Having multiple administrators managing your Security devices is common practice, every user that is supposed to have access to a Firewall should have access to it. This needs to be controlled by an identity server; in this case, we will use Microsoft Active Directory.
Looking to catch up up the FortiGate Series? - Make sure you check the Main Page for it –> FortiGate - Configuration Series.
The Requirement Ensure the Network Administrators Group and Help Desk Groups have access to Manage the FortiGate - Use AD for Authentication.
It has been a long time since my last practical/post, so I wanted to share what I have been working on
For my understanding and anyone reading this, I would like to set a quick standard for this lab; the best way to do it is by creating a quick diagram and a Plan
Looking to catch up up the FortiGate Series? - Make sure you check the Main Page for it –> FortiGate - Configuration Series.
TO pick up right where we left off, we will configure Static Routes to the providers, Security Policies (Allowing Traffic to the Internet), and NAT
Looking to catch up up the FortiGate Series? - Make sure you check the Main Page for it –> FortiGate - Configuration Series.
The Diagram Static Routes ISP This part of the configuration is enjoyable; Fortinet helps you save time. When you configure a static route, it will suggest an interface to be used as the next hop, without you having to do much other than making sure it is the right one. You can also use the advanced options to make sure and set the priority of your interface.
The Security Profile - Web Filter FortiOS has a neat section for all the Security Profiles; this GUI is straightforward and intuitive. So let’s see what we have by default.
Looking to catch up up the FortiGate Series? - Make sure you check the Main Page for it –> FortiGate - Configuration Series.
From the screenshot, we can clearly see what these profiles are being used for. This time, I will make sure to copy the Default one instead of creating a new Profile. You can do this by right-clicking on the default profile, then select Clone. This will open a new section to adjust the name or accept the default Fortinet created for you, which reads: “Clone of Default.”
Hey there, I created a quick series that goes over Fortinet Configuration. Initially, this series goes over simple configuration tasks
Let me know if this is helpful
FortiGate Configuration Series Main Post FortiGate – Configuration (Part 1) – Interfaces and Getting Started
FortiGate – Configuration (Part 2) – Static Routes | Firewall Policies | Port Address Translation for Internet
FortiGate – Configuration (Part 3) – Web Filtering | Read-only SSL handshake inspection | Troubleshooting | Adding FortiGate CA Certificate to Windows 10
