Fortinet fortigate-100a Benutzerhandbuch

Type a login name for the administrator account.

Type and confirm a password for the administrator account.

Optionally type a Trusted Host IP address and netmask from which the administrator 
can log into the web-based manager.

Select the access profile for the administrator.

Select OK.

Go to System > Admin > Administrators.

Select the Change Password icon next to the administrator account you want to 
change the password for.

Enter and confirm the new password.

Select OK.

Setting trusted hosts for all of your administrators increases the security of your 
network by further restricting administrative access. In addition to knowing the 
password, an administrator must connect only through the subnet or subnets you 
specify. You can even restrict an administrator to a single IP address if you define only 
one trusted host IP address with a netmask of 255.255.255.255.

When you set trusted hosts for all administrators, the FortiGate unit does not respond 
to administrative access attempts from any other hosts. This provides the highest 
security. If you leave even one administrator unrestricted, the unit accepts 
administrative access attempts on any interface that has administrative access 
enabled, potentially exposing the unit to attempts to gain unauthorized access.

The trusted hosts you define apply both to the web-based manager and to the CLI 
when accessed through telnet or SSH. CLI access through the console connector is 
not affected.

Go to System > Admin > Access Profile to add access profiles for FortiGate 
administrators. Each administrator account belongs to an access profile. You can 
create access profiles that deny access to or allow read only, write only, or both read 
and write access to FortiGate features.