Fiche découverte · Anglais
System & Network Settings
Système & réseau
01Initial setup & administration
- Default admin account: admin with a blank password (must be set at first login on recent firmware).
- Management access per interface: enable HTTPS, SSH, PING, etc. under *Administrative Access*.
- Trusted hosts restrict where each administrator can log in from; applied per admin account and enforced on all interfaces.
- Admin profiles define read/write permissions per function area.
super_adminprofile = full access to all VDOMs. - Idle timeout default is 5 minutes (
config system global > set admintimeout). - Two-factor authentication for admins: FortiToken (each FortiGate includes two free FortiToken Mobile activations).
config system global > set admin-sportchanges the HTTPS admin port — beware of conflicts with SSL VPN port.
02Interfaces
- Interface roles: LAN, WAN, DMZ, Undefined — roles only change which GUI settings are shown, not behavior.
- Addressing modes: manual, DHCP, PPPoE. An interface can also be a dedicated management interface.
- VLAN sub-interfaces (802.1Q) are attached to a physical interface; each is a separate L3 interface.
- Virtual wire pair: two interfaces bridged together, traffic only flows between them; useful for transparent insertion.
- Zones group interfaces to simplify firewall policies; an interface in a zone cannot be referenced individually in policies.
- FortiGate can be a DHCP server or DHCP relay per interface, and a DNS server (recursive, non-recursive, or forward).
03DNS & FortiGuard
- Default FortiGuard DNS servers: 96.45.45.45 / 96.45.46.46 using DoT (DNS over TLS) by default in recent FortiOS.
- FortiGuard updates (AV/IPS packages) are pushed/pulled via HTTPS port 443 (anycast, update.fortiguard.net by default).
- FortiGuard web filtering / rating queries use HTTPS port 443 (anycast) — a valid license and contact with FortiGuard are required.
diagnose debug ratingshows the web filter rating servers and their status.- Scheduled updates and push updates keep AV/IPS databases current; check status under *System > FortiGuard*.
04System basics
- Configuration backup can be encrypted with a password; without password, plain text (secrets still hashed/encrypted).
- Firmware upgrade: always follow the supported upgrade path (Fortinet upgrade path tool); backup config first.
- VDOMs partition one FortiGate into multiple virtual units; split-task VDOM mode = one management + one traffic VDOM.
- NTP: FortiGate can sync to FortiGuard NTP servers and act as an NTP server for the network.
get system statusshows firmware version, serial, HA status, hostname, and system time.
Fiche parcourue. Prêt à vous tester ?Passer aux questions