FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
SassiVeeran
Staff
Staff
Article Id 332128
Description This article describes if the FortiGate has a feature to hide DHCP server IP.
Scope FortiGate.
Solution

There is no way to configure FortiGate to not reflect the DHCP server IP when the user performs an 'ipconfig /all' on a Windows machine.

 

  • 'ipconfig /all' is a Windows command line.
  • The only way to hide the IP from FortiGate is to disable the DHCP server.

    disable DHCP in fortigate.PNG

     

  • If the user machine needs a DHCP server to configure itself, it has to communicate with the IP address and hence it has to know the IP address.
  • Also, there is no way to hide the DHCP server IP from the user's machine itself.
  • Instead, the admin could potentially implement a PAM/endpoint solution not to allow running the command 'ipconfig /all' or even not to allow opening the command prompt (cmd).