Source IP Whitelist for Bypassing Monitor Traffic in TTP Mode (7.6.5)
FortiWeb 7.6.5 adds support for bypassing TCP delayed binding in Transparent Proxy (TTP) mode based on source IP via CLI. This enhancement allows monitoring traffic to reach backend servers directly without being affected by FortiWeb’s connection handling logic.
By default, FortiWeb completes the TCP three-way handshake before forwarding the connection, which can interfere with external systems that rely on raw TCP health checks to determine backend availability. To address this, a new source IP whitelist has been introduced. Connections from IPs on this list bypass TTP processing and are passed directly to the server.
New CLI Commands:
execute ttp_src_ip_whitelist {add | del} <ip_address>
execute ttp_src_ip_whitelist flush
execute ttp_src_ip_whitelist list
|
Parameter |
Description |
|---|---|
| add <ip_address> | Adds the specified IP address to the whitelist. |
| del <ip_address> | Removes the specified IP address from the whitelist. |
| flush | Clears all entries from the whitelist. |
| list | Displays the current list of whitelisted IP addresses. |
Use this feature to ensure that monitoring systems using TCP probes can detect the real server state without interference from FortiWeb’s proxy behavior.