68
01-28011-0254-20051115
Fortinet Inc.
Management
System Network
5
Select the names of the interfaces or VLAN subinterfaces to add to the zone.
6
Clear the check box for the names of the interfaces or VLAN subinterfaces to remove
from the zone.
7
Select OK.
Management
Configure the management interface in Transparent mode to set the management IP
address of the FortiGate unit. Administrators connect to this IP address to administer
the FortiGate unit. The FortiGate also uses this IP address to connect to the FDN for
virus and attack updates (see
“Update center” on page 132
).
You can also configure interfaces to control how administrators connect to the
FortiGate unit for administration. See
“To control administrative access to an interface”
on page 65
.
Controlling administrative access to a FortiGate interface connected to the Internet
allows remote administration of the FortiGate unit from any location on the Internet.
However, allowing remote administration from the Internet could compromise the
security of the FortiGate unit. You should avoid allowing administrative access for an
interface connected to the Internet unless this is required for your configuration. To
improve the security of a FortiGate unit that allows remote administration from the
Internet:
• Use secure administrative user passwords,
• Change these passwords regularly,
• Enable secure administrative access to this interface using only HTTPS or SSH,
• Do not change the system idle timeout from the default value of 5 minutes (see
“To
set the system idle timeout” on page 91
).
Figure 17: Management
To configure the management interface
1
Go to
System > Network > Management
.
2
Enter the Management IP/Netmask.
Management
IP/Netmask
Enter the management IP address and netmask.
This must be a valid IP
address for the network that you want to manage the FortiGate unit
from.
Default
Gateway
Enter the default gateway address.
Management
Virtual Domain
Select the virtual domain from which you want to perform system
management.
Summary of Contents for FortiGate 1000A
Page 80: ...80 01 28011 0254 20051115 Fortinet Inc FortiGate IPv6 support System Network ...
Page 88: ...88 01 28011 0254 20051115 Fortinet Inc Dynamic IP System DHCP ...
Page 122: ...122 01 28011 0254 20051115 Fortinet Inc FortiManager System Config ...
Page 248: ...248 01 28011 0254 20051115 Fortinet Inc Protection profile Firewall ...
Page 260: ...260 01 28011 0254 20051115 Fortinet Inc CLI configuration User ...
Page 380: ...380 01 28011 0254 20051115 Fortinet Inc CLI configuration Log Report ...
Page 392: ...392 01 28011 0254 20051115 Fortinet Inc Glossary ...
