Block acces to an internal server

Forum|Forum|7 years ago
December 14, 2018
3 replies
5413 views

Hi ,

I have a lan network 192.168.10.x and a server on 192.168.10.30 , every host from the same network can acces this server by tapping the ip adress on web URL , i want to let this acces just for IT departement and block it for other hosts on the entreprise please

Thanks

Best answer by Toshi_Esumi

A good practice is to isolate the subnet for servers from all other devices, and put it on an individual interface/vlan. Then you can apply FW policies to control server accesses.

Dave_Hall

New Member

Keep in mind that the Fortigate's traditional role as a security appliance is to sit on the edge of your network, facing towards the Internet and/or in between network segments (see Security Fabric).

What you are asking is more akin to server security - setting up or locking down the server access via firewall rules (on the server) and/or login access, group policies, etc.

Toshi_EsumiAnswer

SuperUser

A good practice is to isolate the subnet for servers from all other devices, and put it on an individual interface/vlan. Then you can apply FW policies to control server accesses.

Network88Author

New Member

You are right , thanks for the tip

Sign up

Login with SSO

Login to the community

Login with SSO