You absolutely MUST harden administrative access on your FortiGate if you want to remain secure and prepared. There are a lot of ways to help reduce the attack surface and make things as secure as possible.

1. Remove Administrative Access from any interface that absolutely is NOT necessary.
2. Remove the default admin account and create non-standard ones
3. Add Trusted Hosts to your administrative accounts
4. Add multi-factor authentication to your admin accounts
5. Utilize Local-In-Policy configurations to shrink your attack surface