# Scanning Fortigate Firewall

**URL:** <https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800>\
**Category:** InsightVM\
**Created:** [July 20, 2022, 5:37am UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800 "2022-07-20T05:37:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![kchan1](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/k/e47774/32.png) [@kchan1](https://discuss.rapid7.com/u/kchan1)\
**Post date:** [July 20, 2022, 5:37am UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/1 "2022-07-20T05:37:46Z")

</div>

Hi Guys,

I have a fortigate Firewall, let’s assume this is the IP for the FW  
[https://10.68.1.1:10443](https://10.68.1.1:10443)  
I added HTTP web application but still not able scan using credentials and I can’t HTTPS option in the authentication page  
How can I scan my FW with credentials and what are the recommended policies for network equipment?

Thank you

---

<div class="post-metadata">

**Author:** ![john\_hartman](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/john_hartman/32/1255_2.png) [@john\_hartman](https://discuss.rapid7.com/u/john_hartman)\
**Post date:** [July 26, 2022, 2:45pm UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/2 "2022-07-26T14:45:15Z")

</div>

Typically speaking I think people have the most success with SSH credentials when it comes to network equipment.

---

<div class="post-metadata">

**Author:** ![akapaganty](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/a/dfb087/32.png) [@akapaganty](https://discuss.rapid7.com/u/akapaganty)\
**Post date:** [April 20, 2023, 5:24pm UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/3 "2023-04-20T17:24:49Z")

</div>

Scanning is failing thru SSH and SNMP as well…Rapid7 Team could u please help with the best practice guide.

---

<div class="post-metadata">

**Author:** ![john\_hartman](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/john_hartman/32/1255_2.png) [@john\_hartman](https://discuss.rapid7.com/u/john_hartman)\
**Post date:** [April 24, 2023, 2:33pm UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/4 "2023-04-24T14:33:13Z")

</div>

For your specific request you should open a support ticket. Without a lot of accompanying info it’s hard to understand and answer your questions here in the discuss forums.

---

<div class="post-metadata">

**Author:** ![akapaganty](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/a/dfb087/32.png) [@akapaganty](https://discuss.rapid7.com/u/akapaganty)\
**Post date:** [April 24, 2023, 4:40pm UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/5 "2023-04-24T16:40:24Z")

</div>

Thanks John for Reply… Yes have created support ticket and waiting for their help on this 🙂

---

<div class="post-metadata">

**Author:** ![ntorres2](https://discuss.rapid7.com/letter_avatar_proxy/v4/letter/n/b5a626/32.png) [@ntorres2](https://discuss.rapid7.com/u/ntorres2)\
**Post date:** [December 2, 2025, 9:08pm UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/6 "2025-12-02T21:08:52Z")

</div>

Need to know what access or role we need to have for FortiGates, FortiSwitches, and FortiManager appliances.

I know for Cisco devices, you have a list of devices and the commands that need to be run. Do we have anything like that for FortiNet Devices?

---

<div class="post-metadata">

**Author:** ![mmur\_gt4e](https://discuss.rapid7.com/user_avatar/discuss.rapid7.com/mmur_gt4e/32/1985_2.png) [@mmur\_gt4e](https://discuss.rapid7.com/u/mmur_gt4e)\
**Post date:** [December 26, 2025, 1:21pm UTC](https://discuss.rapid7.com/t/scanning-fortigate-firewall/13800/7 "2025-12-26T13:21:21Z")

</div>

Almost 2026, any news about this?