FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akumar02
Staff
Staff
Article Id 295906
Description

This article describes how to add the management interface to the Fortigate Policy. 

This is mainly used for routing when devices/servers are behind the MGMT interface and customers cannot create a policy to reach those servers. 

Scope FotiGate.
Solution

By default, the 'Dedicated Management Port' option in the MGMT port of FortiGate is enabled.

This option allows the customer to add the 'rusted Hoststo access the FortiGate using the management IP address and gives the highest management access priority to the User. Management port can be used to manage the HA units as well. 

 
 

MGMT.png

 

mgmt1.png

 

This Management Interface will not be visible in the Policy incoming/Outgoing Interface if the 'Dedicated Management Port' is enabled on the 'MGMT' port:

 

mgmt2.png

 

Once the 'Dedicated Management Port' is disabled from FortiGate GUI, it is possible to add the 'MGMT' interface to the Firewall policy.

 

config system interface

    edit mgmt
        set dedicated-to none <----- Default is  management.
    next
end

 

mgmt3.png

Contributors