Fortinet FortiGate 50A

Fortinet FortiGate 50A

272 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

224 Fortinet Inc.

Logging attacks Network Intrusion Detection System (NIDS)

Table of Contents

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction13
- Nat/Route Mode and Transparent Mode13
  - Nat/Route Mode13
  - Transparent Mode13
- Document Conventions14
- Fortinet Documentation15
  - Comments on Fortinet Technical Documentation15
- Customer Service and Technical Support16
Getting Started17
- Package Contents18
- Mounting18
- Powering on19
- Connecting to the Web-Based Manager19
- Connecting to the Command Line Interface (CLI)20
- Factory Default Fortigate Configuration Settings22
- Planning the Fortigate Configuration27
- Fortigate Model Maximum Values Matrix30
- Next Steps31
Nat/Route Mode Installation33
- Installing the Fortigate Unit Using the Default Configuration33
  - Changing the Default Configuration34
- Preparing to Configure Nat/Route Mode34
  - Advanced Nat/Route Mode Settings35
- Using the Setup Wizard35
  - Starting the Setup Wizard35
  - Reconnecting to the Web-Based Manager35
- Using the Command Line Interface36
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode36
- Connecting the Fortigate Unit to Your Networks37
- Configuring Your Networks38
- Completing the Configuration38
Transparent Mode Installation41
- Preparing to Configure Transparent Mode41
- Using the Setup Wizard42
- Using the Command Line Interface42
- Connecting the Fortigate Unit to Your Networks43
- Completing the Configuration45
- Transparent Mode Configuration Examples46
System Status53
- Changing the Fortigate Host Name54
- Changing the Fortigate Firmware54
- Manual Virus Definition Updates63
- Manual Attack Definition Updates63
- Displaying the Fortigate Serial Number64
- Displaying the Fortigate up Time64
- Backing up System Settings64
- Restoring System Settings64
- Restoring System Settings to Factory Defaults65
- Changing to Transparent Mode65
- Changing to Nat/Route Mode66
- Restarting the Fortigate Unit66
- Shutting down the Fortigate Unit66
- System Status67
- Session List70
Virus and Attack Definitions Updates and Registration73
- Updating Antivirus and Attack Definitions73
- Scheduling Updates76
- Enabling Push Updates78
- Registering Fortigate Units83
  - Forticare Service Contracts84
  - Registering the Fortigate Unit85
- Updating Registration Information86
- Registering a Fortigate Unit after an RMA91
Network Configuration93
- Configuring Interfaces93
- Adding DNS Server IP Addresses100
- Configuring Routing100
- Configuring DHCP Services104
  - Configuring a DHCP Relay Agent104
  - Configuring a DHCP Server105
- Configuring the Modem Interface107
RIP Configuration113
- RIP Settings113
- Configuring RIP for Fortigate Interfaces115
- Adding RIP Filters117
System Configuration121
- Setting System Date and Time121
- Changing System Options122
- Adding and Editing Administrator Accounts123
  - Adding New Administrator Accounts124
  - Editing Administrator Accounts124
- Configuring SNMP125
- Replacement Messages133
  - Customizing Replacement Messages133
  - Customizing Alert Emails134
Firewall Configuration137
- Default Firewall Configuration138
- Adding Firewall Policies140
  - Firewall Policy Options140
  - Traffic Shaping142
- Configuring Policy Lists144
- Addresses146
- Services149
- Schedules154
- Virtual Ips157
- IP Pools161
- IP/MAC Binding163
- Content Profiles166
Users and Authentication171
- Setting Authentication Timeout172
- Adding User Names and Configuring Authentication172
  - Deleting User Names from the Internal Database173
- Configuring RADIUS Support174
  - Adding RADIUS Servers174
  - Deleting RADIUS Servers174
- Configuring LDAP Support175
  - Adding LDAP Servers175
  - Deleting LDAP Servers176
- Configuring User Groups177
  - Adding User Groups177
  - Deleting User Groups178
Ipsec VPN179
- Key Management180
  - Manual Keys180
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates180
- Manual Key Ipsec Vpns181
  - General Configuration Steps for a Manual Key VPN181
  - Adding a Manual Key VPN Tunnel181
- Autoike Ipsec Vpns182
- Managing Digital Certificates190
  - Obtaining a Signed Local Certificate190
  - Obtaining CA Certificates192
- Configuring Encrypt Policies193
- Ipsec VPN Concentrators196
- Monitoring and Troubleshooting Vpns201
PPTP and L2TP VPN203
- Configuring PPTP203
- Configuring L2TP209
Network Intrusion Detection System (NIDS)215
- Detecting Attacks215
- Preventing Attacks220
- Logging Attacks222
  - Logging Attack Messages to the Attack Log222
  - Reducing the Number of NIDS Attack Log and Email Messages222
Antivirus Protection225
- General Configuration Steps225
- Antivirus Scanning226
- File Blocking227
  - Blocking Files in Firewall Traffic227
  - Adding File Patterns to Block227
- Blocking Oversized Files and Emails228
  - Configuring Limits for Oversized Files and Email228
- Exempting Fragmented Email from Blocking228
- Viewing the Virus List229
Web Filtering231
- General Configuration Steps231
- Content Blocking232
- URL Blocking235
- Configuring Cerberian URL Filtering238
- Script Filtering240
  - Enabling Script Filtering240
  - Selecting Script Filter Options240
- Exempt URL List241
Email Filter245
- General Configuration Steps245
- Email Banned Word List246
- Email Block List248
- Email Exempt List249
  - Adding Address Patterns to the Email Exempt List250
- Adding a Subject Tag250
Logging and Reporting251
- Recording Logs251
- Filtering Log Messages253
- Configuring Traffic Logging254
- Configuring Alert Email257
Glossary259
Index263

Other manuals for Fortinet FortiGate 50A

Installation Guide44 pages

Related product manuals

Preview: Fortinet FortiGate 500D

Fortinet FortiGate 500D

Preview: Fortinet FortiGate FortiGate-50

Fortinet FortiGate FortiGate-50

Fortinet FortiGate FortiGate-500

Preview: Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-50B

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate-200A

Fortinet FortiGate-200A

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Fortinet FortiGate FG-91G

Fortinet FortiGate 1000F Series

Preview: Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

FortiGate FortiGate-1000