Technical Tip: How to restrict access to admin page of FortiPortal

[Oscar_Wee]

Description	This article describes how to restrict access to the admin page of FortiPortal.
Scope	FortiGate, 7.0.11 and above, 7.2.1 and above.
Solution	In the GUI of the FortiGate, go to Security Profile -> Web Filter -> Create New -> Name: Static_url_block_admin_allow_users -> Static URL Filter -> URL Filter -> Create New. URL : <website_of_portal>/admin. Type: Simple. Action: Block. Status: Enable. Static URL Filter -> URL Filter -> Create New URL : <website_of_portal>/login. Type: Simple. Action: Allow. Status: Enable. Ensure that the newly created Web Filter, is included in Firewall policy that governs users and admin logging in from WAN to FortiPortal. Ensure that SSL Deep Inspection is enabled in Firewall policy that governs users and admin logging in from WAN to FortiPortal. Verify the block of <website_of_portal>/admin and allow of <website_of_portal>/login by navigating to the pages with a test user.