Fortinet Fortigate-5000 series User Manual

System Admin Administrators
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 147
To configure an administrator account
1 Go to System > Admin > Administrators.
2 Select Create New to add an administrator account or select the Edit icon to make
changes to an existing administrator account.
3 In the Administrator field, type a login name for the administrator account.
If you are using RADIUS authentication for this administrator but not using the
wildcard option, the administrator name must match an account on the RADIUS
server.
Administrator Enter the login name for the administrator account.
RADIUS Select to authenticate the administrator using a RADIUS server.
RADIUS authentication for administrators must be configured first. See
“Configuring RADIUS authentication for administrators” on page 144.
User Group If you are using RADIUS authentication, select the administrator user
group that has the appropriate RADIUS server as a member.
Wildcard Select to allow all accounts on the RADIUS server to be administrators.
This is available only if RADIUS is selected.
PKI Select to enable certificate-based authentication for the administrator.
Note: Only one configured administrator can have the PKI option
enabled at all times.
User Group If you are using PKI certificate-based authentication, select the
administrator user group that includes the PKI (peer) users as members
of the User Group.
Password Enter a password for the administrator account. For improved security,
the password should be at least 6 characters long.
If RADIUS is enabled, the FortiGate unit attempts RADIUS authentication
first, and if that fails, it attempts password authentication.
This is not available if Wildcard is selected. Not available when PKI
authentication is selected.
Confirm
Password
Type the password for the administrator account a second time to
confirm that you have typed it correctly.
This is not available if Wildcard is selected. Not available when PKI
authentication is selected.
Trusted Host #1
Trusted Host #2
Trusted Host #3
Optionally, type the trusted host IP address and netmask that
administrator login is restricted to on the FortiGate unit. You can specify
up to three trusted hosts. These addresses all default to 0.0.0.0/0.
Setting trusted hosts for all of your administrators can enhance the
security of your system. For more information, see “Using trusted hosts”
on page 148.
Access Profile Select the access profile for the administrator. The pre-configured
super_admin profile provides full access to the FortiGate unit. You can
also select Create New to create a new access profile. For more
information on access profiles, see “Configuring an access profile” on
page 152.

Fortinet Fortigate-5000 series Specifications

General

Brand	Fortinet
Model	Fortigate-5000 series
Category	Firewall
Language	English