Fortinet FortiGate 100

To Next Page

To Previous Page

230 Fortinet Inc.

Reducing the number of NIDS attack log and email messages Network Intrusion Detection System (NIDS)

Main Page

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction13
- Antivirus Protection13
- Web Content Filtering14
- Email Filtering14
- Firewall15
  - Nat/Route Mode15
  - Transparent Mode16
- Network Intrusion Detection16
- Vpn16
- Secure Installation, Configuration, and Management17
- What's New in Version 2.5019
- About this Document22
- Document Conventions23
- Fortinet Documentation24
  - Comments on Fortinet Technical Documentation24
- Customer Service and Technical Support25
Getting Started27
- Package Contents28
- Mounting28
- Powering on29
- Connecting to the Web-Based Manager30
- Connecting to the Command Line Interface (CLI)31
- Factory Default Fortigate Configuration Settings31
- Planning Your Fortigate Configuration37
- Fortigate Model Maximum Values Matrix40
- Next Steps41
Nat/Route Mode Installation43
- Preparing to Configure Nat/Route Mode43
  - Advanced Nat/Route Mode Settings44
  - DMZ Interface44
- Using the Setup Wizard45
  - Starting the Setup Wizard45
  - Reconnecting to the Web-Based Manager45
- Using the Command Line Interface45
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode45
- Connecting the Fortigate Unit to Your Networks47
- Configuring Your Networks48
- Completing the Configuration48
- Configuration Example: Multiple Connections to the Internet49
Transparent Mode Installation57
- Preparing to Configure Transparent Mode57
- Using the Setup Wizard58
- Using the Command Line Interface59
- Connecting the Fortigate Unit to Your Networks60
- Completing the Configuration61
- Transparent Mode Configuration Examples62
System Status69
- Changing the Fortigate Host Name70
- Changing the Fortigate Firmware70
- Manual Virus Definition Updates82
- Manual Attack Definition Updates83
- Displaying the Fortigate Serial Number83
- Displaying the Fortigate up Time83
- Backing up System Settings83
- Restoring System Settings84
- Restoring System Settings to Factory Defaults84
- Changing to Transparent Mode85
- Changing to Nat/Route Mode85
- Restarting the Fortigate Unit85
- Shutting down the Fortigate Unit86
- System Status86
- Session List89
Virus and Attack Definitions Updates and Registration91
- Updating Antivirus and Attack Definitions91
- Registering Fortigate Units101
  - Forticare Service Contracts101
  - Registering the Fortigate Unit102
- Updating Registration Information104
- Registering a Fortigate Unit after an RMA107
Network Configuration109
- Configuring Interfaces109
- Adding DNS Server IP Addresses115
- Configuring Routing115
- Providing DHCP Services to Your Internal Network119
RIP Configuration121
- RIP Settings122
- Configuring RIP for Fortigate Interfaces124
- Adding RIP Neighbors125
- Adding RIP Filters126
System Configuration129
- Setting System Date and Time129
- Changing Web-Based Manager Options130
- Adding and Editing Administrator Accounts132
  - Adding New Administrator Accounts132
  - Editing Administrator Accounts133
- Configuring SNMP134
- Customizing Replacement Messages136
  - Customizing Replacement Messages137
  - Customizing Alert Emails138
Firewall Configuration141
- Default Firewall Configuration142
- Adding Firewall Policies144
  - Firewall Policy Options145
  - Traffic Shaping146
- Configuring Policy Lists149
- Addresses150
- Services153
- Schedules157
- Virtual Ips160
- IP Pools164
- IP/MAC Binding166
- Content Profiles169
Users and Authentication173
- Setting Authentication Timeout174
- Adding User Names and Configuring Authentication174
  - Deleting User Names from the Internal Database175
- Configuring RADIUS Support176
  - Adding RADIUS Servers176
  - Deleting RADIUS Servers176
- Configuring LDAP Support177
  - Adding LDAP Servers177
  - Deleting LDAP Servers178
- Configuring User Groups179
  - Adding User Groups179
  - Deleting User Groups180
Ipsec VPN181
- Key Management182
  - Manual Keys182
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates182
- Manual Key Ipsec Vpns183
  - General Configuration Steps for a Manual Key VPN183
  - Adding a Manual Key VPN Tunnel183
- Autoike Ipsec Vpns185
- Managing Digital Certificates191
  - Obtaining a Signed Local Certificate191
  - Obtaining a CA Certificate195
- Configuring Encrypt Policies196
- Ipsec VPN Concentrators199
- Redundant Ipsec Vpns203
  - Configuring Redundant Ipsec VPN203
- Monitoring and Troubleshooting Vpns205
PPTP and L2TP VPN207
- Configuring PPTP207
- Configuring L2TP213
Network Intrusion Detection System (NIDS)221
- Detecting Attacks221
- Preventing Attacks225
- Logging Attacks228
  - Logging Attack Messages to the Attack Log228
  - Reducing the Number of NIDS Attack Log and Email Messages229
Antivirus Protection231
- General Configuration Steps231
- Antivirus Scanning232
- File Blocking233
  - Blocking Files in Firewall Traffic233
  - Adding File Patterns to Block233
- Blocking Oversized Files and Emails234
  - Configuring Limits for Oversized Files and Email234
- Exempting Fragmented Email from Blocking234
- Viewing the Virus List234
Web Filtering235
- General Configuration Steps235
- Content Blocking236
  - Adding Words and Phrases to the Banned Word List236
- URL Blocking237
  - Using the Fortigate Web Filter237
  - Using the Cerberian Web Filter240
    - Configuring Cerberian Web Filter241
    - Enabling Cerberian Url Filtering241
- Script Filtering242
  - Enabling the Script Filter242
  - Selecting Script Filter Options242
- Exempt URL List243
  - Adding Urls to the Exempt URL List243
Email Filter245
- General Configuration Steps245
- Email Banned Word List246
  - Adding Words and Phrases to the Banned Word List246
- Email Block List247
  - Adding Address Patterns to the Email Block List247
- Email Exempt List247
  - Adding Address Patterns to the Email Exempt List248
- Adding a Subject Tag248
Logging and Reporting249
- Recording Logs249
- Filtering Log Messages251
- Configuring Traffic Logging253
- Viewing Logs Saved to Memory255
  - Viewing Logs255
  - Searching Logs256
- Configuring Alert Email256
Glossary259
Index263

Fortinet FortiGate 100 - Page 230

Table of Contents

Other manuals for Fortinet FortiGate 100

Related product manuals