Description | The FortiGate does not answer ping requests. |
Components |
|
Steps or Commands | Issue:PING is enabled as Administrative Access on the interface, yet the interface does not reply to Ping requests. Cause:Trusted hosts are defined for Admin accounts. Solution:Trusted hosts also apply to ICMP echo requests. To have the FortiGate responding to ping requests whatever the originator, add an additional restrictive Admin account with no trusted hosts associated with it. For example, default 0.0.0.0/0.0.0.0. Give the new Admin account a complex name, set it with an Access Profile that has no privileges, and use a complex password. Note: From version 6.0.x onwards, ping service on management interfaces are not included within the scope of trusted hosts. This means that you will be able to ping the interface from an IP that is not included within trusted hosts. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.