Fortinet FortiRecorder 400D, Administration Manual

Page: 19 / 169

NVR configuration Page 19 FortiRecorder 2.4.2 Administration Guide
5. Configure these settings:
Retrieve default gateway and DNS from server
will overwrite the existing DNS and default route,
if any.
Setting name Description
Discover cameras
on this port Enable to send multicast camera discovery traffic from this network
interface. For more information, see
“Connecting FortiRecorder to the
cameras” on page 41 .
Access Enable the types of administrative access that you want to permit to
this interface.
Caution: Enable administrative access only on network interfaces
connected to trusted private networks or directly to your management
computer. If possible, enable only secure administrative access
protocols such as HTTPS or SSH. Failure to restrict administrative
access could compromise the security of your FortiRecorder
appliance.
HTTPS Enable to allow secure HTTPS connections to the web UI through this
network interface. To configure the listening port number, see
“Configuring system timeout, ports, and public access” . To upload a
certificate, see “Replacing the default certificate for the web UI” .
PING Enable to allow:
• ICMP type 8 (
ECHO_REQUEST
)
• UDP ports 33434 to 33534
for
ping
and
traceroute
to be received on this network interface.
When it receives an
ECHO_REQUEST
, FortiRecorder will reply with
ICMP type 0 (
ECHO_RESPONSE
).
Note: Disabling PING only prevents FortiRecorder from receiving
ICMP type 8 (
ECHO_REQUEST
) and traceroute-related UDP.
It does not disable FortiRecorder CLI commands such as
execute
ping
or
execute traceroute
that send such traffic.
HTTP Enable to allow HTTP connections to the web UI through this network
interface. To configure the listening port number, see
“Configuring
system timeout, ports, and public access” .
Caution: HTTP connections are not secure, and can be intercepted by
a third party. If possible, enable this option only for network interfaces
connected to a trusted private network, or directly to your
management computer. Failure to restrict administrative access
through this protocol could compromise the security of your
FortiRecorder appliance.
SSH Enable to allow SSH connections to the CLI through this network
interface.