Technical Tip: Administrative access - disable Telnet permanently

[ajoe]

Description
This article describes the option to disable Telnet access to FortiGate permanently.

Solution
In FortiOS 6.2.0, option has been added that completely disables Telnet, removing the GUI options per interface and disabling the Telnet daemon.

When Telnet is disabled, the Telnet port cannot be configured and access cannot be enabled on interfaces.

To disable Telnet.

# config system global
    set admin-telnet disable
end

When disabled, the Telnet port is removed from the System -> Settings , and Telnet is no longer an administrative access option on the Network -> Interfaces .

To enable telnet execute below command.

# config system global
    set admin-telnet enable
    set admin-telnet-port <port>
end