Fortinet FortiGate 400 User Manual

Fortinet FortiGate 400

308 pages

To Next Page

To Next Page

Page #1 background image

Loading...

Page #1 background image

FortiGate 400

Installation and

Configuration Guide

4 / HA3

CONSOLE

1

2

Esc Enter

FortiGate User Manual Volume 1

Version 2.50 MR2

18 August 2003

Table of Contents

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction15
- Antivirus Protection15
- Web Content Filtering16
- Email Filtering16
- Firewall17
  - Nat/Route Mode17
  - Transparent Mode18
- Vlan18
- Network Intrusion Detection18
- Vpn19
- High Availability19
- Secure Installation, Configuration, and Management20
- What's New in Version 2.5022
- About this Document25
- Document Conventions26
- Fortinet Documentation27
  - Comments on Fortinet Technical Documentation27
- Customer Service and Technical Support28
Getting Started29
- Package Contents30
- Mounting30
- Powering on31
- Connecting to the Web-Based Manager32
- Connecting to the Command Line Interface (CLI)33
- Factory Default Fortigate Configuration Settings33
- Planning Your Fortigate Configuration39
- Fortigate Model Maximum Values Matrix42
- Next Steps43
Nat/Route Mode Installation45
- Preparing to Configure Nat/Route Mode45
- Using the Setup Wizard46
  - Starting the Setup Wizard46
  - Reconnecting to the Web-Based Manager46
- Using the Front Control Buttons and LCD47
- Using the Command Line Interface47
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode47
- Connecting the Fortigate Unit to Your Networks49
- Configuring Your Network50
- Completing the Configuration50
- Configuration Example: Multiple Connections to the Internet52
Transparent Mode Installation61
- Preparing to Configure Transparent Mode61
- Using the Setup Wizard62
- Using the Front Control Buttons and LCD63
- Using the Command Line Interface63
- Completing the Configuration64
- Connecting the Fortigate Unit to Your Networks65
- Transparent Mode Configuration Examples66
High Availability75
- Active-Passive HA75
- Active-Active HA76
- HA in Nat/Route Mode77
- HA in Transparent Mode82
- Managing the HA Cluster86
- Advanced HA Options91
  - Selecting a Fortigate Unit to a Permanent Primary Unit91
  - Configuring Weighted-Round-Robin Weights92
System Status93
- Changing the Fortigate Host Name94
- Changing the Fortigate Firmware94
- Manual Virus Definition Updates106
- Manual Attack Definition Updates107
- Displaying the Fortigate Serial Number107
- Displaying the Fortigate up Time107
- Displaying Log Hard Disk Status107
- Backing up System Settings108
- Restoring System Settings108
- Restoring System Settings to Factory Defaults108
- Changing to Transparent Mode109
- Changing to Nat/Route Mode109
- Restarting the Fortigate Unit109
- Shutting down the Fortigate Unit110
- System Status110
- Session List113
Virus and Attack Definitions Updates and Registration115
- Updating Antivirus and Attack Definitions115
- Registering Fortigate Units125
  - Forticare Service Contracts125
  - Registering the Fortigate Unit126
- Updating Registration Information128
- Registering a Fortigate Unit after an RMA131
Network Configuration133
- Configuring Zones133
- Configuring Interfaces135
- Configuring Vlans139
  - VLAN Network Configuration139
  - Adding VLAN Subinterfaces141
- Configuring Routing143
- Providing DHCP Services to Your Internal Network147
RIP Configuration149
- RIP Settings150
- Configuring RIP for Fortigate Interfaces152
- Adding RIP Neighbors153
- Adding RIP Filters154
System Configuration157
- Setting System Date and Time157
- Changing Web-Based Manager Options158
- Adding and Editing Administrator Accounts160
  - Adding New Administrator Accounts160
  - Editing Administrator Accounts161
- Configuring SNMP162
- Customizing Replacement Messages164
  - Customizing Replacement Messages165
  - Customizing Alert Emails166
Firewall Configuration169
- Default Firewall Configuration170
- Adding Firewall Policies172
  - Firewall Policy Options173
  - Traffic Shaping175
- Configuring Policy Lists177
- Addresses179
- Services182
- Schedules186
- Virtual Ips188
- IP Pools192
- IP/MAC Binding193
- Content Profiles197
Users and Authentication201
- Setting Authentication Timeout202
- Adding User Names and Configuring Authentication202
  - Deleting User Names from the Internal Database203
- Configuring RADIUS Support204
  - Adding RADIUS Servers204
  - Deleting RADIUS Servers204
- Configuring LDAP Support205
  - Adding LDAP Servers205
  - Deleting LDAP Servers206
- Configuring User Groups207
  - Adding User Groups207
  - Deleting User Groups208
Ipsec VPN209
- Key Management210
  - Manual Keys210
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates210
- Manual Key Ipsec Vpns211
  - General Configuration Steps for a Manual Key VPN211
  - Adding a Manual Key VPN Tunnel211
- Autoike Ipsec Vpns213
- Managing Digital Certificates219
  - Obtaining a Signed Local Certificate219
  - Obtaining a CA Certificate223
- Configuring Encrypt Policies224
- Ipsec VPN Concentrators227
- Redundant Ipsec Vpns231
  - Configuring Redundant Ipsec VPN231
- Monitoring and Troubleshooting Vpns233
PPTP and L2TP VPN235
- Configuring PPTP235
- Configuring L2TP241
Network Intrusion Detection System (NIDS)249
- Detecting Attacks249
- Preventing Attacks253
- Logging Attacks256
  - Logging Attack Messages to the Attack Log256
  - Reducing the Number of NIDS Attack Log and Email Messages257
Antivirus Protection259
- General Configuration Steps259
- Antivirus Scanning260
- File Blocking261
  - Blocking Files in Firewall Traffic262
  - Adding File Patterns to Block262
- Quarantine263
- Blocking Oversized Files and Emails266
  - Configuring Limits for Oversized Files and Email266
- Exempting Fragmented Email from Blocking266
- Viewing the Virus List266
Web Filtering267
- General Configuration Steps267
- Content Blocking268
  - Adding Words and Phrases to the Banned Word List268
- URL Blocking269
  - Using the Fortigate Web Filter269
  - Using the Cerberian Web Filter272
    - Configuring Cerberian Web Filter273
    - Enabling Cerberian Url Filtering273
- Script Filtering274
  - Enabling the Script Filter274
  - Selecting Script Filter Options274
- Exempt URL List275
  - Adding Urls to the Exempt URL List275
Email Filter277
- General Configuration Steps277
- Email Banned Word List278
  - Adding Words and Phrases to the Banned Word List278
- Email Block List279
  - Adding Address Patterns to the Email Block List279
- Email Exempt List279
  - Adding Address Patterns to the Email Exempt List280
- Adding a Subject Tag280
Logging and Reporting281
- Recording Logs281
- Filtering Log Messages284
- Configuring Traffic Logging286
- Viewing Logs Saved to Memory289
  - Viewing Logs289
  - Searching Logs289
- Viewing and Managing Logs Saved to the Hard Disk290
- Configuring Alert Email292

Questions and Answers:

Need help?

Do you have a question about the Fortinet FortiGate 400 and is the answer not in the manual?

Fortinet FortiGate 400 Specifications

General

Brand	Fortinet
Model	FortiGate 400
Category	Gateway
Language	English

Related product manuals

Preview: Fortinet FortiGate 60B

Fortinet FortiGate 60B

Preview: Fortinet FortiGate 30B

Fortinet FortiGate 30B

Preview: Fortinet FortiGate 110C

Fortinet FortiGate 110C

Preview: Fortinet FortiGate 310B

Fortinet FortiGate 310B

Preview: Fortinet FortiSwitch 1048D

Fortinet FortiSwitch 1048D

Preview: Fortinet FortiSandbox 1000D

Fortinet FortiSandbox 1000D