Skip to main content

TechTalk: Configuring SNMP on a Fortinet 100D firewall

What is a firewall?

A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. A firewall sits between two networks establishes a barrier between a trusted network and an untrusted network, such as the Internet.

As the firewall is a network device, it can be monitored via SNMP.

SNMP on FortiGate 100D

In this article, I will go through the steps to configure a Fortinet FortiGate 100D Firewall for SNMP monitoring

To configure SNMP on a FortiGate device, you need your login credentials to FortiGate’s graphical user interface.

  1. Navigate to System > SNMP.
  2. Click Enable the SNMP Agent.
  3. Optional: Add a description, location, and contact.
  4. Click Apply.
  5. Navigate to Network > Interface > Internal > Edit.
  6. Click the box next to SNMP, then Apply to save the changes.

To enable SNMP v1/2c:
  1. In the SNMP v1/v2 section, select Create New.
  2. Choose a Community Name.
  3. Under Hosts, click Add.
  4. Enter the IP address of your Collector or allow SNMP from specified or any hosts. For example: 10.0.1.250/255.255.255.255 or 0.0.0.0/0.0.0.0.
  5. Select Any as the Interface.
  6. Make sure SNMP queries are assigned to port 161 and set to Enable.
  7. Click OK.
To enable SNMP v3:

  1. In the SNMP v3 section, select Create New.
  2. Set your preferred User Name and Auth level.
  3. Ensure Enable Query is checked and the port is set to 161.
  4. Click OK.
SNMP is now configured on your FortiGate device

Comments

Post a Comment

Popular posts from this blog

Telecoms: ePSK - Multiple Pre-Shared Keys

Originally posted on the Cambium Community Networks Just in case you missed it cnMaestro Version 2.2.1 (Cloud and On-Premise), brings us a great new feature called ePSK. If you’re not familiar with ePSK it’s maybe because Cambium are too modest to toot their own trumpet so I’m going to do it for them. In short ePSK gives each user a unique PSK (pre-shared key) when using WPA2-Personal, for me to explain why this is such a useful feature let me first explain the problem with using a shared PSK across the whole WLAN. When a wireless client connects to an AP it completes a 4-Way handshake, this generates the encryption keys used to encrypt wireless traffic. For the 4-way handshake to work it is a requirement that both the client and AP know the passphrase, however the passphrase is never transmitted over the air thereby making this exchange reasonably secure. But what happens when a 3rd party already knows the passphrase? It means they just need to capture the 4-way handshake to gener...
Post a Comment
Read more

7 Apps You Should Delete Right Now And Why the Law Makes Them Dangerous

  There is a conversation happening in security research circles, government agencies, and regulatory bodies around the world, and most Papua New Guineans are not part of it. It concerns a small group of applications that sit on hundreds of millions of Android and iOS devices, including many in PNG, quietly running in the background, collecting data, and transmitting that data to servers governed by a legal system that has no obligation to protect you. In PNG, where mobile phones are the primary gateway to banking, communication, and identity, this risk is amplified. For many users, a smartphone is not just a device. It is their wallet, their ID, and their connection to essential services. This is not about a theoretical vulnerability or an obscure technical exploit. It is about the intersection of consumer software and national law, specifically the legal architecture that governs what foreign technology companies must do when their government asks for your data. The Legal Foun...
Post a Comment
Read more

Tales of Somare: An old man loses a friend

Originally posted by Lucy Kopana on Facebook 82-year-old Nanong Gideon Ahe placed a hand on his chest and managed to utter through his tears, "em barata dai ya". He wiped his tears and looked down at the photo he had in his hand. It was a laminated picture of him and his schoolmates at the Administrative College in Port Moresy, in 1965.  Lapun Nanong pointed to  where he was in the photo and went on to call his mates by name, and where they were from. Amongst them were Albert Maori Kiki, Jerry Nalau, and Michael Somare to name a few.  These were the founding members of the Bully Beef Club that was formed at the Administrative College. "Mipla olgeta sanap ya, liklik liklik tingting mipla i save tromoi lo taim blo kaikai rais wantem bully beef ya."  While the three and others in the club chose the political path and went on to becoming key figures in PNG politics - Nanong Ahe chose a path in the civil service. He paid tribute to his friend, the late Sir Michael Somare...
Post a Comment
Read more