Fortinet black logo

What's new

What's new

The following sections describe new features and enhancements:

Toggle logging pending traffic

Logging pending traffic can be enabled/disabled. When enabled, all traffic, including pending traffic, is logged. When disabled, only traffic matched to a policy is logged. It is disabled by default.

To configure the logging sessions depending on policy matching:
config web-proxy global
			set log-policy-pending {enable | disable}
		end

enable

Enable logging sessions that are pending on policy matching.

disable

Disable logging sessions that are pending on policy matching (default).

Passive FTP mode for explicit proxy

The FTP mode for explicit proxy can be changed to passive mode. When in passive mode, the FTP client mode is based on the FTP client's preference, while the FTP proxy to FTP server connection is always passive (if supported by the FTP server).

By default, the FTP mode is client, meaning that the FTP mode for both the client and server is based on the FTP client's preference.

To configure the FTP mode for explicit proxy:
config ftp-proxy explicit
			set status enable
			set server-data-mode {client | passive}
		end

client

Use the same transmission mode for client and server data sessions (default).

passive

Use passive mode on server data session.

Use the first hard disk for logging only

On high end models, such as the FortiProxy 2000E and 4000E, the first hard disk can be configured to be used only for logging, as opposed to logging and WAN optimization.

To configure what the first hard disk is used for:
config system storage
    edit "HD1"
        set usage {mix | log}
    next
end

mix

Use the hard disk for both logging and WAN Optimization.

log

Use the hard disk for logging.

Toggle TLS fingerprint

The TLS fingerprint can be updated when deep-inspection is enabled. By default, this option is disabled.

config system global
    set update-tls-finger-print {enable | disable}
end 

Support AliCloud platform

FortiProxy-VM supports Alibaba Cloud (AliCloud).

AliCloud Elastic Compute Service (ECS) provides fast memory and the latest Intel CPUs to help you power your cloud applications and achieve faster results with low latency.

What's new

The following sections describe new features and enhancements:

Toggle logging pending traffic

Logging pending traffic can be enabled/disabled. When enabled, all traffic, including pending traffic, is logged. When disabled, only traffic matched to a policy is logged. It is disabled by default.

To configure the logging sessions depending on policy matching:
config web-proxy global
			set log-policy-pending {enable | disable}
		end

enable

Enable logging sessions that are pending on policy matching.

disable

Disable logging sessions that are pending on policy matching (default).

Passive FTP mode for explicit proxy

The FTP mode for explicit proxy can be changed to passive mode. When in passive mode, the FTP client mode is based on the FTP client's preference, while the FTP proxy to FTP server connection is always passive (if supported by the FTP server).

By default, the FTP mode is client, meaning that the FTP mode for both the client and server is based on the FTP client's preference.

To configure the FTP mode for explicit proxy:
config ftp-proxy explicit
			set status enable
			set server-data-mode {client | passive}
		end

client

Use the same transmission mode for client and server data sessions (default).

passive

Use passive mode on server data session.

Use the first hard disk for logging only

On high end models, such as the FortiProxy 2000E and 4000E, the first hard disk can be configured to be used only for logging, as opposed to logging and WAN optimization.

To configure what the first hard disk is used for:
config system storage
    edit "HD1"
        set usage {mix | log}
    next
end

mix

Use the hard disk for both logging and WAN Optimization.

log

Use the hard disk for logging.

Toggle TLS fingerprint

The TLS fingerprint can be updated when deep-inspection is enabled. By default, this option is disabled.

config system global
    set update-tls-finger-print {enable | disable}
end 

Support AliCloud platform

FortiProxy-VM supports Alibaba Cloud (AliCloud).

AliCloud Elastic Compute Service (ECS) provides fast memory and the latest Intel CPUs to help you power your cloud applications and achieve faster results with low latency.