Fortinet Tip - Security
Hey folks, I would like to share a security tip with regards to accessibility to the firewall GUI and manageability.
First thing I would recommend is for the security administrator to ensure that the firewall is only accessible internally to their lan on on a secure port. I will show you how to do this in the steps below:
- Click Administrators , Settings and you will see the below screenshot, select 448 as your secure port.
In this example , our firewall IP is 192.168.0.1 therefore the link to access our gui via the web browser will be https://192.168.0.1:448 .
We can then go further into security by changing the admin credentials to something that is more secure both the username and password should be changed.
Final step is to limit the subnets or IP's that are allowed to connect to the firewall GUI. In my lan , it is limited to myself and my backup engineer's IP that is allowed to communicate to the firewall and I will show you how to configure it.
And that will limit the number of people trying to access your firewall especially if you have multiple subnets and if you do not want your firewall accessible externally.
Thank you for reading.
Regards,
@trev03