Technical Tip: Prevent unknown user's access to the network

[bmedikonda]

Description	This article describes how to prevent unknown user's access to the network.
Scope	FortiGate.
Solution	Change the port numbers for HTTPS (443) and SSH (22) from the default ones: How to change the default ports   Configure the maximum log-in attempts and lockout period: Configuring the maximum log in attempts and lockout period  Consider configuring trusted hosts to limit access to the FortiGate: Configuring Administrator access to a FortiGate unit using Trusted Hosts  Configure local-in policy to restrict unauthorized login attempts to administrative access of FortiGate: Use local-in policy to restrict unauthorized login attempts to administrative access of FortiGate   Use geolocation address object on the source address to allow/block specific countries: How to block by country or geolocation