Home
Fortinet
Gateway
FortiGate 100
Fortinet FortiGate 100 Installation & Configuration Guide
5
of 1
of 1 rating
272 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
172
Fortinet Inc.
Adding a content profile to a
policy
Firewall configurati
on
3
Select New
to add a new policy
, or
choos
e a policy and select Edit
.
4
Select Anti-Virus & Web filter
.
5
Select a content profile.
6
Configure the remaining
policy settings if required.
7
Select
OK.
8
Repeat this procedure for any policies for which to enable network protection.
171
173
Table of Contents
Default Chapter
1
Configuration Guide
1
Table of Contents
3
Introduction
13
Antivirus Protection
13
Web Content Filtering
14
Email Filtering
14
Firewall
15
Nat/Route Mode
15
Transparent Mode
16
Network Intrusion Detection
16
Vpn
16
Secure Installation, Configuration, and Management
17
Web-Based Manager
17
Command Line Interface
18
Logging and Reporting
19
What's New in Version 2.50
19
System Administration
19
Firewall
20
Users and Authentication
20
Vpn
20
Nids
21
Antivirus
21
Web Filter
21
Email Filter
21
Logging and Reporting
21
About this Document
22
Document Conventions
23
Fortinet Documentation
24
Comments on Fortinet Technical Documentation
24
Customer Service and Technical Support
25
Getting Started
27
Package Contents
28
Mounting
28
Powering on
29
Connecting to the Web-Based Manager
30
Connecting to the Command Line Interface (CLI)
31
Factory Default Fortigate Configuration Settings
31
Factory Default Nat/Route Mode Network Configuration
32
Factory Default Transparent Mode Network Configuration
33
Factory Default Firewall Configuration
33
Factory Default Content Profiles
34
Planning Your Fortigate Configuration
37
Nat/Route Mode
37
Nat/Route Mode with Multiple External Network Connections
38
Transparent Mode
38
Configuration Options
39
Fortigate Model Maximum Values Matrix
40
Next Steps
41
Nat/Route Mode Installation
43
Preparing to Configure Nat/Route Mode
43
Advanced Nat/Route Mode Settings
44
DMZ Interface
44
Using the Setup Wizard
45
Starting the Setup Wizard
45
Reconnecting to the Web-Based Manager
45
Using the Command Line Interface
45
Configuring the Fortigate Unit to Operate in Nat/Route Mode
45
Connecting the Fortigate Unit to Your Networks
47
Configuring Your Networks
48
Completing the Configuration
48
Configuring the DMZ Interface
48
Setting the Date and Time
48
Enabling Antivirus Protection
49
Registering Your Fortigate
49
Configuring Virus and Attack Definition Updates
49
Configuration Example: Multiple Connections to the Internet
49
Configuring Ping Servers
51
Destination Based Routing Examples
51
Load Sharing
52
Policy Routing Examples
54
Firewall Policy Example
55
Transparent Mode Installation
57
Preparing to Configure Transparent Mode
57
Using the Setup Wizard
58
Changing to Transparent Mode
58
Starting the Setup Wizard
58
Reconnecting to the Web-Based Manager
58
Using the Command Line Interface
59
Changing to Transparent Mode
59
Configuring the Transparent Mode Management IP Address
59
Configure the Transparent Mode Default Gateway
59
Connecting the Fortigate Unit to Your Networks
60
Completing the Configuration
61
Setting the Date and Time
61
Enabling Antivirus Protection
61
Registering Your Fortigate
61
Configuring Virus and Attack Definition Updates
61
Transparent Mode Configuration Examples
62
Default Routes and Static Routes
62
Example Default Route to an External Network
63
Example Static Route to an External Destination
64
Example Static Route to an Internal Destination
67
System Status
69
Changing the Fortigate Host Name
70
Changing the Fortigate Firmware
70
Upgrade to a New Firmware Version
71
Revert to a Previous Firmware Version
72
Install a Firmware Image from a System Reboot Using the CLI
75
Test a New Firmware Image before Installing It
77
Installing and Using a Backup Firmware Image
79
Manual Virus Definition Updates
82
Manual Attack Definition Updates
83
Displaying the Fortigate Serial Number
83
Displaying the Fortigate up Time
83
Backing up System Settings
83
Restoring System Settings
84
Restoring System Settings to Factory Defaults
84
Changing to Transparent Mode
85
Changing to Nat/Route Mode
85
Restarting the Fortigate Unit
85
Shutting down the Fortigate Unit
86
System Status
86
Viewing CPU and Memory Status
86
Viewing Sessions and Network Status
87
Viewing Virus and Intrusions Status
88
Session List
89
Virus and Attack Definitions Updates and Registration
91
Updating Antivirus and Attack Definitions
91
Connecting to the Fortiresponse Distribution Network
92
Configuring Scheduled Updates
93
Configuring Update Logging
94
Adding an Override Server
95
Manually Updating Antivirus and Attack Definitions
95
Configuring Push Updates
95
Push Updates through a NAT Device
96
Scheduled Updates through a Proxy Server
100
Registering Fortigate Units
101
Forticare Service Contracts
101
Registering the Fortigate Unit
102
Updating Registration Information
104
Recovering a Lost Fortinet Support Password
104
Viewing the List of Registered Fortigate Units
104
Registering a New Fortigate Unit
105
Adding or Changing a Forticare Support Contract Number
105
Changing Your Fortinet Support Password
106
Changing Your Contact Information or Security Question
106
Downloading Virus and Attack Definitions Updates
106
Registering a Fortigate Unit after an RMA
107
Network Configuration
109
Configuring Interfaces
109
Viewing the Interface List
110
Bringing up an Interface
110
Changing an Interface Static IP Address
110
Adding a Secondary IP Address to an Interface
110
Adding a Ping Server to an Interface
111
Controlling Management Access to an Interface
111
Configuring Traffic Logging for Connections to an Interface
112
Configuring the External Interface with a Static IP Address
112
Configuring the External Interface for DHCP
112
Configuring the External Interface for Pppoe
113
Changing the External Interface MTU Size to Improve Network Performance
113
Configuring the Management Interface (Transparent Mode)
114
Adding DNS Server IP Addresses
115
Configuring Routing
115
Adding a Default Route
116
Adding Destination-Based Routes to the Routing Table
116
Adding Routes in Transparent Mode
117
Configuring the Routing Table
118
Policy Routing
118
Providing DHCP Services to Your Internal Network
119
RIP Configuration
121
RIP Settings
122
Configuring RIP for Fortigate Interfaces
124
Adding RIP Neighbors
125
Adding RIP Filters
126
Adding a Single RIP Filter
126
Adding a RIP Filter List
127
Adding a Neighbors Filter
128
Adding a Routes Filter
128
System Configuration
129
Setting System Date and Time
129
Changing Web-Based Manager Options
130
Adding and Editing Administrator Accounts
132
Adding New Administrator Accounts
132
Editing Administrator Accounts
133
Configuring SNMP
134
Configuring the Fortigate Unit for SNMP Monitoring
134
Configuring Fortigate SNMP Support
134
Fortigate Mibs
135
Fortigate Traps
136
Customizing Replacement Messages
136
Customizing Replacement Messages
137
Customizing Alert Emails
138
Firewall Configuration
141
Default Firewall Configuration
142
Addresses
142
Services
143
Schedules
143
Content Profiles
143
Adding Firewall Policies
144
Firewall Policy Options
145
Traffic Shaping
146
Configuring Policy Lists
149
Policy Matching in Detail
149
Changing the Order of Policies in a Policy List
149
Enabling and Disabling Policies
150
Addresses
150
Adding Addresses
151
Editing Addresses
152
Deleting Addresses
152
Organizing Addresses into Address Groups
152
Services
153
Predefined Services
153
Providing Access to Custom Services
156
Grouping Services
156
Schedules
157
Creating One-Time Schedules
158
Creating Recurring Schedules
158
Adding a Schedule to a Policy
159
Virtual Ips
160
Adding Static NAT Virtual Ips
160
Adding Port Forwarding Virtual Ips
161
Adding Policies with Virtual Ips
163
IP Pools
164
Adding an IP Pool
164
IP Pools for Firewall Policies that Use Fixed Ports
165
IP Pools and Dynamic NAT
165
IP/MAC Binding
166
Configuring IP/MAC Binding for Packets Going through the Firewall
166
Configuring IP/MAC Binding for Packets Going to the Firewall
167
Adding IP/MAC Addresses
167
Viewing the Dynamic IP/MAC List
168
Enabling IP/MAC Binding
168
Content Profiles
169
Default Content Profiles
170
Adding a Content Profile
170
Adding a Content Profile to a Policy
171
Users and Authentication
173
Setting Authentication Timeout
174
Adding User Names and Configuring Authentication
174
Deleting User Names from the Internal Database
175
Configuring RADIUS Support
176
Adding RADIUS Servers
176
Deleting RADIUS Servers
176
Configuring LDAP Support
177
Adding LDAP Servers
177
Deleting LDAP Servers
178
Configuring User Groups
179
Adding User Groups
179
Deleting User Groups
180
Ipsec VPN
181
Key Management
182
Manual Keys
182
Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates
182
Manual Key Ipsec Vpns
183
General Configuration Steps for a Manual Key VPN
183
Adding a Manual Key VPN Tunnel
183
Autoike Ipsec Vpns
185
General Configuration Steps for an Autoike VPN
185
Adding a Phase 1 Configuration for an Autoike VPN
185
Adding a Phase 2 Configuration for an Autoike VPN
189
Managing Digital Certificates
191
Obtaining a Signed Local Certificate
191
Obtaining a CA Certificate
195
Configuring Encrypt Policies
196
Adding a Source Address
197
Adding a Destination Address
197
Adding an Encrypt Policy
197
Ipsec VPN Concentrators
199
VPN Concentrator (Hub) General Configuration Steps
199
Adding a VPN Concentrator
201
VPN Spoke General Configuration Steps
202
Redundant Ipsec Vpns
203
Configuring Redundant Ipsec VPN
203
Monitoring and Troubleshooting Vpns
205
Viewing VPN Tunnel Status
205
Viewing Dialup VPN Connection Status
205
Testing a VPN
206
PPTP and L2TP VPN
207
Configuring PPTP
207
Configuring the Fortigate Unit as a PPTP Gateway
208
Configuring a Windows 98 Client for PPTP
210
Configuring a Windows 2000 Client for PPTP
211
Configuring a Windows XP Client for PPTP
212
Configuring L2TP
213
Configuring the Fortigate Unit as a L2TP Gateway
214
Configuring a Windows 2000 Client for L2TP
217
Configuring a Windows XP Client for L2TP
218
Network Intrusion Detection System (NIDS)
221
Detecting Attacks
221
Selecting the Interfaces to Monitor
222
Disabling the NIDS
222
Configuring Checksum Verification
222
Viewing the Signature List
223
Viewing Attack Descriptions
223
Enabling and Disabling NIDS Attack Signatures
224
Adding User-Defined Signatures
224
Preventing Attacks
225
Enabling NIDS Attack Prevention
225
Enabling NIDS Attack Prevention Signatures
226
Setting Signature Threshold Values
226
Configuring Synflood Signature Values
228
Logging Attacks
228
Logging Attack Messages to the Attack Log
228
Reducing the Number of NIDS Attack Log and Email Messages
229
Antivirus Protection
231
General Configuration Steps
231
Antivirus Scanning
232
File Blocking
233
Blocking Files in Firewall Traffic
233
Adding File Patterns to Block
233
Blocking Oversized Files and Emails
234
Configuring Limits for Oversized Files and Email
234
Exempting Fragmented Email from Blocking
234
Viewing the Virus List
234
Web Filtering
235
General Configuration Steps
235
Content Blocking
236
Adding Words and Phrases to the Banned Word List
236
URL Blocking
237
Using the Fortigate Web Filter
237
Clearing the Url Block List
238
Downloading the Url Block List
239
Uploading a Url Block List
239
Using the Cerberian Web Filter
240
Configuring Cerberian Web Filter
241
Enabling Cerberian Url Filtering
241
Script Filtering
242
Enabling the Script Filter
242
Selecting Script Filter Options
242
Exempt URL List
243
Adding Urls to the Exempt URL List
243
Email Filter
245
General Configuration Steps
245
Email Banned Word List
246
Adding Words and Phrases to the Banned Word List
246
Email Block List
247
Adding Address Patterns to the Email Block List
247
Email Exempt List
247
Adding Address Patterns to the Email Exempt List
248
Adding a Subject Tag
248
Logging and Reporting
249
Recording Logs
249
Recording Logs on a Remote Computer
250
Recording Logs on a Netiq Webtrends Server
250
Recording Logs in System Memory
251
Filtering Log Messages
251
Configuring Traffic Logging
253
Enabling Traffic Logging
253
Configuring Traffic Filter Settings
254
Adding Traffic Filter Entries
254
Viewing Logs Saved to Memory
255
Viewing Logs
255
Searching Logs
256
Configuring Alert Email
256
Adding Alert Email Addresses
256
Testing Alert Email
257
Enabling Alert Email
257
Glossary
259
Index
263
Other manuals for Fortinet FortiGate 100
Quick Start Guide
2 pages
5
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Fortinet FortiGate 100 and is the answer not in the manual?
Ask a question
Fortinet FortiGate 100 Specifications
General
Brand
Fortinet
Model
FortiGate 100
Category
Gateway
Language
English
Related product manuals
Fortinet FortiGate 110C
2 pages
Fortinet FortiGate 60B
66 pages
Fortinet FortiGate 30B
56 pages
Fortinet FortiGate 310B
18 pages
Fortinet FortiSwitch 1048D
13 pages
Fortinet FortiSandbox 1000D
24 pages
Fortinet FortiGate FortiGate-100
2 pages
Fortinet FortiGate 1000D
14 pages
Fortinet FortiGate 1000F Series
20 pages
FortiGate FortiGate-1000
2 pages
FortiGate FortiGate-100A
2 pages
Fortinet FortiGate Series
14 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General