Gateway

Introduction

FortiSRA supports network gateway for distributed target deployment.

Gateway in Secrets displays a list of configured gateways.

Gateway allows accessibility from a FortiSRA located in a public network to a private enterprise network.

You can configure a gateway, e.g., a FortiSRA, a FortiGate, or a FortiProxy device, when a target is not reachable directly from FortiSRA to proxy the connection to the target.

Gateway introduces forward type network gateway, i.e., the connection is from FortiSRA to the network gateway and then to the target. This type of in-bound connection can be blocked by an edge or internal firewall and FortiSRA cannot reach the target via the gateway.

To resolve this deployment restriction, FortiSRA also supports reverse gateway feature.

FortiSRA can be reached from a reverse gateway and the reverse gateway makes the first connection to FortiSRA as the control plane connection. This is a persistent connection that uses health checks to detect connection issues and supports reconnection.

Starting FortiOS 7.4.4, FortiSRA gateway is not supported on FortiGate hardware models with 2 GB RAM.

Forward type

In the forward type scenario, the FortiSRA deployed on a public site cannot reach the target server directly. The target server is in the private enterprise network and deployable at multiple locations. A FortiGate or a FortiProxy device acts as a network gateway. The network gateway can be applied to the target. All connections to the target are now proxied by FortiSRA and the network gateway.

Reverse type

For each gateway, the following columns are displayed by default:

• Name

• Type

• Status

• Address

• Port

• SSL Max Version

• Client Certificate

• Remote CA

• Reference

The Gateway tab contains the following options:

Create	Select to create a new gateway. See Creating a gateway on the FortiSRA GUI.
Search	Enter a search term in the search field, then hit Enter to search the gateway list. To narrow down your search, see Column filter. The following column filters are available: Name Type Status Address Port SSL Max Version Client Certificate Remote CA Reference
Edit	Select to edit the selected gateway.
Delete	Select to delete the selected gateway.

For gateway related CLI configurations, see:

• Creating a gateway on the FortiSRA CLI

• FortiSRA connects to a target through a FortiProxy acting as the gateway Example