Technical Tip: Getting Started with FIPS-CC enabled

To enable FIPS, refer to Technical Tip: How to enable FIPS-CC mode.

• Once the FIPS is enabled on FortiGate, all the interfaces are administratively down along with the admin access will be reduced to only allow ping.
• It is necessary to bring each interface up from the CLI and enable the proper admin access necessary to continue configuration, especially if GUI access is required.
• If the interfaces are part of hardware or software switch both the physical and the switch interface needs to enabled.

config system interface

    edit internal

        set status up

        set ip <ip_address> <netmask> 

        set allowaccess ping https

end

Note: Once FIPS-CC is enabled on FortiGate, it is not possible to disable via the command set status disable.

Run the execute factoryreset command to reset the device to the factory default configuration to disable the FIPS-CC on FortiGate.