Information
Allow only HTTPS access to the GUI and SSH access to the CLI
Rationale:
By only allowing encrypted access, we are making it harder to use 'Man in the Middle' attack to sniff login credentials.
Solution
If HTTP or Telnet is in the allowaccess list, you will have to set that list again with the same elements except for http or telnet
FG1 # config system interface
FG1 (interface) # edit port1
FG1 (port1) # set allowaccess ssh https ping snmp
FG1 (port1) # end
FG1 #
In the web GUI, click on Network -> Interfaces, select the interface and click 'Edit'. In the interface setting page, uncheck HTTP and Telnet in the section 'Administrative Access'.
Default Value:
By default, HTTP and Telnet are not enabled on any interface.