FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
Rajashekar
Staff
Staff
Article Id 291025
Description Enable transaction-based persistence when FortiWeb is deployed behind Cloudflare.
Scope FortiWeb v7.4.0 and above.
Solution

Ensure the following:

  • FortiWeb operates on Reverse Proxy mode.
  • The server pool has been configured with the server balance mode method.

Follow these steps:

  • Navigate to Persistence Policy under Server Objects and create a Persistence Policy with the Session Type shown in the example below:

    Service Objects -> Persistence -> Type: Insert Cookie:

cookie.png

 

  • After creating the Persistence Policy, assign the Persistence Policy to the Server Pool:

 

1.png

 

  • Apply the following command on the server policy to enable Transaction Persistence:

config server-policy policy

edit Policy1<server-policy_name>

set transaction-based-persistence enable

next

end

 

This will enable persistence information to be checked by each transaction rather than with the connection itself.

This is beneficial in scenarios where FortiWeb is deployed behind Cloudflare, which would forward different customers' traffic within the same connection.

Contributors