Proxy policy security profiles Web proxy policies support most security profile types. Explicit web proxy policy The security profiles supported by explicit web proxy policies are: AntiVirus, l Web Filter, l Application Control, l IPS, l DLP Sensor, l ICAP, […]
Proxy policy addresses Proxy addresses are designed to be used only by proxy policies. Fast policy match The fast policy match function improves the performance of IPv4 explicit and transparent web proxies on FortiGate devices. When enabled, after the proxy […]
FTP proxy FTP proxies can be configured on the FortiGate so that FTP traffic can be proxied. When the FortiGate is configured as an FTP proxy, FTP client applications should be configured to send FTP requests to the FortiGate. To […]
Transparent proxy In a transparent proxy deployment, the user’s client software, such as a browser, is unaware that it is communicating with a proxy. Users request Internet content as usual, without any special client configuration, and the proxy serves their […]
Explicit web proxy Explicit web proxy can be configured on FortiGate for proxying HTTP and HTTPS traffic. To deploy explicit proxy, individual client browsers can be manually configured to send requests directly to the proxy, or they can be configured […]
SIP over TLS Some SIP phones and servers can communicate using TLS to encrypt the SIP signaling traffic. To allow SIP over TLS calls to pass through the FortiGate, the encrypted signaling traffic must be unencrypted and inspected. The FortiGate […]
SIP pinholes When SIP ALG processes a SIP call, it usually opens pinholes for SIP signaling and RTP/RTCP packets. NAT usually takes place during the process at both the network and SIP application layers. SIP ALG ensures that, with NAT […]
SIP message inspection and filtering SIP ALG provides users with security features to inspect and control SIP messages that are transported through FortiOS devices, including: l Verifying the SIP message syntax. l Blocking particular types of SIP requests. l Restricting […]
