Fortinet FortiGate 50A

To Next Page

To Previous Page

IPSec VPN AutoIKE IPSec VPNs

FortiGate-50A Installation and Configuration Guide 187

Figure 21: Adding a phase 1 configuration (Standard options)

Figure 22: Adding a phase 1 configuration (Advanced options)

Main Page

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction13
- Nat/Route Mode and Transparent Mode13
  - Nat/Route Mode13
  - Transparent Mode13
- Document Conventions14
- Fortinet Documentation15
  - Comments on Fortinet Technical Documentation15
- Customer Service and Technical Support16
Getting Started17
- Package Contents18
- Mounting18
- Powering on19
- Connecting to the Web-Based Manager19
- Connecting to the Command Line Interface (CLI)20
- Factory Default Fortigate Configuration Settings22
- Planning the Fortigate Configuration27
- Fortigate Model Maximum Values Matrix30
- Next Steps31
Nat/Route Mode Installation33
- Installing the Fortigate Unit Using the Default Configuration33
  - Changing the Default Configuration34
- Preparing to Configure Nat/Route Mode34
  - Advanced Nat/Route Mode Settings35
- Using the Setup Wizard35
  - Starting the Setup Wizard35
  - Reconnecting to the Web-Based Manager35
- Using the Command Line Interface36
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode36
- Connecting the Fortigate Unit to Your Networks37
- Configuring Your Networks38
- Completing the Configuration38
Transparent Mode Installation41
- Preparing to Configure Transparent Mode41
- Using the Setup Wizard42
- Using the Command Line Interface42
- Connecting the Fortigate Unit to Your Networks43
- Completing the Configuration45
- Transparent Mode Configuration Examples46
System Status53
- Changing the Fortigate Host Name54
- Changing the Fortigate Firmware54
- Manual Virus Definition Updates63
- Manual Attack Definition Updates63
- Displaying the Fortigate Serial Number64
- Displaying the Fortigate up Time64
- Backing up System Settings64
- Restoring System Settings64
- Restoring System Settings to Factory Defaults65
- Changing to Transparent Mode65
- Changing to Nat/Route Mode66
- Restarting the Fortigate Unit66
- Shutting down the Fortigate Unit66
- System Status67
- Session List70
Virus and Attack Definitions Updates and Registration73
- Updating Antivirus and Attack Definitions73
- Scheduling Updates76
- Enabling Push Updates78
- Registering Fortigate Units83
  - Forticare Service Contracts84
  - Registering the Fortigate Unit85
- Updating Registration Information86
- Registering a Fortigate Unit after an RMA91
Network Configuration93
- Configuring Interfaces93
- Adding DNS Server IP Addresses100
- Configuring Routing100
- Configuring DHCP Services104
  - Configuring a DHCP Relay Agent104
  - Configuring a DHCP Server105
- Configuring the Modem Interface107
RIP Configuration113
- RIP Settings113
- Configuring RIP for Fortigate Interfaces115
- Adding RIP Filters117
System Configuration121
- Setting System Date and Time121
- Changing System Options122
- Adding and Editing Administrator Accounts123
  - Adding New Administrator Accounts124
  - Editing Administrator Accounts124
- Configuring SNMP125
- Replacement Messages133
  - Customizing Replacement Messages133
  - Customizing Alert Emails134
Firewall Configuration137
- Default Firewall Configuration138
- Adding Firewall Policies140
  - Firewall Policy Options140
  - Traffic Shaping142
- Configuring Policy Lists144
- Addresses146
- Services149
- Schedules154
- Virtual Ips157
- IP Pools161
- IP/MAC Binding163
- Content Profiles166
Users and Authentication171
- Setting Authentication Timeout172
- Adding User Names and Configuring Authentication172
  - Deleting User Names from the Internal Database173
- Configuring RADIUS Support174
  - Adding RADIUS Servers174
  - Deleting RADIUS Servers174
- Configuring LDAP Support175
  - Adding LDAP Servers175
  - Deleting LDAP Servers176
- Configuring User Groups177
  - Adding User Groups177
  - Deleting User Groups178
Ipsec VPN179
- Key Management180
  - Manual Keys180
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates180
- Manual Key Ipsec Vpns181
  - General Configuration Steps for a Manual Key VPN181
  - Adding a Manual Key VPN Tunnel181
- Autoike Ipsec Vpns182
- Managing Digital Certificates190
  - Obtaining a Signed Local Certificate190
  - Obtaining CA Certificates192
- Configuring Encrypt Policies193
- Ipsec VPN Concentrators196
- Monitoring and Troubleshooting Vpns201
PPTP and L2TP VPN203
- Configuring PPTP203
- Configuring L2TP209
Network Intrusion Detection System (NIDS)215
- Detecting Attacks215
- Preventing Attacks220
- Logging Attacks222
  - Logging Attack Messages to the Attack Log222
  - Reducing the Number of NIDS Attack Log and Email Messages222
Antivirus Protection225
- General Configuration Steps225
- Antivirus Scanning226
- File Blocking227
  - Blocking Files in Firewall Traffic227
  - Adding File Patterns to Block227
- Blocking Oversized Files and Emails228
  - Configuring Limits for Oversized Files and Email228
- Exempting Fragmented Email from Blocking228
- Viewing the Virus List229
Web Filtering231
- General Configuration Steps231
- Content Blocking232
- URL Blocking235
- Configuring Cerberian URL Filtering238
- Script Filtering240
  - Enabling Script Filtering240
  - Selecting Script Filter Options240
- Exempt URL List241
Email Filter245
- General Configuration Steps245
- Email Banned Word List246
- Email Block List248
- Email Exempt List249
  - Adding Address Patterns to the Email Exempt List250
- Adding a Subject Tag250
Logging and Reporting251
- Recording Logs251
- Filtering Log Messages253
- Configuring Traffic Logging254
- Configuring Alert Email257
Glossary259
Index263

Fortinet FortiGate 50A

Table of Contents

Other manuals for Fortinet FortiGate 50A

Related product manuals