Fortinet FortiGate 400

To Next Page

To Previous Page

Contents

FortiGate-400 Installation and Configuration Guide 13

Glossary ............................................................................................................. 295

Index .................................................................................................................... 299

Main Page

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction15
- Antivirus Protection15
- Web Content Filtering16
- Email Filtering16
- Firewall17
  - Nat/Route Mode17
  - Transparent Mode18
- Vlan18
- Network Intrusion Detection18
- Vpn19
- High Availability19
- Secure Installation, Configuration, and Management20
- What's New in Version 2.5022
- About this Document25
- Document Conventions26
- Fortinet Documentation27
  - Comments on Fortinet Technical Documentation27
- Customer Service and Technical Support28
Getting Started29
- Package Contents30
- Mounting30
- Powering on31
- Connecting to the Web-Based Manager32
- Connecting to the Command Line Interface (CLI)33
- Factory Default Fortigate Configuration Settings33
- Planning Your Fortigate Configuration39
- Fortigate Model Maximum Values Matrix42
- Next Steps43
Nat/Route Mode Installation45
- Preparing to Configure Nat/Route Mode45
- Using the Setup Wizard46
  - Starting the Setup Wizard46
  - Reconnecting to the Web-Based Manager46
- Using the Front Control Buttons and LCD47
- Using the Command Line Interface47
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode47
- Connecting the Fortigate Unit to Your Networks49
- Configuring Your Network50
- Completing the Configuration50
- Configuration Example: Multiple Connections to the Internet52
Transparent Mode Installation61
- Preparing to Configure Transparent Mode61
- Using the Setup Wizard62
- Using the Front Control Buttons and LCD63
- Using the Command Line Interface63
- Completing the Configuration64
- Connecting the Fortigate Unit to Your Networks65
- Transparent Mode Configuration Examples66
High Availability75
- Active-Passive HA75
- Active-Active HA76
- HA in Nat/Route Mode77
- HA in Transparent Mode82
- Managing the HA Cluster86
- Advanced HA Options91
  - Selecting a Fortigate Unit to a Permanent Primary Unit91
  - Configuring Weighted-Round-Robin Weights92
System Status93
- Changing the Fortigate Host Name94
- Changing the Fortigate Firmware94
- Manual Virus Definition Updates106
- Manual Attack Definition Updates107
- Displaying the Fortigate Serial Number107
- Displaying the Fortigate up Time107
- Displaying Log Hard Disk Status107
- Backing up System Settings108
- Restoring System Settings108
- Restoring System Settings to Factory Defaults108
- Changing to Transparent Mode109
- Changing to Nat/Route Mode109
- Restarting the Fortigate Unit109
- Shutting down the Fortigate Unit110
- System Status110
- Session List113
Virus and Attack Definitions Updates and Registration115
- Updating Antivirus and Attack Definitions115
- Registering Fortigate Units125
  - Forticare Service Contracts125
  - Registering the Fortigate Unit126
- Updating Registration Information128
- Registering a Fortigate Unit after an RMA131
Network Configuration133
- Configuring Zones133
- Configuring Interfaces135
- Configuring Vlans139
  - VLAN Network Configuration139
  - Adding VLAN Subinterfaces141
- Configuring Routing143
- Providing DHCP Services to Your Internal Network147
RIP Configuration149
- RIP Settings150
- Configuring RIP for Fortigate Interfaces152
- Adding RIP Neighbors153
- Adding RIP Filters154
System Configuration157
- Setting System Date and Time157
- Changing Web-Based Manager Options158
- Adding and Editing Administrator Accounts160
  - Adding New Administrator Accounts160
  - Editing Administrator Accounts161
- Configuring SNMP162
- Customizing Replacement Messages164
  - Customizing Replacement Messages165
  - Customizing Alert Emails166
Firewall Configuration169
- Default Firewall Configuration170
- Adding Firewall Policies172
  - Firewall Policy Options173
  - Traffic Shaping175
- Configuring Policy Lists177
- Addresses179
- Services182
- Schedules186
- Virtual Ips188
- IP Pools192
- IP/MAC Binding193
- Content Profiles197
Users and Authentication201
- Setting Authentication Timeout202
- Adding User Names and Configuring Authentication202
  - Deleting User Names from the Internal Database203
- Configuring RADIUS Support204
  - Adding RADIUS Servers204
  - Deleting RADIUS Servers204
- Configuring LDAP Support205
  - Adding LDAP Servers205
  - Deleting LDAP Servers206
- Configuring User Groups207
  - Adding User Groups207
  - Deleting User Groups208
Ipsec VPN209
- Key Management210
  - Manual Keys210
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates210
- Manual Key Ipsec Vpns211
  - General Configuration Steps for a Manual Key VPN211
  - Adding a Manual Key VPN Tunnel211
- Autoike Ipsec Vpns213
- Managing Digital Certificates219
  - Obtaining a Signed Local Certificate219
  - Obtaining a CA Certificate223
- Configuring Encrypt Policies224
- Ipsec VPN Concentrators227
- Redundant Ipsec Vpns231
  - Configuring Redundant Ipsec VPN231
- Monitoring and Troubleshooting Vpns233
PPTP and L2TP VPN235
- Configuring PPTP235
- Configuring L2TP241
Network Intrusion Detection System (NIDS)249
- Detecting Attacks249
- Preventing Attacks253
- Logging Attacks256
  - Logging Attack Messages to the Attack Log256
  - Reducing the Number of NIDS Attack Log and Email Messages257
Antivirus Protection259
- General Configuration Steps259
- Antivirus Scanning260
- File Blocking261
  - Blocking Files in Firewall Traffic262
  - Adding File Patterns to Block262
- Quarantine263
- Blocking Oversized Files and Emails266
  - Configuring Limits for Oversized Files and Email266
- Exempting Fragmented Email from Blocking266
- Viewing the Virus List266
Web Filtering267
- General Configuration Steps267
- Content Blocking268
  - Adding Words and Phrases to the Banned Word List268
- URL Blocking269
  - Using the Fortigate Web Filter269
  - Using the Cerberian Web Filter272
    - Configuring Cerberian Web Filter273
    - Enabling Cerberian Url Filtering273
- Script Filtering274
  - Enabling the Script Filter274
  - Selecting Script Filter Options274
- Exempt URL List275
  - Adding Urls to the Exempt URL List275
Email Filter277
- General Configuration Steps277
- Email Banned Word List278
  - Adding Words and Phrases to the Banned Word List278
- Email Block List279
  - Adding Address Patterns to the Email Block List279
- Email Exempt List279
  - Adding Address Patterns to the Email Exempt List280
- Adding a Subject Tag280
Logging and Reporting281
- Recording Logs281
- Filtering Log Messages284
- Configuring Traffic Logging286
- Viewing Logs Saved to Memory289
  - Viewing Logs289
  - Searching Logs289
- Viewing and Managing Logs Saved to the Hard Disk290
- Configuring Alert Email292

Fortinet FortiGate 400 - Page 13

Table of Contents

Related product manuals