Fortinet FortiGate 100 - Installation & Configuration Guide Manual

To Next Page

FortiGate 100

Installation and

Configuration Guide

INTERNAL

EXTERNAL

DMZ

POWER

STATUS

FortiGate User Manual Volume 1

Version 2.50 MR2

18 August 2003

Main Page

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction13
- Antivirus Protection13
- Web Content Filtering14
- Email Filtering14
- Firewall15
  - Nat/Route Mode15
  - Transparent Mode16
- Network Intrusion Detection16
- Vpn16
- Secure Installation, Configuration, and Management17
- What's New in Version 2.5019
- About this Document22
- Document Conventions23
- Fortinet Documentation24
  - Comments on Fortinet Technical Documentation24
- Customer Service and Technical Support25
Getting Started27
- Package Contents28
- Mounting28
- Powering on29
- Connecting to the Web-Based Manager30
- Connecting to the Command Line Interface (CLI)31
- Factory Default Fortigate Configuration Settings31
- Planning Your Fortigate Configuration37
- Fortigate Model Maximum Values Matrix40
- Next Steps41
Nat/Route Mode Installation43
- Preparing to Configure Nat/Route Mode43
  - Advanced Nat/Route Mode Settings44
  - DMZ Interface44
- Using the Setup Wizard45
  - Starting the Setup Wizard45
  - Reconnecting to the Web-Based Manager45
- Using the Command Line Interface45
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode45
- Connecting the Fortigate Unit to Your Networks47
- Configuring Your Networks48
- Completing the Configuration48
- Configuration Example: Multiple Connections to the Internet49
Transparent Mode Installation57
- Preparing to Configure Transparent Mode57
- Using the Setup Wizard58
- Using the Command Line Interface59
- Connecting the Fortigate Unit to Your Networks60
- Completing the Configuration61
- Transparent Mode Configuration Examples62
System Status69
- Changing the Fortigate Host Name70
- Changing the Fortigate Firmware70
- Manual Virus Definition Updates82
- Manual Attack Definition Updates83
- Displaying the Fortigate Serial Number83
- Displaying the Fortigate up Time83
- Backing up System Settings83
- Restoring System Settings84
- Restoring System Settings to Factory Defaults84
- Changing to Transparent Mode85
- Changing to Nat/Route Mode85
- Restarting the Fortigate Unit85
- Shutting down the Fortigate Unit86
- System Status86
- Session List89
Virus and Attack Definitions Updates and Registration91
- Updating Antivirus and Attack Definitions91
- Registering Fortigate Units101
  - Forticare Service Contracts101
  - Registering the Fortigate Unit102
- Updating Registration Information104
- Registering a Fortigate Unit after an RMA107
Network Configuration109
- Configuring Interfaces109
- Adding DNS Server IP Addresses115
- Configuring Routing115
- Providing DHCP Services to Your Internal Network119
RIP Configuration121
- RIP Settings122
- Configuring RIP for Fortigate Interfaces124
- Adding RIP Neighbors125
- Adding RIP Filters126
System Configuration129
- Setting System Date and Time129
- Changing Web-Based Manager Options130
- Adding and Editing Administrator Accounts132
  - Adding New Administrator Accounts132
  - Editing Administrator Accounts133
- Configuring SNMP134
- Customizing Replacement Messages136
  - Customizing Replacement Messages137
  - Customizing Alert Emails138
Firewall Configuration141
- Default Firewall Configuration142
- Adding Firewall Policies144
  - Firewall Policy Options145
  - Traffic Shaping146
- Configuring Policy Lists149
- Addresses150
- Services153
- Schedules157
- Virtual Ips160
- IP Pools164
- IP/MAC Binding166
- Content Profiles169
Users and Authentication173
- Setting Authentication Timeout174
- Adding User Names and Configuring Authentication174
  - Deleting User Names from the Internal Database175
- Configuring RADIUS Support176
  - Adding RADIUS Servers176
  - Deleting RADIUS Servers176
- Configuring LDAP Support177
  - Adding LDAP Servers177
  - Deleting LDAP Servers178
- Configuring User Groups179
  - Adding User Groups179
  - Deleting User Groups180
Ipsec VPN181
- Key Management182
  - Manual Keys182
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates182
- Manual Key Ipsec Vpns183
  - General Configuration Steps for a Manual Key VPN183
  - Adding a Manual Key VPN Tunnel183
- Autoike Ipsec Vpns185
- Managing Digital Certificates191
  - Obtaining a Signed Local Certificate191
  - Obtaining a CA Certificate195
- Configuring Encrypt Policies196
- Ipsec VPN Concentrators199
- Redundant Ipsec Vpns203
  - Configuring Redundant Ipsec VPN203
- Monitoring and Troubleshooting Vpns205
PPTP and L2TP VPN207
- Configuring PPTP207
- Configuring L2TP213
Network Intrusion Detection System (NIDS)221
- Detecting Attacks221
- Preventing Attacks225
- Logging Attacks228
  - Logging Attack Messages to the Attack Log228
  - Reducing the Number of NIDS Attack Log and Email Messages229
Antivirus Protection231
- General Configuration Steps231
- Antivirus Scanning232
- File Blocking233
  - Blocking Files in Firewall Traffic233
  - Adding File Patterns to Block233
- Blocking Oversized Files and Emails234
  - Configuring Limits for Oversized Files and Email234
- Exempting Fragmented Email from Blocking234
- Viewing the Virus List234
Web Filtering235
- General Configuration Steps235
- Content Blocking236
  - Adding Words and Phrases to the Banned Word List236
- URL Blocking237
  - Using the Fortigate Web Filter237
  - Using the Cerberian Web Filter240
    - Configuring Cerberian Web Filter241
    - Enabling Cerberian Url Filtering241
- Script Filtering242
  - Enabling the Script Filter242
  - Selecting Script Filter Options242
- Exempt URL List243
  - Adding Urls to the Exempt URL List243
Email Filter245
- General Configuration Steps245
- Email Banned Word List246
  - Adding Words and Phrases to the Banned Word List246
- Email Block List247
  - Adding Address Patterns to the Email Block List247
- Email Exempt List247
  - Adding Address Patterns to the Email Exempt List248
- Adding a Subject Tag248
Logging and Reporting249
- Recording Logs249
- Filtering Log Messages251
- Configuring Traffic Logging253
- Viewing Logs Saved to Memory255
  - Viewing Logs255
  - Searching Logs256
- Configuring Alert Email256
Glossary259
Index263

Fortinet FortiGate 100 - Installation & Configuration Guide Manual

Table of Contents

Other manuals for Fortinet FortiGate 100

Related product manuals