Technical Tip: Restrict access using trusted host

[jstan]

Description

This article describes how to Restrict access using trusted host.

Scope

FortiMail.

Solution

1. The trusted host can only be restricted to admin user login from GUI.
   
   
2. For web mail access, it is not possible to restrict access based on the trusted host as it is expected for the webmail access to be accessed via the public network.
   
   
3. To configure a trusted host for the admin account:

• Go to Administrator -> Administrator and select an administrator (for example: Test Admin).
• Similar to FortiGates, under the trusted hosts field, define the subnet and the subnet mask from which the admin will log in.
• Repeat this process for all the available admin accounts.
  

4. Logs for untrusted hosts tried to access the Test Admin account.