Technical Tip: Getting Started with FIPS-CC enabled

[pmeet]

Description	This article describes how to get started once the FIPS-CC is enabled.
Scope	FortiGate.
Solution	To enable FIPS, refer to Technical Tip: How to enable FIPS-CC mode. Once the FIPS is enabled on FortiGate, all the interfaces are administratively down along with the admin access will be reduced to only allow ping. It is necessary to bring each interface up from the CLI and enable the proper admin access necessary to continue configuration, especially if GUI access is required. If all internal interfaces are part of a software or hardware switch, each interface must be removed from the switch, enabled, and then reassigned to the switch. config system interface     edit internal         set status up         set ip <ip_address> <netmask>          set allowaccess ping https end Note: Once FIPS-CC is enabled on FortiGate, it is not possible to disable via the command set status disable. Run the execute factoryreset command to reset the device to the factory default configuration to disable the FIPS-CC on FortiGate.