Skip to main content
champ2152
champ2152
New Member
June 18, 2018
Question

Issue logging into firewall FG 60C

  • June 18, 2018
  • 1 reply
  • 10734 views

Hello,

We have been getting messages on the firewall that remote user has been trying to get access. The message was "Failed admin authentication attempt for root". I did some searching and found out a way to trust certain IP's in the admin section.

So I decided to add my public IP for this trusted admin log in's. No sure if this was right way in hind sight.

Anyway now I am not able to access the web interface internally. Not sure if the local IP had to be added.

 

I downloaded Fortiexplorer and connected it via USB cable. I am able to connect to the firewall but the log in still does not work connected via cable.

 

Is their any other way around this besides resetting the entire firewall settings?

 

Any help is greatly appreciated. 

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    June 18, 2018

    By default FGT accepts any remote admin accesses on the interfaces that are configured to accept those accesses. Once you configured a "trusthost" in administrator config (not 0.0.0.0/0) it starts limitting access only to those hosts (otherwise trusthosts don't mean anything). If you want to allow access from inside as well, you need to specify the LAN subnet to trusthost2 or other.

    champ2152
    champ2152Author
    New Member
    June 18, 2018

    toshiesumi wrote:

    By default FGT accepts any remote admin accesses on the interfaces that are configured to accept those accesses. Once you configured a "trusthost" in administrator config (not 0.0.0.0/0) it starts limitting access only to those hosts (otherwise trusthosts don't mean anything). If you want to allow access from inside as well, you need to specify the LAN subnet to trusthost2 or other.

    So i would need to put my public ip in the first trusthost and then my local ip in the trusthost 2? If i put the public ip in the first trusted host shouldnt any computer with that public IP be able to access it?

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    June 18, 2018

    The trusthosts are trusted host IPs that FGT see as in the source IP. When you're accessing from outside, the FGT would see your public IP. When you're connected from inside, it sees your internal IP. If you don't need access from outisde interface, I would recommend not to allow access on the outside interface at all but allow it only on the internal interface.

    Terms & ConditionsAccessibility statement