IPv6 support

If FortiWeb is operating in reverse proxy mode, the following features support IPv6-to-IPv6 forwarding, as well as NAT64, to support environments where legacy back-end equipment only supports IPv4.

• IP/Netmask for all types of network interfaces, DNS settings, and Gateway and Destination IP/Mask for IP-layer static routes

• Virtual Server/V-zone

• Server Pool

• Server Health Check

• Protected Hostnames

• Add HSTS Header

• X-Forwarded-For

• Session Management

• Cookie Poisoning

• Signatures

• Custom Rule

• Parameter Validation

• Hidden Fields Protection

• File Upload Restriction

• HTTP Protocol Constraints

• Brute Force Login

• URL Access

• Page Access (page order)

• Start Pages

• Allow Method

• IP List (manual, individual IP blacklisting/whitelisting)

• File Compress/File Uncompress

• Auto-learning

• Vulnerability scans

• Configuring the global object white list

• Chunk decoding

• FortiGuard server IP overrides (Connecting to FortiGuard services)

• URL Rewriting (also redirection)

• Data Analytics

• HTTP Authentication and LDAP, RADIUS, and NTLM profiles

• Geo IP

• DoS Protection

Not yet supported are:


	If a policy has any virtual servers or server pools that contain physical or domain servers with IPv6 addresses, it does not apply these features, even if they are selected.

• Shared IP

• Policy bypasses for known search engines

• IP Reputation

• Log-based reports

• Alert email

• Syslog and FortiAnalyzer IP addresses

• NTP

• FTP immediate/scheduled

• SCEP

• Anti-defacement

• HA/Configuration sync

• exec restore

• exec backup

• exec traceroute

• exec telnet