Another Used Fortigate Question

[zekgrafic]

I didn't see anything specific to this question answered.

If you purchase a used fortigate and are unable to transfer ownership (such as the case with a decommissioned firewall) is it 'safe' to use?

I ask because i have two 60D firewalls for personal use, after connecting the firewalls to the internet they show as registered under FortiCare. I saw other posts saying to open a ticket with Fortinet to have it transferred but these units cannot have a ticket open because they've been deemed decommissioned.

I don't really care so much about them being transferred to me, i just want to ensure that with them being registered to someone else that there's not a back door in through FortiCloud or a way to pull/view my configs.

Is there a way to turn off all contact to FortiNet/FortiCloud services?

I saw the command that was introduced in I think 6.2 but these are on 5.6.4. I think firmware was only supported up til 6.0 anyways for the 60D.

[Anonymous]

Hello @zekgrafic  ,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[Anonymous]

Hi @zekgrafic 

I have asked an engineer and she says if logging option is disabled on the FortiGate, there is nothing to worry about.

Hope this helps.

[Debbie_FTNT]

Hey zekgrafic,

to elaborate on the above - the FortiGate being registered in FortiCare (support.fortinet.com) is not an issue.

The only potential issue would be if the FortiGate is registered in FortiCloud, AND maintains an active connection.

In that case, FortiCloud could open a tunnel to the FortiGate (would still require logging on the FortiGate itself) to make configuration changes or pull information.

In addition, the FortiCloud tunnel option may not even be available given the old firmware, but I'm not entirely confident on this.

If you want, you can PM me the FortiGate serial number and I will check if it is registered in a FortiCloud account (not support account).

[xsilver_FTNT]

It seems that even C or D class units are supported on FortiGate Cloud management platform, IF they run FortiOS 5.2.2 and above.

Generic requirements for FortiGate Cloud Management platform
https://docs.fortinet.com/document/fortigate-cloud/latest/administration-guide/925021/requirements

Supported models:

https://www.forticloud.com/help/supportedmodels.html

FortiCloud all possible platforms landing zone / starting point

https://docs.fortinet.com/forticloud-landing