Author Archives: Mike

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

GUI favorites and search (307478)

GUI favorites and search (307478)

If there is a GUI page that you use often, rather than having to click through the GUI menu to find it you can select the star icon to make it a favorite page. Making something a favorite adds a new Favorites menu, which, when you open it, lists your favorite GUI pages. Making a page a favorite doesn’t remove it from its location in the GUI menu.

FortiOS 54 Favorites

 

A search field has been added to the bottom of the GUI menu allowing you to search GUI page names for keywords. GUI page names that match the keyword appear and you can select the one you are looking for.

FortiOS 54 Favorites 2

Most diagnose sys dashboard commands removed (129248)

The diagnose sys dashboard reset command is still available.

 


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Other GUI changes(129248)

Other GUI changes(129248)

You can no longer add custom dashboard tabs. The following CLI command has been remvoed:

config system admin edit <admin>

config dashboard-tabs end

Lite version of the GUI (available on some low level models) has been removed including the following CLI

command:

config system settings

set gui-lite (disable | enable}

end

You can no longer configure multiple custom dashboard widgets. The following CLI command has been removed:

config system admin edit <admin>

config dashboard edit 0

set widget-type app-usage set widget-type storage

set widget-type protocol-usage

set widget-type device-os-dist “Device/

next

HTTP obfuscating has also been removed, including the following CLI command.

config system global set http-obfuscate

end


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Display the hostname on the GUI login page (129248)

Display the hostname on the GUI login page (129248)

You can use the following CLI command to display the hostname on the GUI login page

config system global

set gui-display-hostname {disable | enable}

end


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Edit in CLI

Edit in CLI

Available in the following locations among others in the FortiOS GUI you can select the Edit in CLI option to edit an item in the CLI. Editing an item is the CLI is available from the following locations

  • Firewall policy
  • Firewall address
  • Firewall service
  • Firewall schedule
  • Traffic shaper
  • Shaping policy
  • Policy route
  • Static route
  • Managed FortiAP

For example, if you are looking at a Firewall policy on the GUI and select Edit in CLI, the CLI console opens up inside the CLI configuration of the same policy. Some configurations options are only available from the CLI and this control allows you to easily edit specific items without having to find the item in the CLI.

 


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Full screen mode

Full screen mode

You can use the Full Screen Mode button (between the online help button and the admin menu) to toggle full screen mode. In full screen mode the GUI menu and header are hidden the full browser window is taken up by the current GUI page. You can select the Exit Full Screen mode any time to return to the normal GUI arrangement.


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Changing the GUI theme

Changing the GUI theme

You can go to System > Settings > View Settings and select a Theme. You can also use the following CLI command to change the GUI theme. The following command shows how to change the GUI to use the red theme:

config system global set gui-theme red

end

FortiOS 6_4 Red Theme

FortiOS 6_4 Red Theme


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

New options for editing policies from the policy list

New options for editing policies from the policy list

All of the security policy lists (Policy & Objects > IPv4 and so on) have new options for controlling the columns displayed for policies, for editing policies, and for accessing FortiView data or log messages generated by individual policies. You can access these options clicking or right-clicking on the policy list header or on individual policies.

For example, as shown below if you click on the Security Profiles settings for a policy a list of categories and profiles appears on the left of the GUI. The list highlights the security profile options added to the policy. You can select a profile option to add it to a policy. You can deselect an option to remove it from a policy. Similar lists are available to select addresses, services, user groups, devices, and so on.

FortiOS 5_4_0 New GUI Policies

FortiOS 5_4_0 New GUI Policies


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

GUI Refresh

GUI Refresh

The FortGate GUI now uses a new flat GUI design and framework that incorporates a simplified and modern look and feel. In addition to the new look, options have been moved around on the GUI menus:

  • New Dashboard and FortiView top level menus.
  • New top level Network menu includes networking features such as interfaces, DNS, explicit proxy, packet capture, WAN links (WAN load balancing), static routing, policy routing, dynamic routing (RIP, OSPF, BGP) and multicast routing.
  • New top level Monitor menu collects monitoring functions previously distributed throughout the GUI.Some former monitoring features, such as security profile-related monitoring, are now available in FortiView.
  • The GUI menu now has two levels only. For example the menu path for accessing IPv4 firewall policies is Policy & Objects > IPv4.
  • The new administrator’s menu (upper right) provides quick access to change the administrator’s password , backup the FortiGate configuration, access the CLI console and log out.
  • Most individual GUI pages have also been enhanced with new view options and more information.
  • Some functionality has moved around in the GUI. For example, Proxy Options and SSL/SSH Inspection moved from Policy & Objects to Security Profiles.
FortiOS 5_4_0 New GUI

FortiOS 5_4_0 New GUI


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!