Fortinet FortiGate 4000 - Page 280

Fortinet FortiGate 4000

332 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

280 Fortinet Inc.

Logging attacks Network Intrusion Detection System (NIDS)

Table of Contents

Default Chapter1
- User Manual1
- Table of Contents3
Introduction15
- Antivirus Protection16
- Web Content Filtering16
- Email Filtering17
- Firewall17
  - Nat/Route Mode18
  - Transparent Mode18
- Vlans and Virtual Domains18
- Network Intrusion Detection18
- Vpn19
- High Availability19
- Secure Installation, Configuration, and Management20
- Document Conventions21
- Fortinet Documentation22
  - Comments on Fortinet Technical Documentation23
- Customer Service and Technical Support23
Getting Started25
- Warnings and Cautions26
  - Warning26
- Package Contents26
- Physical Description27
- Front Panel Features28
  - Fortiblade-4010 Module29
  - KVM Switch Module30
- Rear Panel Features31
- Installing Hardware37
- Turning Fortigate-4000 Chassis Power on and off40
  - Turning on Fortigate-4000 Chassis Power40
  - Turning off Fortigate-4000 Chassis Power41
- Hot Swapping Modules41
- Connecting to the Web-Based Manager44
  - Connecting to the Fortigate-4000 Internal Interface Module45
  - Connecting to the Fortigate-4000 10/100 out of Band Management Module46
- Connecting to the Command Line Interface (CLI)47
- Factory Default Configuration48
- Planning the Fortigate Configuration54
- Fortigate Model Maximum Values Matrix59
- Next Steps60
Nat/Route Mode Installation61
- Preparing to Configure Nat/Route Mode61
  - Advanced Nat/Route Mode Settings62
  - Out of Band Management Interface63
- Using the Setup Wizard63
  - Starting the Setup Wizard63
  - Reconnecting to the Web-Based Manager63
- Using the Command Line Interface64
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode64
  - Configuring the out of Band Management Interface65
- Connecting the Fortigate Unit to Your Networks65
- Configuring Your Networks66
- Completing the Configuration66
Transparent Mode Installation69
- Preparing to Configure Transparent Mode69
  - Out of Band Management Interface70
- Using the Setup Wizard70
- Using the Command Line Interface71
- Completing the Configuration72
- Connecting the Fortigate Unit to Your Networks73
- Transparent Mode Configuration Examples74
High Availability81
- Configuring an HA Cluster82
- Managing an HA Cluster87
- Advanced HA Options95
- Active-Active Cluster Packet Flow97
System Status101
- Changing the Fortigate Host Name102
- Changing the Fortigate Firmware102
- Manual Virus Definition Updates114
- Manual Attack Definition Updates115
- Displaying the Fortigate Serial Number115
- Displaying the Fortigate up Time115
- Backing up System Settings115
- Restoring System Settings116
- Restoring System Settings to Factory Defaults116
- Changing to Transparent Mode117
- Changing to Nat/Route Mode117
- Restarting the Fortigate Unit118
- Shutting down the Fortigate Unit118
- System Status118
- Session List122
Virus and Attack Definitions Updates and Registration123
- Updating Antivirus and Attack Definitions123
- Scheduling Updates126
- Enabling Push Updates128
- Registering Fortigate Units133
  - Forticare Service Contracts134
  - Registering the Fortigate Unit134
- Updating Registration Information136
- Registering a Fortigate Unit after an RMA140
Network Configuration141
- Configuring Zones141
  - Adding Zones142
  - Deleting Zones142
- Configuring Interfaces142
- Out of Band Management149
  - Out of Band Management Interface CLI Command150
  - Syntax Description150
- VLAN Overview150
- Vlans in Nat/Route Mode151
- Virtual Domains in Transparent Mode153
- Adding DNS Server IP Addresses158
- Configuring Routing158
- Configuring DHCP Services162
  - Configuring a DHCP Relay Agent163
  - Configuring a DHCP Server163
RIP Configuration167
- RIP Settings167
- Configuring RIP for Fortigate Interfaces169
- Adding RIP Filters171
System Configuration175
- Setting System Date and Time175
- Changing System Options176
- Adding and Editing Administrator Accounts178
  - Adding New Administrator Accounts178
  - Editing Administrator Accounts179
- Configuring SNMP180
- Replacement Messages187
  - Customizing Replacement Messages188
  - Customizing Alert Emails189
Firewall Configuration191
- Default Firewall Configuration192
- Adding Firewall Policies194
  - Firewall Policy Options196
  - Traffic Shaping197
- Configuring Policy Lists200
- Addresses202
- Services205
- Schedules210
- Virtual Ips213
- IP Pools218
- IP/MAC Binding220
- Content Profiles223
Users and Authentication227
- Setting Authentication Timeout228
- Adding User Names and Configuring Authentication228
  - Deleting User Names from the Internal Database229
- Configuring RADIUS Support230
  - Adding RADIUS Servers230
  - Deleting RADIUS Servers230
- Configuring LDAP Support231
  - Adding LDAP Servers231
  - Deleting LDAP Servers232
- Configuring User Groups232
  - Adding User Groups233
  - Deleting User Groups234
Ipsec VPN235
- Key Management236
  - Manual Keys236
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates236
- Manual Key Ipsec Vpns237
  - General Configuration Steps for a Manual Key VPN237
  - Adding a Manual Key VPN Tunnel237
- Autoike Ipsec Vpns239
- Managing Digital Certificates246
- Configuring Encrypt Policies249
- Ipsec VPN Concentrators253
- Monitoring and Troubleshooting Vpns257
PPTP and L2TP VPN259
- Configuring PPTP259
- Configuring L2TP265
Network Intrusion Detection System (NIDS)271
- Detecting Attacks271
- Preventing Attacks276
- Logging Attacks278
  - Logging Attack Messages to the Attack Log278
  - Reducing the Number of NIDS Attack Log and Email Messages278
Antivirus Protection281
- General Configuration Steps281
- Antivirus Scanning282
- File Blocking283
  - Blocking Files in Firewall Traffic284
  - Adding File Patterns to Block284
- Blocking Oversized Files and Emails285
  - Configuring Limits for Oversized Files and Email285
- Exempting Fragmented Email from Blocking285
- Viewing the Virus List286
Web Filtering287
- General Configuration Steps287
- Content Blocking288
- URL Blocking291
  - Configuring Fortigate Web URL Blocking291
  - Configuring Fortigate Web Pattern Blocking294
- Configuring Cerberian URL Filtering294
- Script Filtering297
  - Enabling Script Filtering297
  - Selecting Script Filter Options297
- Exempt URL List298
Email Filter301
- General Configuration Steps301
- Email Banned Word List302
- Email Block List304
- Email Exempt List305
  - Adding Address Patterns to the Email Exempt List306
- Adding a Subject Tag306
Logging and Reporting307
- Recording Logs307
- Filtering Log Messages310
- Configuring Traffic Logging311
- Viewing Logs Saved to Memory314
  - Viewing Logs314
  - Searching Logs315
- Configuring Alert Email315
Glossary319
Index323

Related product manuals

Preview: Fortinet FortiGate 60B

Fortinet FortiGate 60B

Preview: Fortinet FortiGate 30B

Fortinet FortiGate 30B

Preview: Fortinet FortiGate 110C

Fortinet FortiGate 110C

Preview: Fortinet FortiGate 310B

Fortinet FortiGate 310B

Preview: Fortinet FortiSwitch 1048D

Fortinet FortiSwitch 1048D

Preview: Fortinet FortiSandbox 1000D

Fortinet FortiSandbox 1000D

FortiGate FortiGate-4000

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Preview: Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-60

Preview: Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-100