In FortiOS 5.0, WAN optimization is enabled in security policies and WAN optimization rules are no longer required. Instead of adding a security policy that accepts traffic to be optimized and then creating WAN optimization rules to apply WAN optimization, in FortiOS 5.0 you create security policies that accept traffic to be optimized and enable WAN optimization in those policies. WAN optimization is applied by WAN optimization profiles which are created separately and added to the required security policies.

Because of this change, you can now apply all Security features to WAN optimization traffic without having to use a configuration that requires two VDOMS (one for applying Security features and one for applying WAN optimization). Instead, you can enable Security features in the security policies that accept WAN optimization traffic.

WAN optimization in policies requires you to add extra security policies with the incoming interface set to the new wanopt interface.

In FortiOS 4.3, you could create web caching only WAN optimization rules while in FortiOS 5.0 you cannot create web caching only WAN optimization profiles. Instead, you simply enable web caching in security policies, including WAN optimization policies. You can enable web caching for any WAN optimization policy. You can also enable HTTPS web caching and SSL offloading from the CLI for any security policy.

This chapter describes: