First Login and the Dashboard¶
The FortiGate web GUI is where you'll do 95% of admin work. The first thing every admin does on a new (or factory-reset) device is log in for the first time and orient against the dashboard.
Before You Start¶
- You can reach the FortiGate on its management IP. On a brand-new unit, the default is usually
192.168.1.99on theinternal(ormgmt) port. Plug a laptop into that port and set your laptop to192.168.1.100/24. - Default credentials on most factory units: username
admin, password is blank. Change it immediately on first login — FortiOS will force a change.
Steps¶
- Open a browser to
https://192.168.1.99(or whatever the management IP is). Accept the self-signed cert warning. - Enter
admin/ blank password (or your current credentials). - Set a strong new admin password when prompted. Save it in your password manager now — there's no easy recovery if you lose it.
- Take the dashboard tour if FortiOS offers it. It's worth 30 seconds.
Tour of the Dashboard¶
After login you land on Dashboard → Status. Key widgets to know:
- System Information — model, serial number, hostname, FortiOS version, system time, uptime, license status.
- Licenses — which FortiGuard subscriptions are active (Antivirus, IPS, Web Filtering, etc.). Expired licenses = no signature updates.
- Security Fabric — shows if this FortiGate is part of a Fabric (multi-device setup) and the topology.
- Administrators — who's currently logged in.
- CPU / Memory / Sessions — live performance graphs.
- Top Sources / Top Destinations / Top Applications — traffic summaries.
- Interfaces — link status of each physical port.
You can drag-and-drop widgets and add new ones from the + button.
Verify¶
You can navigate the GUI menu (left side), and System → Administrators shows the admin user with your new password set. Log out and log back in to confirm the new password works.
Common Issues¶
- Can't reach 192.168.1.99. Laptop isn't in the same subnet. Set static IP
192.168.1.100/24on your laptop's NIC. - Cert warning blocks login. FortiOS uses a self-signed cert by default. Click "Advanced" → "Proceed anyway" in your browser. Replace the cert later via Manage Certificates.
- Default credentials don't work. Unit isn't factory-fresh. Do a Factory Reset (requires console access).
- "Account is locked" after a few wrong tries. FortiOS has lockout protection. Wait the timeout (default 60 seconds) or unlock via CLI from a different admin.