Fortinet FortiGate FortiGate-500 Administration Manual page 113

System administration
FortiGate-500 Administration Guide
To configure an administrator account
1 Go to System > Admin > Administrators.
2 Select Create New to add an administrator account or select the Edit icon to make
changes to an existing administrator account.
3 Type a login name for the administrator account.
4 Type and confirm a password for the administrator account.
5 Optionally type a Trusted Host IP address and netmask from which the administrator
can log into the web-based manager.
6 Select the access profile for the administrator.
7 Select OK.
Figure 41: Change an administrator password
To change an administrator password
1 Go to System > Admin > Administrators.
2 Select the Change Password icon next to the administrator account you want to
change the password for.
3 Enter and confirm the new password.
4 Select OK.
Using trusted hosts
Setting trusted hosts for all of your administrators increases the security of your
network by further restricting administrative access. In addition to knowing the
password, an administrator must connect only through the subnet or subnets you
specify. You can even restrict an administrator to a single IP address if you define only
one trusted host IP address with a netmask of 255.255.255.255.
When you set trusted hosts for all administrators, the FortiGate unit does not respond
to administrative access attempts from any other hosts. This provides the highest
security. If you leave even one administrator unrestricted, the unit accepts
administrative access attempts on any interface that has administrative access
enabled, potentially exposing the unit to attempts to gain unauthorized access.
The trusted hosts you define apply both to the web-based manager and to the CLI
when accessed through telnet or SSH. CLI access through the console connector is
not affected.
01-28006-0007-20041105
Administrators
113