Checklist

Fortigate Hardening Checklist

This comprehensive resource provides prescriptive guidance for establishing a secure configuration posture for Fortinet FortiGate devices running FortiOS version 6.4 or above. Designed specifically for security administrators, IT auditors, and platform deployment personnel , this checklist maps essential technical configurations to CIS Critical Security Controls to help you seamlessly integrate these best practices into your organization's broader cyber hygiene program.

117 pages 20 min read

What You'll Learn

Network and System Settings: Includes configurations for DNS, administrative access, password policies, SNMP, and time synchronization
High Availability & Policies: Covers secure HA setups, reserved management interfaces, and best practices for creating and reviewing firewall policies.
Security Profiles: Details best practices for Intrusion Prevention Systems (IPS), Antivirus push updates, and Botnet C&C domain blocking.
Security Fabric & VPN: Outlines automation triggers, fabric connectors, and securing SSL VPN portals with limited TLS versions and trusted certificates.
Logging & Reporting: Ensures centralized, encrypted event logging to FortiAnalyzer or FortiManager.