Fortinet FortiGate 4000 - Page 100

Fortinet FortiGate 4000

332 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

100 Fortinet Inc.

Active-Active cluster packet flow High availability

Table of Contents

Default Chapter1
- User Manual1
- Table of Contents3
Introduction15
- Antivirus Protection16
- Web Content Filtering16
- Email Filtering17
- Firewall17
  - Nat/Route Mode18
  - Transparent Mode18
- Vlans and Virtual Domains18
- Network Intrusion Detection18
- Vpn19
- High Availability19
- Secure Installation, Configuration, and Management20
- Document Conventions21
- Fortinet Documentation22
  - Comments on Fortinet Technical Documentation23
- Customer Service and Technical Support23
Getting Started25
- Warnings and Cautions26
  - Warning26
- Package Contents26
- Physical Description27
- Front Panel Features28
  - Fortiblade-4010 Module29
  - KVM Switch Module30
- Rear Panel Features31
- Installing Hardware37
- Turning Fortigate-4000 Chassis Power on and off40
  - Turning on Fortigate-4000 Chassis Power40
  - Turning off Fortigate-4000 Chassis Power41
- Hot Swapping Modules41
- Connecting to the Web-Based Manager44
  - Connecting to the Fortigate-4000 Internal Interface Module45
  - Connecting to the Fortigate-4000 10/100 out of Band Management Module46
- Connecting to the Command Line Interface (CLI)47
- Factory Default Configuration48
- Planning the Fortigate Configuration54
- Fortigate Model Maximum Values Matrix59
- Next Steps60
Nat/Route Mode Installation61
- Preparing to Configure Nat/Route Mode61
  - Advanced Nat/Route Mode Settings62
  - Out of Band Management Interface63
- Using the Setup Wizard63
  - Starting the Setup Wizard63
  - Reconnecting to the Web-Based Manager63
- Using the Command Line Interface64
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode64
  - Configuring the out of Band Management Interface65
- Connecting the Fortigate Unit to Your Networks65
- Configuring Your Networks66
- Completing the Configuration66
Transparent Mode Installation69
- Preparing to Configure Transparent Mode69
  - Out of Band Management Interface70
- Using the Setup Wizard70
- Using the Command Line Interface71
- Completing the Configuration72
- Connecting the Fortigate Unit to Your Networks73
- Transparent Mode Configuration Examples74
High Availability81
- Configuring an HA Cluster82
- Managing an HA Cluster87
- Advanced HA Options95
- Active-Active Cluster Packet Flow97
System Status101
- Changing the Fortigate Host Name102
- Changing the Fortigate Firmware102
- Manual Virus Definition Updates114
- Manual Attack Definition Updates115
- Displaying the Fortigate Serial Number115
- Displaying the Fortigate up Time115
- Backing up System Settings115
- Restoring System Settings116
- Restoring System Settings to Factory Defaults116
- Changing to Transparent Mode117
- Changing to Nat/Route Mode117
- Restarting the Fortigate Unit118
- Shutting down the Fortigate Unit118
- System Status118
- Session List122
Virus and Attack Definitions Updates and Registration123
- Updating Antivirus and Attack Definitions123
- Scheduling Updates126
- Enabling Push Updates128
- Registering Fortigate Units133
  - Forticare Service Contracts134
  - Registering the Fortigate Unit134
- Updating Registration Information136
- Registering a Fortigate Unit after an RMA140
Network Configuration141
- Configuring Zones141
  - Adding Zones142
  - Deleting Zones142
- Configuring Interfaces142
- Out of Band Management149
  - Out of Band Management Interface CLI Command150
  - Syntax Description150
- VLAN Overview150
- Vlans in Nat/Route Mode151
- Virtual Domains in Transparent Mode153
- Adding DNS Server IP Addresses158
- Configuring Routing158
- Configuring DHCP Services162
  - Configuring a DHCP Relay Agent163
  - Configuring a DHCP Server163
RIP Configuration167
- RIP Settings167
- Configuring RIP for Fortigate Interfaces169
- Adding RIP Filters171
System Configuration175
- Setting System Date and Time175
- Changing System Options176
- Adding and Editing Administrator Accounts178
  - Adding New Administrator Accounts178
  - Editing Administrator Accounts179
- Configuring SNMP180
- Replacement Messages187
  - Customizing Replacement Messages188
  - Customizing Alert Emails189
Firewall Configuration191
- Default Firewall Configuration192
- Adding Firewall Policies194
  - Firewall Policy Options196
  - Traffic Shaping197
- Configuring Policy Lists200
- Addresses202
- Services205
- Schedules210
- Virtual Ips213
- IP Pools218
- IP/MAC Binding220
- Content Profiles223
Users and Authentication227
- Setting Authentication Timeout228
- Adding User Names and Configuring Authentication228
  - Deleting User Names from the Internal Database229
- Configuring RADIUS Support230
  - Adding RADIUS Servers230
  - Deleting RADIUS Servers230
- Configuring LDAP Support231
  - Adding LDAP Servers231
  - Deleting LDAP Servers232
- Configuring User Groups232
  - Adding User Groups233
  - Deleting User Groups234
Ipsec VPN235
- Key Management236
  - Manual Keys236
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates236
- Manual Key Ipsec Vpns237
  - General Configuration Steps for a Manual Key VPN237
  - Adding a Manual Key VPN Tunnel237
- Autoike Ipsec Vpns239
- Managing Digital Certificates246
- Configuring Encrypt Policies249
- Ipsec VPN Concentrators253
- Monitoring and Troubleshooting Vpns257
PPTP and L2TP VPN259
- Configuring PPTP259
- Configuring L2TP265
Network Intrusion Detection System (NIDS)271
- Detecting Attacks271
- Preventing Attacks276
- Logging Attacks278
  - Logging Attack Messages to the Attack Log278
  - Reducing the Number of NIDS Attack Log and Email Messages278
Antivirus Protection281
- General Configuration Steps281
- Antivirus Scanning282
- File Blocking283
  - Blocking Files in Firewall Traffic284
  - Adding File Patterns to Block284
- Blocking Oversized Files and Emails285
  - Configuring Limits for Oversized Files and Email285
- Exempting Fragmented Email from Blocking285
- Viewing the Virus List286
Web Filtering287
- General Configuration Steps287
- Content Blocking288
- URL Blocking291
  - Configuring Fortigate Web URL Blocking291
  - Configuring Fortigate Web Pattern Blocking294
- Configuring Cerberian URL Filtering294
- Script Filtering297
  - Enabling Script Filtering297
  - Selecting Script Filter Options297
- Exempt URL List298
Email Filter301
- General Configuration Steps301
- Email Banned Word List302
- Email Block List304
- Email Exempt List305
  - Adding Address Patterns to the Email Exempt List306
- Adding a Subject Tag306
Logging and Reporting307
- Recording Logs307
- Filtering Log Messages310
- Configuring Traffic Logging311
- Viewing Logs Saved to Memory314
  - Viewing Logs314
  - Searching Logs315
- Configuring Alert Email315
Glossary319
Index323

Related product manuals

Preview: Fortinet FortiGate 60B

Fortinet FortiGate 60B

Preview: Fortinet FortiGate 30B

Fortinet FortiGate 30B

Preview: Fortinet FortiGate 110C

Fortinet FortiGate 110C

Preview: Fortinet FortiGate 310B

Fortinet FortiGate 310B

Preview: Fortinet FortiSwitch 1048D

Fortinet FortiSwitch 1048D

Preview: Fortinet FortiSandbox 1000D

Fortinet FortiSandbox 1000D

FortiGate FortiGate-4000

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Preview: Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-60

Preview: Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-100