Technical Tip: How to limit IP addresses that can reach the management interface of FortiProxy

Description

This article explains how to limit IP addresses that can reach the administrative interface of FortiProxy.

This procedure will limit the FortiProxy administrative access to a specific range of IP addresses on a specific interface.

Scope

FortiProxy Management.

Solution

Via GUI:

1. Navigate from Network -> Interfaces -> Select the Port -> Edit.

Toggle enable the option 'Dedication Management Port'.

2. Input Trusted Host 1 and select '+' to have more IP ranges.

Via CLI:

Open an SSH to the system or CLI console via GUI and execute the following command:

config system interface
    edit port1
        set dedicated-to management
        set trust-ip-1 <IP> <Subnet>
end