Turn off Fortigate web access from public IP

-
Accessing from external public IP to Fortigate devices are important especially for remote site. However, this might open up security loop hole for attacker to access to company environment via public IP.

Login to Fortigate, navigate to Network > Interfaces > the wan interface > edit.



Under Administrative Access > uncheck the HTTPS / HTTP. Also make sure the SSH & SNMP is not checked.

Comments

Post a Comment

Popular posts from this blog

Sword Soul by Li Wei (Well Lee) - The Legend of the Condor Heroes 2017

-
Image
OST from the TV series "The Legend of the Condor Heroes" 2017 I just finish watch the TV series and love it. The songs keep replay in my head, so I kind of go get the Chinese lyrics and translate it to pinyin along with the meaning. Not sure how accurate but it just based on my interpretation.  Lyrics: Silence Wang 汪蘇瀧 Composer: Silence Wan 汪蘇瀧 Singing: Well Lee 李煒 *** 风声飘飘 雨也潇潇 Fēngshēng piāo piāo yǔ yě xiāoxiāo  Fluttering of the wind, pitter-patter of the rain 夜半还睡不着 yèbàn hái shuì bùzháo Can’t sleep though it past midnight 忧伤怀抱 谁眼泪掉 yōushāng huáibào shéi yǎnlèi diào  Embracing the grief, who is crying? 窗外雨打芭蕉 Chuāngwài yǔ dǎ bājiāo Rain battered the tree outside the window 漫天繁星闪耀 人儿痴痴笑 màntiān fánxīng shǎnyào rén er chī chī xiào Stars are shining the whole sky, people ridiculously laughing 不管来世只看今朝 bùguǎn láishì zhǐ kàn jīnzhāo Ignoring the afterlife, only care of living in the moment 抛开宿命缠绕 画
Read more

Namewee 黃明志 ft. Anthony Perry 黃秋生 - China Reggaeton Pinyin and translation Lyrics

-
Image
Song name: China Reggaeton Singer: Namewee ft Anthony Wong 愛人啊 妳在哪裡呀? Oi yin ah gi shuo na kui ga My darling, where are you 阿哥啊 想妳啦 Ah go ah siong gi la I'm missing you 這裡不是波多黎各海地古巴牙買加 Zhèlǐ bùshì bōduōlígè hǎidì gǔbā yámǎijiā This is not Puerto Rico, Haiti, Cuba nor Jamaica 也沒有加勒比海盜在海上跳著森巴 Yě méiyǒu jiālèbǐ hǎidào zài hǎishàng tiàozhe sēn bā There is no Caribbean pirates dancing to Samba on the sea 木腳獨眼大鬍渣 鹿皮靴長頭髮 Mù jiǎo dú yǎn dà hú zhā lù pí xuē zhǎng tóufà Wooden leg, one-eyed with stubble, deerskin boots and long hair 巴布.馬力的反拍節奏七個洽七個七個恰 Bā bù. Mǎlì de fǎn pāi jiézòu qī gè qià qī gè qī gè qià Bob Marley's reversed rhythm 琵琶配竹簫 輕快又跳躍 Pípá pèi zhú xiāo qīngkuài yòu tiàoyuè Pipa and bamboo flute are so lively and energetic 二胡拉著悲傷的旋律 哥滄桑的寫照 Èrhú lāzhe bēishāng de xuánlǜ gē cāngsāng de xiězhào Erhu plays a sad melody, it's just the illustration 古箏代替了吉他 一樣有撩人情話 Gǔzhēng dàitìle jítā yīyàng yǒu liāo rénqíng huà Guzheng has replaced guita
Read more

Set DNS suffix in Fortigate

-
Image
After sign in to Fortigate SSL VPN, user unable to access to local sites, unable to RDP to server or accessing network drive. When try to run ping to the FQDN, it will show could not find the host. However, if try to ping with suffix ad.local, it will be able to access. After searching for quite sometime, I found an article  show how to enter the dns suffix via CLI. For my case, it works as below. Set DNS search suffix using CLI config vpn ssl settings set dns-suffix ad.local end Set Client DNS Server in the GUI Navigate to VPN –> SSL –> Settings –> Tunnel Mode Client Settings.  Specify the DNS Server setting and enter the IP addresses of your corporate DNS servers. Finally it works.
Read more