System administration Administrators options
FortiGate-100A Administration Guide 01-28007-0068-20041203 111
3Type a login name for the administrator account.
4Type and confirm a password for the administrator account.
5Optionally type a Trusted Host IP address and netmask from which the administrator
can log into the web-based manager.
6Select the access profile for the administrator.
7Select OK.
Figure 41:Change an administrator password
To change an administrator password
1Go to System > Admin > Administrators.
2Select the Change Password icon next to the administrator account you want to
change the password for.
3Enter and confirm the new password.
4Select OK.

Using trusted hosts

Setting trusted hosts for all of your administrators increases the security of your
network by further restricting administrative access. In addition to knowing the
password, an administrator must connect only through the subnet or subnets you
specify. You can even restrict an administrator to a single IP address if you define only
one trusted host IP address with a netmask of 255.255.255.255.
When you set trusted hosts for all administrators, the FortiGate unit does not respond
to administrative access attempts from any other hosts. This provides the highest
security. If you leave even one administrator unrestricted, the unit accepts
administrative access attempts on any interface that has administrative access
enabled, potentially exposing the unit to attempts to gain unauthorized access.
The trusted hosts you define apply both to the web-based manager and to the CLI
when accessed through telnet or SSH. CLI access through the console connector is
not affected.
Access profiles
Go to System > Admin > Access Profile to add access profiles for FortiGate
administrators. Each administrator account belongs to an access profile. You can
create access profiles that deny access to or allow read only, write only, or both read
and write access to FortiGate features.