system : autoupdate tunneling
 
autoupdate tunneling
Use this command to configure the FortiGate unit to use a proxy server to connect to the FortiGuard Distribution Network (FDN). You must enable tunneling so that you can use the proxy server, and also add the IP address and port required to connect to the proxy server. If the proxy server requires authentication, add the user name and password required to connect to the proxy server.
The FortiGate unit connects to the proxy server using the HTTP CONNECT method, as described in RFC 2616. The FortiGate unit sends a HTTP CONNECT request to the proxy server (optionally with authentication information) specifying the IP address and port required to connect to the FDN. The proxy server establishes the connection to the FDN and passes information between the FortiGate unit and the FDN.
The CONNECT method is used mostly for tunneling SSL traffic. Some proxy servers do not allow CONNECT to connect to any port; proxy servers restrict the allowed ports to the well known ports for HTTPS and perhaps some other similar services. FortiGate autoupdates use HTTPS on port 8890 to connect to the FDN, so your proxy server may need to be configured to allow connections on this port.
Syntax
config system autoupdate tunneling
set address <proxy_address>
set password <password>
set port <proxy_port>
set status {enable | disable}
set username <name>
end
Variable
Description
Default
address <proxy_address>
The IP address or fully qualified domain name of the proxy server.
No default.
password <password>
The password to connect to the proxy server if one is required.
No default.
port <proxy_port>
The port required to connect to the proxy server.
0
status {enable | disable}
Enable or disable tunneling.
disable
username <name>
The user name used to connect to the proxy server.
No default.