Technical Tip: SNMP access to FortiGate

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 210328

Description

This article describes what to check on FortiGate when polling from SNMP manager does not work.

Network topology

Scope FortiOS.

Solution

The SNMP must be configured (for versions 1 and 2c the same community string must be used) and the SNMP manager must be within the range configured. (Particular IP or range containing the IP must be configured).

SNMP configuration

The SNMP must be enabled on the ingress interface.

Interface configuration

If for all the admin accounts trust host configuration is used, the IP address of the SNMP manager must be part of any admin accounts trust host configuration.

In case SNMP v3 is enabled, it will not allow to add networks ( only hosts).

As a workaround, if the trusted host is enabled on all administrative access, make sure the SNMP host IP is included in at least one of these trusted IP/subnets.

11186

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.