FortiOS

This article is a Draft. Help us to complete it.

Fortigate

Commands

• get systems status

Backdoors

In January 2016 security researchers found a SSH hardcoded password in FortiOS. fixed in FortiOS 4.3.17 and 5.0.8.

Releases

• FortiOS 6.2
• FortiOS 6.0
• FortiOS 5.6
• FortiOS 5.4
• FortiOS 5.2
• FortiOS 5.0.7, release notes (August 2014). Affected by https://www.cvedetails.com/cve/CVE-2016-1909/

• FortiOS 4.x
  • FortiOS 4.3.17

• FortiGate 2.8

See also

• DMZ, Port knocking, Bastion host, Firewall Software: iptables ufw firewalld nftables firewall-cmd ipfw (FreeBSD) PF (OpenBSD), netsh advfirewall, PAN-OS, WAF, pfsense, VyOS, Cisco ASA, DMZ, F5, URL Filtering, port forwarding, macOS application firewall, Windows firewall, Fortigate, ngrok, Network ACL

https://www.cvedetails.com/cve/CVE-2016-1909/

https://arstechnica.com/information-technology/2016/01/et-tu-fortinet-hard-coded-password-raises-new-backdoor-eavesdropping-fears/

https://docs.fortinet.com/document/fortigate/5.0.7/fortios-release-notes