Fortinet FortiWAN, Руководство пользователя

Страница: 106 / 311

System Configurations Remote Assistance
Remote Assistance
Enabling this function allows Fortinet's technical support specialist to enter your system for further troubleshooting
when assistance is needed. FortiWAN allows technical support specialist to access the Web UI and backend system
remotely, so as to assist users promptly upon the occurrence of problems. Remote assistance opens both TCP ports
443 for web UI and 23 for SSH debug.
Note: To enter the backend system via SSH login, a debug patch file is required.
Enable : Click the checkbox to enable Remote Assistance.
Server : Enter the server IP address given by Fortinet's technical support specialist.
Security Code : Displays the security code required for remote logins. This security code is automatically
generated after clicking Apply to complete Remote Assistance settings, and is updated
after every system reboot.
Administration
[Administration] lets you perform administrative tasks, including changing passwords of Administrator and Monitor.
Every FortiWAN is shipped with the same default passwords. For security concerns, it is thus strongly recommended
that the passwords shall be changed.
By default, FortiWAN uses 443 as the Web UI login port. And it allows administrators to change the port, to avoid
possible port conflict caused for virtual server services.
[Update/downgrade] section enables to update or downgrade firmwares once new firmwares are available (from our
website or dealers). Simply click the [Update/Downgrade] button and follow exactly the on-screen instructions.
[Configuration Files] gives you the ability to back up configuration files, by clicking the [Save] button. Or you can click
[Restore] to reload the previous backup files to FortiWAN. System configurations can be recovered from failures via
the backup configuration files.
In [Maintenance], you can restore factory default configurations and reboot FortiWAN. Due to the limitation of HTML
syntax, no hint displays after reboot has been completed. Thus you have to wait about two minutes before navigating
to Web UI in browser.
Administrator and Monitor Password
FortiWAN maintains a common local authentication database for its Web UI, CLI and SSH login (See "
Connecting to
the Web UI and the CLI
"). Accounts for authentication are classified into two groups, Administrator and Monitor, with
different permissions. Accounts belonging to Administrator have the permission to monitor and modify system
parameters via Web UI, CLI and SSH login, while limited operations are allowed (monitor system and change personal
account password via Web UI ONLY) to accounts belonging to Monitor. Configurations applying, system
administrations (managements introduced in this topic), Tunnel Routing Benchmark, CLI access and SSH login are
invalid for Monitor group.
106 FortiWAN Handbook
Fortinet Technologies Inc.