Firewall access only accept from known hosts

Forum|Forum|4 years ago
November 19, 2021
2 replies
4871 views

Good Morning,

is there a way to restrict firewall access over the internet to dns hosts?

Regards

Klaus

FortiGate

Best answer by nativenoble

A redditor showed me the right way! Have tested it successfully.

https://community.fortinet.com/t5/FortiGate/Technical-Note-Filter-ingress-traffic-going-to-the-FortiGate/ta-p/190268?externalID=FD33649

Hosemacht

Explorer

Hey there,

what are you trying to archive exactly?

Regards

nativenobleAuthor

Visitor III

I have Fortigates in the network which I can only reach via a VPN tunnel. If the tunnel is disturbed, I can no longer access the box. I would now like to enable access via SSH or HTTPS, but only allow the connection of certain FQDN hosts.

Hosemacht

Explorer

afik its only possible to set IP adress/ranges as trusted hosts for admin users.

But there is a 2-factor authentication for admin users too, maybe this could help you

Regards

nativenobleAuthorAnswer

Visitor III

A redditor showed me the right way! Have tested it successfully.

https://community.fortinet.com/t5/FortiGate/Technical-Note-Filter-ingress-traffic-going-to-the-FortiGate/ta-p/190268?externalID=FD33649

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded