The FQDN for the global proxy server. This is the domain name to enter into browsers to access the proxy server.

The maximum length of an HTTP request that can be cached, in KB. Larger requests are rejected. The default is 8 KB.

The maximum length of an HTTP message that can be cached, in KB. Larger messages are rejected. The default is 32 KB.

You can enter an authentication realm to identify the explicit web proxy. The realm can be any text string of up to 63 characters. If the realm includes spaces, enclose it in quotes. When a user authenticates with the explicit web proxy, the HTTP authentication dialog box includes the realm, so you can use the realm to identify the explicitly web proxy for your users.

Enter the IP address to use as the source address for outgoing HTTP requests by explicit web proxy. Select + to enter another IP address.

Enter the name of the web proxy profile that will be applied when explicit proxy traffic is allowed by default and traffic is accepted that does not match an explicit proxy policy.

Select which certificate to use as a default. The default certificate is Fortinet_CA_SSL.

Enter the number of minute before the traffic from the source IP address is no longer assigned to the forwarding server. The default is 30 minutes. The range is 6-60 minutes.

The fast policy match function improves the performance of IPv4 explicit and transparent web proxies on FortiProxy units. When enabled, after the proxy policies are configured, the FortiProxy unit builds a fast searching table based on the different proxy policy matching criteria. When fast policy matching is disabled, web proxy traffic is compared to the policies one at a time from the beginning of the policy list.

Enable or disable the LDAP user cache.

Enable or disable (by default) the blocking of web sites that send incorrect headers that don't conform to HTTP 1.1 (see RFC 2616 for more information). Enabling this option may block some commonly used websites.

Enable or disable (by default) the forwarding of proxy authentication headers. Note that this option is only practical when in explicit mode, because proxy authentication headers are always forwarded when in transparent mode. By default, in explicit mode, proxy authentication headers are blocked by the explicit web proxy. Therefore, enable this entry if you need to allow proxy authentication through the explicit web proxy.

Enable or disable whether the explicit web proxy uses strict guest user checking.

Enable or disable whether a replacement message is displayed for HTTPS requests.

Enable or disable whether a replacement message is displayed when a server error is detected.

Enable or disable whether timed-out authentication requests are logged.

Enable or disable the recording of extended log for implicit policies. The extended log includes the useragent, referralurl, httpmethod, and statuscode fields.

Configure the logging of HTTP transactions:

• All—Log all HTTP transactions.

• Security Profiles (default)—Log HTTP transaction on UTM event.

• Disable—Disable HTTP transaction log.

When All or Security Profiles is selected, you can find the HTTP transaction logs under Log & Report > HTTP Transaction. See Types of logs.