Access through IP should not be allowed for Firewall management only FQDN allowed.

Forum|Forum|2 years ago
February 8, 2024
11 replies
3891 views

Dear

We have Fortigate FG200E firewall, we need to access the Firewall through FQDN for that we have added the A records in our local and public DNS.

But now we need to stop the access direct from public IP, and the administrators must use the FQDN to access the Firewall management page.

Can anyone please help that how can I achieve this?

Best answer by AEK

Please check this.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Issue-SSL-certificates-with-Microsoft/ta-p/191547

AEK

SuperUser

Hello Sasad

Since this is a field of http request, as far as I know this can be done if you have a WAF between clients and FG.

On the other hand may I ask why such requirement?

AEK

sasadAuthor

Visitor III

We need it as we have multiple sites and our admins access them frequently and our certificate is on FQDN this is not support IP address, so the communication will not be encrypted in this case.

AEK

SuperUser

You still can issue one single certificate for both FQDN and IP address, so your communication will be secure if you use either FQDN or IP.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO