Optional Services
Cache Redirect
Destination
:
Match connections to specified Destination: This field is the same as the “Source” field, except that
connections are matched with specified destination (See "
").
Service
:
The TCP/UDP service type to be matched. Select the matching criteria from publicly known service
types (e.g. FTP), or enter the port number in TCP/UDP packets and specify the range. Type the
starting port number plus hyphen “-“ and then the ending port number. e.g. “TCP@123-234” (See
"
").
Conn/Sec
:
Specify the number of connection allowed per second, under the conditions of [When], [Source],
[Destination], and [Service] defined.
L
:
Check to enable logging. If the box is checked, logging will be enabled. Whenever the rule is
matched, the system will record the event to the log file.
Cache Redirect
FortiWAN is capable of working with external cache servers. When a user requests a page from a web server on the
internet, FortiWAN will redirect the request to the cache server. If the requested web page is already on the cache
server, it will return the page to the user, thus saving time on data retrieval. Cache servers are configured here.
However, cache servers have to support caching in transparent mode. Note: Cache Server can be in DMZ.
FortiWAN provides log mechanisms on events refer to the Connection Limit service, see "
".
Cache Group
The first table configures cache server groups. Multiple groups can have different sets of rules which are then created
on the second table. In addition, the number of cache servers is not limited to one. Therefore it is possible to have
multiple cache servers with different weights in the cache server group.
Group Name
:
Assign a name for this cache server group.
IP
:
The IPv4 address of the cache server.
Port
:
The port number of the cache server.
Weight
:
The weight for redirecting the requests to this cache server. A higher value means a
greater the chance.
Associated WAN
:
Select WAN link associated with the cache server. Cache redirect works only when
both the selected WAN link and the cache server are available. Selecting "NO" means
cache redirect is not associated with WAN links. No matter a WAN link is available or
not, cache redirect can work if the cache server is available.
Redirect Rule
Source
:
The source where the request originates and it will be redirected to the cache server.
Specify the IP(s) when selecting “IPv4 Address”, “IPv4 Range” and/or IPv4 subnet
(See "
").
236
FortiWAN Handbook
Fortinet Technologies Inc.
Содержание FortiWAN
Страница 1: ...FortiWAN Handbook VERSION 4 2 1...
