Connecting to FortiWeb’s web UI & CLI

After you deploy FortiWeb-VM for Azure, you use the public IP address displayed in the Azure instance information to access the web UI in a web browser or the CLI using an SSH connection.

To connect to the web UI

1. In a web browser's address field, enter the public IP address displayed in the Azure instance information, and the port number 8080 (HTTP) or 8443(HTTPS), for example: https://13.58.161.100:8443.
   For the load balancer deployment, you need to enter the public IP address of the load balancer, then use port number 40030 or 40031 to access FortiWeb-VM A or B.
   The HTTP access to FortiWeb's GUI will be automatically redirected to HTTPS, so if you enter the HTTP port number (e.g. 8080), it will be redirected to the HTTPS port (e.g. 8443).
2. Log in using the username and password you specified in the Azure virtual machine basic settings (FortiWeb Administrative Username and FortiWeb Password).

To connect to the CLI via serial console

1. Create a diagnostics storage account. Please refer to this article on Azure.
2. Navigate to the FortiWeb VM you just created. Select Serial Console.
3. Enter the username you specified in the Azure virtual machine basic settings (FortiWeb Administrative Username).
4. For password, enter the password you specified in the basic settings (FortiWeb Password).

To connect to the CLI via SSH

These instructions connect to FortiWeb-VM for Azure using PuTTY terminal emulation software.

1. On your management computer, start PuTTY.
2. To ensure that your configuration does not use environment variables that can interfere with the connection, in the Category tree, expand Connection, and then click Data. Remove any environment variables.
3. Click Session, and for Host Name (or IP Address), enter the public IP address of the FortiWeb-VM Azure instance.
   For example, ec2-54-234-142-136.compute-1.amazonaws.com. 0
4. In Port, type 22.
   For the load balancer deployment, you need to enter the public IP address of the load balancer, then use port number 50030 or 50031 to access FortiWeb-VM A or B.
5. For Connection type, select SSH.
6. Select Open.
   The SSH client connects to the FortiWeb appliance.
   The SSH client may display a warning if this is the first time you are connecting to the FortiWeb appliance and its SSH key is not yet recognized by your SSH client, or if you have previously connected to the FortiWeb appliance but it used a different IP address or SSH key.
7. Click Yes to verify the fingerprint and accept the FortiWeb appliance’s SSH key. You cannot log in until you accept the key.
   The CLI displays a login prompt.
8. Enter the username you specified in the Azure virtual machine basic settings (FortiWeb Administrative Username).
9. For password, enter the password you specified in the basic settings (FortiWeb Password).
   
   

If 3 incorrect login or password attempts occur in a row, FortiWeb temporarily blacklists your IP address from the GUI and CLI. This action protects the appliance from brute force login attacks. Wait 1 minute, and then attempt the login again.

Once connected, enter the following:

FortiWeb # config system admin

FortiWeb (admin) # edit admin

FortiWeb (admin) # set password Test@212345

Please enter the new password again: Test@212345

FortiWeb (admin) # end

FortiWeb #

The password for the admin account on Azure should not be empty.

Uploading license

If you choose the BYOL licensing type, upload your license to FortiWeb through System > Status > Status. Refer to Overview > Licensing for how to download license file for Fortinet Support site.