?
Solved

Disabling Fortigate http port 80 web acces (remote administration)

Posted on 2011-09-29
4
Medium Priority
?
11,982 Views
Last Modified: 2012-10-04
I am trying to secure down my fortigate firewall and need to disable the remote administration access via port 80 (http) only.  I just wanted to check with yall before I turn off the wrong things.  I tried emptying out the field but it wont let me.

I looked around but am not sure precisely the steps to make it happen.

I am looking under "System" -->  "Admin" --> "Settings".  Is the correct place for disabling it?

Also, should I disable the telnet and ssh ports too and only leave the https & sslvpn ports open?
0
Comment
Question by:janlani19
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 4

Accepted Solution

by:
iworks-uworks earned 2000 total points
ID: 36891602
Under System --> Network you can change the access level for each interface. Leaving HTTP, HTTPS, and PING on the internal network is probably OK. I would say for the external interface only open https and maybe change the port number from 443 if you use it for other applications.
0
 
LVL 8

Expert Comment

by:myramu
ID: 36896288
Yes, it is always better to allow only https access from out side and disable the rest.
For cli access you can use the java console after you access the device using https.

If you still want to more secure, you can allow management access only from internal interface. To access from outside connect via VPN and access using internal IP address.

Management access is configurable under respective intefaces.

Good Luck!
0
 
LVL 8

Expert Comment

by:myramu
ID: 36896349
Also change the admin access ports for  better security.
0
 

Author Closing Comment

by:janlani19
ID: 36905986
Yup, that did it.  I see on the different interfaces the access I can allow.  They want to dis-allow all remote access, so I am unchecking all.  Thanks a lot.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this blog we highlight approaches to managed security as a service.  We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
Hey fellow admins! This time, I have a little fairy tale for you. As many tales do, it starts boring and then gets pretty gory. I hope you like it. TL;DR: It is about an important security matter, you should read it if you run or administer Windows …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question