• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 13050
  • Last Modified:

Disabling Fortigate http port 80 web acces (remote administration)

I am trying to secure down my fortigate firewall and need to disable the remote administration access via port 80 (http) only.  I just wanted to check with yall before I turn off the wrong things.  I tried emptying out the field but it wont let me.

I looked around but am not sure precisely the steps to make it happen.

I am looking under "System" -->  "Admin" --> "Settings".  Is the correct place for disabling it?

Also, should I disable the telnet and ssh ports too and only leave the https & sslvpn ports open?
0
janlani19
Asked:
janlani19
  • 2
1 Solution
 
iworks-uworksCommented:
Under System --> Network you can change the access level for each interface. Leaving HTTP, HTTPS, and PING on the internal network is probably OK. I would say for the external interface only open https and maybe change the port number from 443 if you use it for other applications.
0
 
myramuCommented:
Yes, it is always better to allow only https access from out side and disable the rest.
For cli access you can use the java console after you access the device using https.

If you still want to more secure, you can allow management access only from internal interface. To access from outside connect via VPN and access using internal IP address.

Management access is configurable under respective intefaces.

Good Luck!
0
 
myramuCommented:
Also change the admin access ports for  better security.
0
 
janlani19Author Commented:
Yup, that did it.  I see on the different interfaces the access I can allow.  They want to dis-allow all remote access, so I am unchecking all.  Thanks a lot.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Live Q & A: Securing Your Wi-Fi for Summer Travel

Traveling this summer? Join us on June 18, 2018 for a live stream to learn about the importance of Wi-Fi security and 3 easy measures you can start taking immediately to protect your private data while using public Wi-Fi. Follow us today to learn more!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now