How to Reset a FortiGate Firewall to Factory Default Settings

line5

How to Reset Fortigate Firewall
Credits: GoPro

KEEP IN MIND

  • In this tutorial, a FortiGate Firewall is reset to Factory Default Settings.
  • Do note that the device used in this tutorial is not connected to the production environment.
  • PuTTY, open source terminal emulation program is used to connect to the device. From that you can manage or configure a device from the PC.
  • Windows 8 operating system is used for the PC.

TUTORIALS

Connect the cables

Firstly, connect the cables properly between the Console port in the device and PC. Refer this video tutorial available in YouTube. (Although, it is a Cisco device the configuration is same)

Following images show the cables that are used to connect to the console port and PC

image2

image1

Find the COM port first (this is the device manager in Win8.1)

In my case, I had to install the drivers for usb2.0-ser. [Download Drivers at: http://www.winchiphead.com/download/CH341/CH341SER.ZIP]

1 COM port in device manager

Configure the Fortigate Firewall from PuTTY

[Download PuTTY at: http://www.putty.org/ ]

2 putty com3 port

Press Enter

3 terminal

If needed, reboot the device (sometimes needed). Just give a power reset.

4 after reboot

Enter maintainer as the username. For the password bcpb + the serial number of the firewall (letters of the serial number are in UPPERCASE format)

6 enter maintainer and password

enter exec factoryreset and press Y

7 reset or not

8 reseting

CONGRATULATIONS…!!  FortiGate Firewall is restored to the factory defaults configurations. Now you can login through preferred medium. In this case, web browser is used.

Connect to the Fortigate Firewall via web browser

Use following IP address to connect

192.168.1.99

11

Enter the default configurations

Name: admin
password: (keep blank)

forti login screen

Welcome to Fortinet interface

44

Hello Readers,

Welcome and thank y’all for taking time to visit our tech hub. Your input is utmost important to thrive and to be utilized as much needed fuel to keep going forward.

So, what can you do? How can you help?

Do you possess constructive criticism? Thoughtful comments? Derogatory remarks? Contradictory tutorials?

Please do not hesitate to share with us and be part of this wonderful journey. Remember always the adage “knowledge is ammunition”.

Best regards,

Author Tech Encyclopedia 

How to Install System Center Configuration Manager (SCCM) 2012

line5

INTRODUCTION

System Center Configuration Manager (SCCM, also known as ConfigMgr), formerly Systems Management Server (SMS) is a systems management software product developed by Microsoft for managing large groups of computers running Windows NT, Windows Embedded, macOS (OS X), Linux or UNIX, as well as Windows Phone, Symbian, iOS and Android mobile operating systems. Configuration Manager provides remote control, patch management, software distribution, operating system deployment, network access protection and hardware and software inventory. -WIKI

Please Note That,

  • In this scenario the domain controller is running on Server 2012 R2
  • In this tutorial SQL server 2012 is installed locally (If you prefer you can do it on a remote server)
  • SQL server 2012 should be updated to cumulative update 2 or higher to install SCCM

Firstly Create the System Management Container in Active Directory Domain Services

In the Domain controller click on Server Manager –> Tools –> ADSI Edit

2012 AD-2017-06-16-19-40-01

Right Click and select Connect to…

2012 AD-2017-06-16-19-41-55

Keep the default

2012 AD-2017-06-16-19-42-00

Expand Default Naming Context right click CN=System –> New –> Object

2012 AD-2017-06-16-20-30-22

Select Container

2012 AD-2017-06-16-20-32-32

Insert System Management as the value

2012 AD-2017-06-16-20-34-30

Click Finish

2012 AD-2017-06-16-20-34-34

 

Give Permission to the System Management Container

After creating the system management container, we must grant the site server’s computer account the permissions that are required to publish site information to the container. The primary site server computer account must be granted Full Control permissions to the System Management container and all its child objects.

Go to Server Manager –>Tools –> Active Directory Users and Computers –> View — Advanced features

2012 AD-2017-06-16-20-41-25.png

Expand System, right click System Management and click on Delegate Control.

2012 AD-2017-06-16-20-43-15

Click Next

2012 AD-2017-06-16-20-43-21

In the Delegation of Control Wizard dialog box Click on Add

2012 AD-2017-06-16-20-47-27

In the Select Users,Computers or Groups dialog box click on Object Types

2012 AD-2017-06-16-20-47-32

Check for Computers as object types and click on OK

2012 AD-2017-06-16-20-47-38

Insert the name of the primary site server computer account and click on OK.

2012 AD-2017-06-16-20-47-46

Primary site server computer account name should be included in the Delegation of Control Wizard dialog box. Click Next

2012 AD-2017-06-16-20-48-15

In the next window click on Create a custom task to delegate and click Next

2012 AD-2017-06-16-20-58-24.png

Select This folder, existing objects in this folder and creation of new objects in this folder and click Next

2012 AD-2017-06-16-20-59-34.png

Provide Full permission and Click Next

2012 AD-2017-06-16-21-02-28.png

Finish

2012 AD-2017-06-16-21-02-32.png

 

Extend the Active Directory schema for Configuration Manager

Download a copy of Microsoft System Center 2012 R2 Configuration Manager and Endpoint Protection.

https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-2012-r2-configuration-manager-and-endpoint-protection

Find the file extadsch.exe and run as administrator

2012 AD-2017-06-17-04-34-31

Open c:\ExtADSch.txt and verify schema is extended or not. You will notice a line stating “Successfully extended the Active Directory Schema”.

2012 AD-2017-06-17-04-34-55

 

Install Pre-requisits For SCCM 2012 R2 |Microsoft System Center 2012 R2 Configuration Manager

Run the PowerShell command

Add-WindowsFeature Web-Windows-Auth,Web-ISAPI-Ext,Web-Metabase,Web-WMI,BITS,RDC,NET-Framework-Features,Web-Asp-Net,Web-Asp-Net45,NET-HTTP-Activation,NET-Non-HTTP-Activ,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Redirect,Web-App-Dev,Web-Net-Ext,Web-Net-Ext45,Web-ISAPI-Filter,Web-Health,Web-Http-Logging,Web-Log-Libraries,Web-Request-Monitor,Web-HTTP-Tracing,Web-Security,Web-Filtering,Web-Performance,Web-Stat-Compression,Web-Mgmt-Console,Web-Scripting-Tools,Web-Mgmt-Compat -Restart

2012 AD-2017-06-17-05-40-24

Execute following

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe -r

2012 AD-2017-06-17-05-41-05

Install Windows Server Update Services

Install-WindowsFeature -Name UpdateServices-Services,UpdateServices-DB -IncludeManagementTools

2012 AD-2017-06-17-05-41-07.png

Change the locations accordingly

cd “c:\Program Files\Update Services\Tools”

./wsusutil.exe postinstall CONTENT_DIR=C:\WSUS sql_instance_name=SQLSERVERNAME

2012 AD-2017-06-17-21-05-14

[sql_instance_name=S2012 in this case]

2012 AD-2017-06-17-21-05-43

Install User State Migration Tool (USMT)

Download: https://www.microsoft.com/en-us/download/confirmation.aspx?id=39982

Run as administrator

2012 AD-2017-06-17-06-11-26

Specify Location

2012 AD-2017-06-17-06-12-37

Accept License Agreement

2012 AD-2017-06-17-06-12-46

Select the features to install. Make sure User State Migration Tool (USMT) is selected

2012 AD-2017-06-17-06-13-17

Wait till the Installation finishes

2012 AD-2017-06-17-06-16-45.png

2012 AD-2017-06-17-07-10-54

Install and Configure SQL Server

  • In this tutorial SQL server 2012 is installed locally.

Run the Stand-alone Installation

2012 AD-2017-06-17-07-53-15.png

Press OK

2012 AD-2017-06-17-07-55-34.png

Accept the License Terms

2012 AD-2017-06-17-07-57-02

Update the product

2012 AD-2017-06-17-07-57-56

2012 AD-2017-06-17-08-31-36

2012 AD-2017-06-17-08-31-49

On the Feature Selection window, select

  • Database Engine Services
  • Reporting Services-Native
  • Management Tools – Complete.

2012 AD-2017-06-17-08-33-15

Press Next

2012 AD-2017-06-17-08-34-09

Default Instance is selected

2012 AD-2017-06-17-08-34-27

Press Next

2012 AD-2017-06-17-08-35-05

New Account is created Teche\sccmacc1

2012 AD-2017-06-17-08-50-54

Windows Authentication mode is selected

2012 AD-2017-06-17-08-53-25

Add user Teche\sccmacc1

2012 AD-2017-06-17-08-54-20

Install

2012 AD-2017-06-17-08-55-01

Close

2012 AD-2017-06-17-10-34-16.png

 

Install Microsoft System Center 2012 R2 Configuration Manager

Run splash.hta file in the installation folder

2012 AD-2017-06-18-04-11-37

IF it is offline installation run  setupdl.exe at SMSSETUP\BIN\X64\setupdl.exe instead to download the files.

2012 AD-2017-06-18-02-22-33

2012 AD-2017-06-18-02-24-38

Next

2012 AD-2017-06-18-05-02-39

Select Install a Configuration Manager primary site

2012 AD-2017-06-18-05-03-12

In this scenario Evaluation edition is installed

2012 AD-2017-06-18-05-03-43

Accept the License terms

2012 AD-2017-06-18-05-03-49

Accept Licenses for prerequisites

2012 AD-2017-06-18-05-04-13

Since I have downloaded the files previously, path for the downloaded folder is given

2012 AD-2017-06-18-05-06-10

Select the appropriate Language

2012 AD-2017-06-18-05-11-58

2012 AD-2017-06-18-05-12-50

Insert the Site code and Site name

2012 AD-2017-06-18-05-14-25

Install the primary site as a Stand-alone Site

2012 AD-2017-06-18-06-19-26.png

select YES to support to expand this site into hierarchy later

2012 AD-2017-06-18-05-14-59

Include FQDN of the Database Server

2012 AD-2017-06-18-05-15-57

Include the path to SQL Server data and log files

2012 AD-2017-06-18-07-08-07

Insert SMS provider settings

2012 AD-2017-06-18-07-08-55

Client Computer Communication Settings

2012 AD-2017-06-18-07-09-17

Press Yes to continue with the settings

2012 AD-2017-06-18-07-09-27

Site system Roles should be selected for installation

2012 AD-2017-06-18-07-09-40

If you want you can join the Customer Experience Program

2012 AD-2017-06-18-07-09-52

Review the Settings Summary

2012 AD-2017-06-18-07-10-05

After reviewing Prerequisites press Begin Install

2012 AD-2017-06-18-07-15-04

2012 AD-2017-06-18-07-20-00

Close the system center configuration manager wizard

2012 AD-2017-06-18-09-38-48.png

 

ERRORS

Update the Microsoft SQL server 2012

ERROR database update.png

Open System Center Configuration Manager

2012 AD-2017-06-18-11-31-00

2012 AD-2017-06-18-11-32-39

CONGRATULATIONS! YOU HAVE INSTALLED SCCM 2012

What do you possess?

Constructive criticism? Thoughtful comment? Derogatory remarks? Contradictory tutorials?

Please don’t be shy to contribute and be part of this wonderful journey. Remember always the adage “knowledge is ammunition”.