Description
This article describes how to change the default source IP for explicit proxy sessions.
Solution
Generally the explicit proxy sessions look at the routing table and take the destination interface IP (of the first matched route) as source IP then exit the firewall.
The following explains how to restrict the explicit web proxy to only allow sessions to exit from one FortiGate interface. The source IP address of web proxy sessions will be used. To control this behaviour use the below CLI commands :
Enter the IP address of the FortiGate unit interface that explicit web proxy sessions will use to exit the FortiGate :
config web-proxy explicit
set outgoing-ip <ip1> <ip2>….<ipX>
end
Multiple interfaces can also be specified by adding a secondary IP on an interface:
Note : This field is not available in Transparent mode.
