • Enable Receive updates for other Microsoft products when you update Windows under Windows Update > Advanced options

    • Use Group Policy

    • Use Windows registry

    About tab

    The About tab shows the version of FortiNBI that is installed and provides quick access to debug logs. The Collect user logs button collects logs for the user while the Collect all logs button collects the user’s logs AND service logs. Privilege is required to access service logs to protect other users' data on the machine.

    To quit the FortiNBI application:

    Clicking the Close button in the FNBI application window does not quit the application: it will still run in the background in the system tray. To stop the FortiNBI application and the isolator completely, right-click the Fortinet icon in the system tray and click Quit.

    Previous
    Next