STIGQter: STIG Summary: Fortinet FortiGate Firewall Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

The FortiGate firewall must disable or remove unnecessary network services and functions that are not used as part of its role in the architecture.

DISA Rule

SV-234144r611432_rule

Vulnerability Number

V-234144

Group Title

SRG-NET-000131-FW-000025

Rule Version

FNFG-FW-000065

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# config system interface
# edit {interface-name}
# get | grep enable
# get | grep allowaccess
Disable each service in {} that needs to be removed using:
# config system interface
# edit {interface-name}
# set {service} disable
# end

Check Contents

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration system interface
3. Review configuration for unnecessary services.

If unnecessary services are configured, this is a finding.

Vulnerability Number

V-234144

Documentable

False

Rule Version

FNFG-FW-000065

Severity Override Guidance

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration system interface
3. Review configuration for unnecessary services.

If unnecessary services are configured, this is a finding.

Check Content Reference

M

Target Key

5258