IPv6 support

If the FortiWeb operating mode is reverse proxy, offline inspection, or transparent inspection, the following features support IPv6-to-IPv6 forwarding, as well as NAT64, to support environments where legacy back-end equipment only supports IPv4.

• IP/Netmask for all types of network interfaces, DNS settings, and Gateway and Destination IP/Mask for IP-layer static routes
• Virtual Server/V-zone
• Server Pool
• Server Health Check
• Protected Hostnames
• Add HSTS Header
• X-Forwarded-For
• Session Management
• Cookie Poisoning
• Signatures
• Custom Rule
• Parameter Validation
• Hidden Fields Protection
• File Upload Restriction
• HTTP Protocol Constraints
• Brute Force Login
• URL Access
• Page Access (page order)
• Start Pages
• Allow Method
• IP List (manual, individual IP blacklisting/whitelisting)
• File Compress/File Uncompress
• Auto-learning
• Vulnerability scans
• Configuring the global object white list
• Chunk decoding
• FortiGuard server IP overrides (Connecting to FortiGuard services)
• URL Rewriting (also redirection)
• Data Analytics
• HTTP Authentication and LDAP, RADIUS, and NTLM profiles
• Geo IP
• DoS Protection
• SNMP traps & queries
• IP Reputation

Not yet supported are:

If a policy has any virtual servers or server pools that contain physical or domain servers with IPv6 addresses, it does not apply these features, even if they are selected.

• Shared IP
• Policy bypasses for known search engines
• Log-based reports
• Alert email
• Syslog and FortiAnalyzer IP addresses
• NTP
• FTP immediate/scheduled
• SCEP
• Anti-defacement
• HA/Configuration sync
• exec restore
• exec backup
• exec traceroute
• exec telnet

Open topic with navigation