---
title: "FortiGate Firewall: Quick Start"
sidebar_label: "Quick Start"
description: "How to get started with FortiGate: connect to the firewall, configure an account, and change the firewall name"
sidebar_position: 1
---

import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';
import { TabItemLabel } from '@selectel/docux/components';
import CreateAdministratorAccount from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/firewalls/fortigate/create-administrator-account.mdx';
import Formbricks from '@theme/MDXComponents/Formbricks';

# FortiGate Firewall: Quick Start

You can work with the FortiGate firewall via the graphical interface or CLI.

1. [Connect to the firewall](#connect-to-firewall).
2. [Change the administrator password](#change-administrator-account-password).
3. Optional: [create a new administrator account](#create-new-administrator-account).
4. Optional: [change the firewall name](#rename-firewall).
5. Optional: [follow the security recommendations](#security-best-practices).

## 1. Connect to the firewall \{#connect-to-firewall}

<Tabs queryString="connect-to-firewall">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    1. Open the following page in your browser:

       ```bash
       https://<ip_address>
       ```

       Specify `<ip_address>` — the firewall IP address that you received in the ticket after [ordering the service](firewalls/order/order-hardware-firewall.mdx).

    2. Log in with the username and password that you received in the ticket after [ordering the service](firewalls/order/order-hardware-firewall.mdx).
  </TabItem>

  <TabItem value="cli">
    <TabItemLabel>
      CLI
    </TabItemLabel>

    1. Open the CLI.

    2. Connect to the firewall via SSH:

       ```bash
       ssh <username>@<ip_address>
       ```

       Specify:

       * `<username>` — the login you received in the ticket after ordering the service;
       * `<ip_address>` — the firewall IP address that you received in the ticket after [ordering the service](firewalls/order/order-hardware-firewall.mdx).

    3. Enter the password that you received in the ticket after [ordering the service](firewalls/order/order-hardware-firewall.mdx).
  </TabItem>
</Tabs>

## 2. Change the administrator password \{#change-administrator-account-password}

<Tabs queryString="change-administrator-account-password">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    1. In the FortiGate control panel, go to **System** → **Administrators**.
    2. Select the administrator login **admin** from the list.
    3. Switch to edit mode.
    4. Click **Change password**.
    5. Enter the old password.
    6. Enter the new password.
    7. Repeat the new password.
    8. Click **OK**.
  </TabItem>

  <TabItem value="cli">
    <TabItemLabel>
      CLI
    </TabItemLabel>

    Change the administrator password:

    ```bash
    config system admin
        edit admin
          set password <new_password>
    end
    ```

    Specify `<new_password>` — a new administrator password.
  </TabItem>
</Tabs>

## 3. Optional: create a new administrator account \{#create-new-administrator-account}

By default, an `admin` account is created in FortiGate with full access to firewall settings. You can create multiple accounts with different access levels to settings.

<Tabs queryString="create-administrator-account">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    1. Go to **System** → **Administrators**.
    2. Click **Create new** → **System administrator**.
    3. Specify the username and password that the administrator will use to connect to the firewall.
    4. Select an administrator profile. A profile is an administrator role with access to firewall settings. By default, the `super_admin` profile with full access to settings is available. You can create a new profile in the **System** → **Admin Profiles** section.
    5. Click **OK**.
  </TabItem>

  <TabItem value="cli">
    <TabItemLabel>
      CLI
    </TabItemLabel>

    Create an administrator account:

    <CreateAdministratorAccount />
  </TabItem>
</Tabs>

## 4. Optional: change the firewall name \{#rename-firewall}

<Tabs queryString="change-fortigate-name">
  <TabItem value="graphic" default>
    <TabItemLabel>
      Graphical interface
    </TabItemLabel>

    1. Go to **System** → **Settings**.
    2. In the **Host name** field, specify a new firewall name.
    3. Click **Apply**.
  </TabItem>

  <TabItem value="cli">
    <TabItemLabel>
      CLI
    </TabItemLabel>

    Change the firewall name:

    ```bash
    config system global
        set hostname <hostname>
    end
    ```

    Specify `<hostname>` — a new firewall name.
  </TabItem>
</Tabs>

## 5. Optional: follow the security recommendations \{#security-best-practices}

You can follow the [Security Recommendations](/firewalls/fortigate/security-best-practices.mdx) when working with FortiGate:

* [use secure access protocols](/firewalls/fortigate/security-best-practices.mdx#use-secure-access-protocols);
* [enable redirect to HTTPS](/firewalls/fortigate/security-best-practices.mdx#enable-redirect-to-https);
* [change default access ports](/firewalls/fortigate/security-best-practices.mdx#change-default-access-ports);
* [configure short login timeouts](/firewalls/fortigate/security-best-practices.mdx#configure-short-login-timeouts);
* [configure login for trusted addresses](/firewalls/fortigate/security-best-practices.mdx#configure-login-for-trusted-addresses);
* [create multiple administrator accounts](/firewalls/fortigate/security-best-practices.mdx#create-several-administrator-accounts);
* [configure account lockout](/firewalls/fortigate/security-best-practices.mdx#configure-account-lockout);
* [rename the administrator account](/firewalls/fortigate/security-best-practices.mdx#rename-administrator-account);
* [disable unused interfaces](/firewalls/fortigate/security-best-practices.mdx#disable-unused-interfaces);
* [disable unused protocols](/firewalls/fortigate/security-best-practices.mdx#disable-unused-protocols).