Is there a way to disable the reset switch on the Fortigate firewalls?

Forum|Forum|7 years ago
February 22, 2019
4 replies
8047 views

Hi,

We'd like to disable the console port and the reset switch on the Fortigate firewalls. We've already found the documentation for disabling the console port, anyhow we can't find anything related to disabling the reset switch located on the back of the firewall. Is there any way to disable this switch and thus prevent the possibility that someone abuse it?

FortiGate

ede_pfau

SuperUser

No config setting that I know of.

'there is no security without physical security' - as long as anybody has physical access he/she can sabotage a FGT anytime. My best bet would be to close the hole in front of the reset key, using superglue or a security screw.

School?

HarisAuthor

New Member

No, it's not a school. Anyhow we'd like to avoid any possibility that someone could eventually do something like that. We'll disable the console port as well and allow access from only limited sources.

Thank you for info ;)

Dave_Hall

New Member

If you are going through the trouble of "locking down" the fgt, you may consider disabling the auto install feature.

Personally, I rather physically lock down the fgt (e.g. either with a small cage or rack enclosure, in a locked/secure room/closet) than risk "bricking" a fgt due to a corrupted flash or boot disk from a UPS (or power) failure.

Sign up

Login with SSO

Login to the community

Login with SSO