Fortinet Fortigate-5000 series - Page 284

Fortinet Fortigate-5000 series

458 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

FortiGate Version 3.0 MR4 Administration Guide

284 01-30004-0203-20070102

Protection profile CLI configuration Firewall Protection Profile

Table of Contents

Default Chapter3
- Table of Contents3
Introduction17
- Introducing the Fortigate Units18
- Fortinet Family of Products25
- About this Document27
  - Document Conventions29
- Fortigate Documentation29
- Customer Service and Technical Support31
Web-Based Manager33
- Button Bar Features34
- Web-Based Manager Pages37
System Status41
- Status Page41
  - Viewing System Status41
    - System Information43
    - License Information44
- Changing System Information49
  - Configuring System Time49
  - Changing the Fortigate Unit Host Name50
- Changing the Fortigate Firmware51
  - Upgrading to a New Firmware Version51
  - Reverting to a Previous Firmware Version51
- Viewing Operational History52
- Manually Updating Fortiguard Definitions53
- Viewing Statistics54
- Topology Viewer58
  - The Topology Viewer Window58
  - Customizing the Topology Diagram60
Using Virtual Domains61
- Virtual Domains61
  - VDOM Configuration Settings62
  - Global Configuration Settings63
- Enabling Vdoms64
- Configuring Vdoms and Global Settings64
System Network69
- Interface69
- Zone87
  - Zone Settings87
- Network Options88
  - DNS Servers89
  - Dead Gateway Detection89
- Routing Table (Transparent Mode)90
  - Transparent Mode Route Settings90
- Configuring the Modem Interface91
- VLAN Overview96
  - Fortigate Units and Vlans96
- Vlans in Nat/Route Mode97
- Vlans in Transparent Mode99
- Fortigate Ipv6 Support104
System Wireless105
- The Fortiwifi Wireless LAN Interface105
- Channel Assignments106
- System Wireless Settings (Fortiwifi-60)107
- System Wireless Settings (Fortiwifi-60A and 60AM)109
- Wireless MAC Filter110
- Wireless Monitor111
System DHCP113
- Fortigate DHCP Servers and Relays113
- Configuring DHCP Services114
  - Configuring an Interface as a DHCP Relay Agent115
  - Configuring a DHCP Server115
- Viewing Address Leases116
  - Reserving IP Addresses for Specific Clients117
- Ha119
System Config119
- HA Options119
- Cluster Members List122
- Viewing HA Statistics125
- Changing Subordinate Unit Host Name and Device Priority126
- Disconnecting a Cluster Unit from a Cluster126
- Snmp127
- Replacement Messages136
- Operation Mode and VDOM Management Access141
  - Changing Operation Mode141
  - Management Access142
System Admin143
- Administrators143
- Access Profiles148
  - Viewing the Access Profiles List151
  - Configuring an Access Profile152
- Fortimanager153
- Settings153
- Monitoring Administrators154
System Maintenance157
- Backup and Restore157
- Fortiguard Center161
- License172
System Chassis (Fortigate-5000 Series)173
- SMC (Shelf Manager Card)173
- Blades (Fortigate-5000 Chassis Slots)174
- Chassis Monitoring Event Log Messages176
Router Static177
- Routing Concepts177
- Static Route180
- Policy Route185
  - Adding a Route Policy186
  - Moving a Route Policy187
Router Dynamic189
- Rip189
- Ospf194
- Bgp202
  - How BGP Works202
  - Viewing and Editing BGP Settings203
- Multicast204
  - Viewing and Editing Multicast Settings204
  - Overriding the Multicast Settings on an Interface206
Router Monitor209
- Displaying Routing Information209
- Searching the Fortigate Routing Table211
Firewall Policy213
- About Firewall Policies213
  - How Policy Matching Works214
- Viewing the Firewall Policy List214
  - Adding a Firewall Policy215
  - Moving a Policy to a Different Position in the Policy List216
- Configuring Firewall Policies216
- Firewall Policy Examples228
  - Scenario One: SOHO Sized Business228
  - Scenario Two: Enterprise Sized Business231
Firewall Address235
- About Firewall Addresses235
- Viewing the Firewall Address List236
- Configuring Addresses237
- Viewing the Address Group List237
- Configuring Address Groups238
Firewall Service239
- Viewing the Predefined Service List239
- Viewing the Custom Service List243
- Configuring Custom Services243
- Viewing the Service Group List245
- Configuring Service Groups245
Firewall Schedule247
- Viewing the One-Time Schedule List247
- Configuring One-Time Schedules248
- Viewing the Recurring Schedule List248
- Configuring Recurring Schedules249
Firewall Virtual IP251
- Virtual Ips251
  - How Virtual Ips Map Connections through the Fortigate Unit251
- Viewing the Virtual IP List255
- Configuring Virtual Ips255
- Virtual IP Groups267
- Viewing the VIP Group List267
- Configuring VIP Groups268
- IP Pools269
  - IP Pools and Dynamic NAT269
  - IP Pools for Firewall Policies that Use Fixed Ports269
- Viewing the IP Pool List270
- Configuring IP Pools270
Firewall Protection Profile271
- What Is a Protection Profile271
  - Default Protection Profiles272
- Configuring a Protection Profile272
- Viewing the Protection Profile List272
- Adding a Protection Profile to a Policy282
- Protection Profile CLI Configuration283
Vpn Ipsec285
- Overview of Ipsec Interface Mode285
- Auto Key287
- Manual Key296
  - Creating a New Manual Key Configuration297
- Concentrator299
  - Defining Concentrator Options299
- Monitor300
Vpn Pptp303
- PPTP Range303
Vpn Ssl305
- Config305
- Monitor307
VPN Certificates309
- Local Certificates309
- Remote Certificates314
  - Importing Remote (OCSP) Certificates315
- CA Certificates315
  - Importing CA Certificates316
- Crl317
  - Importing a Certificate Revocation List317
User319
- Configuring User Authentication319
  - Setting Authentication Timeout320
  - Setting User Authentication Protocol Support320
- Local User Accounts321
  - Configuring a User Account321
- RADIUS Servers322
  - Configuring a RADIUS Server322
- LDAP Servers323
  - Configuring an LDAP Server324
- PKI Authentication325
  - Configuring PKI Users326
- Windows AD Servers326
  - Configuring a Windows AD Server327
- User Group327
- Configuring Peers and Peer Groups334
Antivirus335
- Order of Operations335
- Antivirus Elements335
  - Fortiguard Antivirus336
- Antivirus Settings and Controls337
- File Pattern338
- Quarantine341
- Config345
  - Viewing the Virus List345
  - Viewing the Grayware List346
- Antivirus CLI Configuration347
Intrusion Protection349
- About Intrusion Protection349
  - IPS Settings and Controls350
  - When to Use IPS350
- Predefined Signatures351
- Custom Signatures354
  - Viewing the Custom Signature List354
  - Creating Custom Signatures355
- Protocol Decoders356
  - Viewing the Protocol Decoder List356
  - Upgrading IPS Protocol Decoder List357
- Anomalies357
  - Viewing the Traffic Anomaly List358
  - Configuring IPS Traffic Anomalies358
- IPS CLI Configuration359
Web Filter361
- Order of Web Filtering361
- How Web Filtering Works361
- Web Filter Controls362
- Content Block364
- URL Filter369
- Fortiguard - Web Filter373
Antispam381
- Order of Spam Filtering381
- Anti-Spam Filter Controls382
- Banned Word384
- Black/White List387
- Advanced Antispam Configuration392
  - Config Spamfilter Mheader392
  - Config Spamfilter Rbl393
- Using Perl Regular Expressions393
IM, P2P & Voip397
- Overview397
- Configuring IM/P2P Protocols399
- Statistics401
  - Viewing Overview Statistics401
  - Viewing Statistics by Protocol402
- User403
Log&Report407
- Fortigate Logging407
- Log Severity Levels408
- Storing Logs409
- Log Types415
- High Availability Cluster Logging415
- Log Access419
- Content Archive425
- Alert Email426
  - Configuring Alert Email426
- Reports428
- Viewing Fortianalyzer Reports from a Fortigate Unit438
  - Viewing Parts of a Fortianalyzer Report438
Index439

Related product manuals

Preview: Fortinet FortiGate 500D

Fortinet FortiGate 500D

Fortinet FortiGate FortiGate-500

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate FortiGate-50

Fortinet FortiGate FortiGate-50

Preview: Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-50B

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate-200A

Fortinet FortiGate-200A

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Preview: Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-60

Preview: Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A