Hi,
In the CLI manual it says very clear that in config system global, tftp can be disabled by running set tftp disable. However, it seems the command is not recognised by Fortigate as whenever I try to run tge disable command, it is not recognised. I have tried show full-config | greo ttftp whithin config system global, and have not obtained any results. Please does anyone know what could bw happening here?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello,
Please provide us the link of CLI manual and also the FortiOS version that is running on your FortiGate.
Best Regards,
Ylli
Hello,
-I checked this at my end in lab, on versions 7.2.7 and 6.4.15 and there is no option to disable tftp in global settings.
-If you want to disable TFTP, you might want to delete the session helper.
config sys session-helper
sh full
end
-then delete the entry for TFTP.
-https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-and-disable-FortiGate-system-session/ta-p/191762
Not clear what kind of TFTP you want to disable. TFTP server or client or traffic for what? I don't think FGTs are listening to UDP 69 at interfaces (server). If you want to block TFTP traffic through your FGT, you need to block it with policies from an incoming interface to an outgoing interface.
Toshi
@jefazo92
The setting that you are mentioning here to disable tftp on global contest, refers to FortiVoice and not Fortigate.
From GUI it can be done as per this guide:
Disabling recommended features | FortiVoice 7.0.2 | Fortinet Document Library
And it makes sense since tftp is needed for phone provisioning.
From Fortigate there is no tftp setting that can be disabled under system global:
FGT # config system global
FGT (global) # show full | grep tftp
FGT (global) #
--- empty result on the last line, so no settings to define tftp here
Hope this helps to clarify the manual.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1529 | |
1027 | |
749 | |
443 | |
209 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.