Configuring system settings

Before configuring system settings, enable the certificates feature.

To enable certificates:

1. Go to System > Feature Visibility.
2. Under Additional Features, enable Certificates, and click Apply.

To configure system settings:

1. Go to System > Settings.
2. Set Time zone to reflect the location of the FortiGate.
3. Change HTTPS port from 443 to an uncommon port number, such as, 9443.
4. For HTTPS server certificate, use automated certificate enrollment to leverage the ACME protocol with the Let’s Encrypt service.
   1. Use the dropdown next to HTTPS server certificate to select +Create.
   2. Select Use Let’s Encrypt.
   3. Provide an appropriate name for the certificate.
   4. Set Domain to the public FQDN of the FortiGate.
   5. Set Email to a valid email address.
   6. Select Create.

   For further details on the process, see FortiOS 7.0 Administration Guide > ACME certificate support .

5. Change the SSH port from 22 to an uncommon port number, such as, 9922.
6. Ensure the Idle timeout is under 10 minutes. Five (5) minutes is recommended.

   A setting of 10 minutes or less minimizes the amount of time administrators can remain logged in when away from their computer.

7. Enable a password policy for admin with the minimum following values:

   Password scope	Admin
   Minimum length	8
   Minimum number of new characters	0
   Character requirements	Enable
   Upper case	1
   Lower case	1
   Number (0-9)	1
   Special	1
   Allow password reuse	Disable
   Password expiration	Disable

8. Disable VLAN switch mode.
9. Under Start Up Settings, disable Detect configuration.
10. Disable Detect firmware.
11. Click Apply.