Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.2
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    icap profile

    Configure ICAP profiles.

      config icap profile
      Description: Configure ICAP profiles.
      edit <name>
          set replacemsg-group {string}
          set request [disable|enable]
          set response [disable|enable]
          set streaming-content-bypass [disable|enable]
          set preview [disable|enable]
          set preview-data-length {integer}
          set request-server {string}
          set response-server {string}
          set request-failure [error|bypass]
          set response-failure [error|bypass]
          set request-path {string}
          set response-path {string}
          set methods {option1}, {option2}, ...
          set response-req-hdr [disable|enable]
          config icap-headers
              Description: Configure ICAP forwarded request headers.
              edit <id>
                  set name {string}
                  set content {string}
                  set base64-encoding [disable|enable]
              next
          end
      next
  end

    config icap profile

    Parameter Name Description Type Size
    replacemsg-group Replacement message group. string Maximum length: 35
    request Enable/disable whether an HTTP request is passed to an ICAP server.
    disable: Disable HTTP request passing to ICAP server.
    enable: Enable HTTP request passing to ICAP server.
    		 option -
    response Enable/disable whether an HTTP response is passed to an ICAP server.
    disable: Disable HTTP response passing to ICAP server.
    enable: Enable HTTP response passing to ICAP server.
    		 option -
    streaming-content-bypass Enable/disable bypassing of ICAP server for streaming content.
    disable: Disable bypassing of ICAP server for streaming content.
    enable: Enable bypassing of ICAP server for streaming content.
    		 option -
    preview Enable/disable preview of data to ICAP server.
    disable: Disable preview of data to ICAP server.
    enable: Enable preview of data to ICAP server.
    		 option -
    preview-data-length Preview data length to be sent to ICAP server. integer Minimum value: 0 Maximum value: 4096
    request-server ICAP server to use for an HTTP request. string Maximum length: 35
    response-server ICAP server to use for an HTTP response. string Maximum length: 35
    request-failure Action to take if the ICAP server cannot be contacted when processing an HTTP request.
    error: Error.
    bypass: Bypass.
    		 option -
    response-failure Action to take if the ICAP server cannot be contacted when processing an HTTP response.
    error: Error.
    bypass: Bypass.
    		 option -
    request-path Path component of the ICAP URI that identifies the HTTP request processing service. string Maximum length: 127
    response-path Path component of the ICAP URI that identifies the HTTP response processing service. string Maximum length: 127
    methods The allowed HTTP methods that will be sent to ICAP server for further processing.
    delete: Forward HTTP request or response with DELETE method to ICAP server for further processing.
    get: Forward HTTP request or response with GET method to ICAP server for further processing.
    head: Forward HTTP request or response with HEAD method to ICAP server for further processing.
    options: Forward HTTP request or response with OPTIONS method to ICAP server for further processing.
    post: Forward HTTP request or response with POST method to ICAP server for further processing.
    put: Forward HTTP request or response with PUT method to ICAP server for further processing.
    trace: Forward HTTP request or response with TRACE method to ICAP server for further processing.
    other: Forward HTTP request or response with All other methods to ICAP server for further processing.
    		 option -
    response-req-hdr Enable/disable addition of req-hdr for ICAP response modification (respmod) processing.
    disable: Do not add req-hdr for response modification (respmod) processing.
    enable: Add req-hdr for response modification (respmod) processing.
    		 option -

    config icap-headers

    Parameter Name Description Type Size
    name HTTP forwarded header name. string Maximum length: 79
    content HTTP header content. string Maximum length: 255
    base64-encoding Enable/disable use of base64 encoding of HTTP content.
    disable: Disable use of base64 encoding of HTTP content.
    enable: Enable use of base64 encoding of HTTP content.
    		 option -
    Previous
    Next

    icap profile

    Configure ICAP profiles.

      config icap profile
      Description: Configure ICAP profiles.
      edit <name>
          set replacemsg-group {string}
          set request [disable|enable]
          set response [disable|enable]
          set streaming-content-bypass [disable|enable]
          set preview [disable|enable]
          set preview-data-length {integer}
          set request-server {string}
          set response-server {string}
          set request-failure [error|bypass]
          set response-failure [error|bypass]
          set request-path {string}
          set response-path {string}
          set methods {option1}, {option2}, ...
          set response-req-hdr [disable|enable]
          config icap-headers
              Description: Configure ICAP forwarded request headers.
              edit <id>
                  set name {string}
                  set content {string}
                  set base64-encoding [disable|enable]
              next
          end
      next
  end

    config icap profile

    Parameter Name Description Type Size
    replacemsg-group Replacement message group. string Maximum length: 35
    request Enable/disable whether an HTTP request is passed to an ICAP server.
    disable: Disable HTTP request passing to ICAP server.
    enable: Enable HTTP request passing to ICAP server.
    		 option -
    response Enable/disable whether an HTTP response is passed to an ICAP server.
    disable: Disable HTTP response passing to ICAP server.
    enable: Enable HTTP response passing to ICAP server.
    		 option -
    streaming-content-bypass Enable/disable bypassing of ICAP server for streaming content.
    disable: Disable bypassing of ICAP server for streaming content.
    enable: Enable bypassing of ICAP server for streaming content.
    		 option -
    preview Enable/disable preview of data to ICAP server.
    disable: Disable preview of data to ICAP server.
    enable: Enable preview of data to ICAP server.
    		 option -
    preview-data-length Preview data length to be sent to ICAP server. integer Minimum value: 0 Maximum value: 4096
    request-server ICAP server to use for an HTTP request. string Maximum length: 35
    response-server ICAP server to use for an HTTP response. string Maximum length: 35
    request-failure Action to take if the ICAP server cannot be contacted when processing an HTTP request.
    error: Error.
    bypass: Bypass.
    		 option -
    response-failure Action to take if the ICAP server cannot be contacted when processing an HTTP response.
    error: Error.
    bypass: Bypass.
    		 option -
    request-path Path component of the ICAP URI that identifies the HTTP request processing service. string Maximum length: 127
    response-path Path component of the ICAP URI that identifies the HTTP response processing service. string Maximum length: 127
    methods The allowed HTTP methods that will be sent to ICAP server for further processing.
    delete: Forward HTTP request or response with DELETE method to ICAP server for further processing.
    get: Forward HTTP request or response with GET method to ICAP server for further processing.
    head: Forward HTTP request or response with HEAD method to ICAP server for further processing.
    options: Forward HTTP request or response with OPTIONS method to ICAP server for further processing.
    post: Forward HTTP request or response with POST method to ICAP server for further processing.
    put: Forward HTTP request or response with PUT method to ICAP server for further processing.
    trace: Forward HTTP request or response with TRACE method to ICAP server for further processing.
    other: Forward HTTP request or response with All other methods to ICAP server for further processing.
    		 option -
    response-req-hdr Enable/disable addition of req-hdr for ICAP response modification (respmod) processing.
    disable: Do not add req-hdr for response modification (respmod) processing.
    enable: Add req-hdr for response modification (respmod) processing.
    		 option -

    config icap-headers

    Parameter Name Description Type Size
    name HTTP forwarded header name. string Maximum length: 79
    content HTTP header content. string Maximum length: 255
    base64-encoding Enable/disable use of base64 encoding of HTTP content.
    disable: Disable use of base64 encoding of HTTP content.
    enable: Enable use of base64 encoding of HTTP content.
    		 option -
    Previous
    Next