Fortinet Reverse Proxy for IIS

@zulqrn

Hi there, I have strong hands on experience in FortiGate firewalls and would like to assist. Please let me know a good time to talk. Thanks!

@raj00565

Hi, Having worked in the IT industry for over a decade, my team and I have gained significant experience in crucial areas such as system administration, network engineering, and DevOps. Intriguingly, these are the skills that your project requires. Our diverse skill set in managing complex network infrastructure has exposed us to various designs - including the design of a secure reverse proxy system you're requesting. Drawing from this immense skill base, we guarantee not only a solid comprehension of your needs but also reliable delivery of those needs. Crucially, as part of our service, we supply comprehensive documentation which will ensure that not only do you have a clear understanding of the final configuration but that you are equipped to handle it moving forward with ease. With us, you'll get a skilled and dedicated team who can deliver results on time and within budget while keeping security at the forefront. Let's get started on fortifying your IIS servers! Regards Dhanu Innovations Pvt. Lt

@Web1devloper

With my broad array of tech skills and extensive experience in web development and network management, I am confident in my ability to configure your FortiGate firewall as a secure reverse proxy for your IIS servers. My expertise spans across both Fortinet firewalls and IIS servers, giving me an intimate understanding of the intricate processes involved in ensuring your sites stay secure while also being easily accessible. I understand the significance of this task and appreciate that you already have valid SSL certificates pre-installed on the IIS hosts. This aligns with my vision to provide solutions that are not only technologically advanced but also practical and cost-effective. Whether it be through SSL termination on the firewall or certificate importation, I am fully capable and flexible to adapt to either approach for seamless website accessibility. Moreover, my abilities extend to thorough testing and comprehensive documentation, ensuring that the final configuration I devise is both foolproof and replicable across future projects. By choosing me for this project, you'll be selecting someone who doesn't merely solve problems but offers innovative solutions built on years of experience. I'm looking forward to beginning this project with you.

@cybexsoftadmin

Hi, I can configure your FortiGate as a secure reverse proxy for both IIS servers, ensuring clean HTTPS access from the internet while keeping internal hosts fully protected. I’ve worked with FortiOS virtual servers and SSL offloading/re-encryption setups, focusing on secure, stable traffic flow without disrupting existing policies. Approach: - Review current FortiGate config (policies, VLANs, objects) - Design virtual servers mapping FQDN → internal IIS hosts - Configure SSL (terminate on FortiGate or re-encrypt to backend as needed) - Set HTTP→HTTPS redirect, headers, HSTS, and preserve client IP - Apply security best practices (no direct internal exposure) - Test end-to-end connectivity and validate certificates Deliverables: - Fully working HTTPS access for both sites - Secure reverse proxy configuration - No impact on existing firewall rules - Clear handover + rollback steps I have 15+ years of experience with network/security infrastructure and firewall configurations. Timeline: Few hours Quick questions: - Preferred SSL mode (offload vs full re-encryption)? - FortiOS version? Ready to start immediately. Rahul

@lutherl1

Hello, I’m confident I can deliver exactly what you’re looking for. You need a clean, user-friendly FortiGate reverse proxy setup — well designed and seamlessly integrated without rushed shortcuts. I specialize in smooth, secure web implementations emphasizing performance and solid structure. Though new to Freelancer, I bring extensive hands-on experience configuring FortiOS reverse proxy features with IIS environments, including SSL offloading and re-encryption following best practices. I’ll review your current config, design precise virtual servers, bind certificates appropriately, and ensure flawless HTTPS access while protecting internal hosts and avoiding service disruptions. Full documentation and testing are guaranteed. I’d love to discuss your project further! Regards, Luther

@Infranovas

At Infranova Services, we specialize in delivering secure and high-performing IT infrastructure solutions, making us a strong fit for your Fortinet reverse proxy for IIS project. We’ll start with a careful review of your existing FortiGate configuration to ensure no disruption to active policies. Then, we’ll design and implement an efficient reverse proxy setup that maps external FQDNs to internal IIS servers while maintaining smooth traffic flow and performance. Security remains our priority—we’ll ensure internal hosts are never directly exposed to the internet, following best-practice hardening standards without impacting user access. You’ll also receive clear documentation for easy future deployment and management. We focus on building reliable, secure, and scalable solutions with minimal downtime. Happy to discuss your requirements further and get started.

@parbatkrishna

Hi, I can help you securely configure your FortiGate as a reverse proxy for your IIS web servers with proper SSL handling and Fortinet best-practice hardening. I have hands-on experience with FortiGate (VIP / Virtual Server / Reverse Proxy), IIS hosting, and secure web publishing over HTTPS. ? **My Approach:** • Review your current FortiGate policies, NAT, and VLAN setup • Design reverse proxy using Virtual Server / VIP with proper FQDN mapping • Configure SSL termination (offloading) OR end-to-end encryption based on your requirement • Import and bind SSL certificates (PFX) if firewall-side termination is used • Ensure HTTP → HTTPS redirection, header forwarding, and HSTS configuration • Apply security hardening (restrict direct access, minimize exposed services) • Test complete flow externally and internally without impacting existing services ? **What you’ll get:** ✔ Secure HTTPS access to both IIS websites ✔ No direct exposure of internal servers ✔ Clean policy structure (easy to manage) ✔ Zero disruption to existing FortiGate rules ✔ Step-by-step documentation + rollback plan I’ve worked with FortiGate deployments including firewall policies, VPN, NAT, and secure application publishing in real environments. I can start immediately and complete this efficiently. Quick question: Do you prefer SSL termination on FortiGate (recommended for better control), or end-to-end SSL to IIS? Looking forward to working with you.

@MohammedKazak

Hi, I'm a Fortinet-certified infrastructure engineer with hands-on experience configuring FortiGate reverse proxies, virtual servers, SSL offloading, and IIS integrations on live environments. For this project I will: Review your existing FortiGate policies, VPNs, and address objects before touching anything live Design and implement Virtual Servers mapping both external FQDNs to their internal IIS hosts Import your PFX certificates and bind them to each virtual server with SSL re-encryption (HTTPS → FortiGate → HTTPS to backend), keeping end-to-end encryption intact Configure HTTP-to-HTTPS redirection, X-Forwarded-For header preservation, and HSTS Lock backend IIS servers behind explicit deny rules — no direct internet access Deliver a handover document covering all objects, policies, cert bindings, and rollback steps I'll take a full config backup before starting so rollback is always one step away. No guesswork, no trial and error on your live box. To get started I'll need your FortiOS version, the two internal IIS IPs, your public FQDNs, and read access to the current config. Ready to begin immediately.

@mahads31

As a freelance web and software developer with proficiency in SSL, I hold expertise in building secure, scalable, and high-performing applications that align perfectly with your project goals. My insight into working on diverse projects across various industries, coupled with my deep familiarity with FortiOS reverse proxy features and IIS, makes me an optimum candidate for this task. I understand the importance of a well-functioning and accessible web presence and can certainly deliver that for you. I have vast experience in designing virtual server setups and ensuring smooth HTTPS connectivity without any mixed-content warnings. In addition, I’m well-versed in addressing concerns such as HTTP-to-HTTPS redirection, header preservation, HSTS and similar requirements. I aim to build products that serve business objectives alongside technical needs - an approach that aligns perfectly with your project's emphasis on delivering real business value. My commitment to efficient delivery without compromising quality will assure no service interruptions to live policies on the FortiGate. My thoroughness extends to documention: I'll produce detailed configuration records and ensure a smooth handover complete with necessary rollback steps. Let's get started!

@ah682

Virtual Servers-Reverse Proxy-Policy & Objects 在 Policy & Objects 中，选择 IPv4 Policy，然后点击 Create New。 配置防火墙策略，允许通过反向代理的流量： Incoming Interface: 选择外部接口（如WAN）。 Outgoing Interface: 选择内部网络接口。 Source: 可以选择 all 或指定特定的源IP。 Destination: 选择刚才创建的虚拟服务器。 Service: 选择你创建的服务（HTTP 或 HTTPS）。 Action: 选择 Accept。