Fortinet FortiGate FortiGate-100 - Administration Guide Manual

388 pages

To Next Page

To Next Page

Loading...

FortiGate 100

Administration Guide

INTERNAL

EXTERNAL

DMZ

POWER

STATUS

FortiGate-100 Administration Guide

Version 2.80 MR6

5 November 2004

01-28006-0003-20041105

Table of Contents

Default Chapter3
- Table of Contents3
Introduction13
- About Fortigate Antivirus Firewalls13
- Document Conventions19
- Fortigate Documentation21
  - Comments on Fortinet Technical Documentation21
- Related Documentation21
- Customer Service and Technical Support23
System Status25
- Console Access25
- Status26
  - Viewing System Status26
  - Changing Unit Information29
- Session List31
- Changing the Fortigate Firmware32
System Network47
- Interface47
  - Interface Settings48
  - Configuring Interfaces53
- Zone57
  - Zone Settings58
- Management59
- Dns60
- Routing Table (Transparent Mode)61
  - Routing Table List61
  - Transparent Mode Route Settings62
- VLAN Overview63
  - Fortigate Units and Vlans64
- Vlans in Nat/Route Mode64
- Vlans in Transparent Mode66
- Fortigate Ipv6 Support71
System DHCP73
- Service73
  - DHCP Service Settings74
- Server75
  - DHCP Server Settings76
- Exclude Range77
  - DHCP Exclude Range Settings78
- IP/MAC Binding78
  - DHCP IP/MAC Binding Settings79
- Dynamic IP79
System Config81
- System Time81
- Options82
- Snmp97
- Replacement Messages106
  - Replacement Messages List106
  - Changing Replacement Messages107
- Fortimanager108
System Administration109
- Administrators109
  - Administrators List110
  - Administrators Options110
- Access Profiles111
  - Access Profile List112
  - Access Profile Options112
System Maintenance115
- Backup and Restore115
  - Backing up and Restoring116
- Update Center118
- Support125
  - Sending a Bug Report126
  - Registering a Fortigate Unit127
- Shutdown129
System Virtual Domain131
- Virtual Domain Properties132
- Virtual Domains134
- Configuring Virtual Domains136
Router141
- Static141
  - Static Route List143
  - Static Route Options144
- Policy145
  - Policy Route List145
  - Policy Route Options146
- Rip146
- Router Objects154
- Monitor162
  - Routing Monitor List162
- CLI Configuration163
Firewall189
- Policy190
- Address198
- Service202
- Schedule210
- Virtual IP214
- IP Pool218
- Protection Profile221
Users and Authentication233
- Setting Authentication Timeout234
- Local234
  - Local User List234
  - Local User Options234
- Radius235
  - RADIUS Server List235
  - RADIUS Server Options236
- Ldap236
  - LDAP Server List237
  - LDAP Server Options237
- User Group239
  - User Group List239
  - User Group Options240
- CLI Configuration241
  - Peer241
  - Peergrp242
Vpn245
- Phase 1246
  - Phase 1 List246
  - Phase 1 Basic Settings247
  - Phase 1 Advanced Options248
  - Configuring Xauth249
- Phase 2250
  - Phase 2 List250
  - Phase 2 Basic Settings251
  - Phase 2 Advanced Options252
- Manual Key253
  - Manual Key List254
  - Manual Key Options254
- Concentrator255
  - Concentrator List255
  - Concentrator Options256
- Ping Generator256
  - Ping Generator Options257
- Monitor257
  - Dialup Monitor258
  - Static IP and Dynamic DNS Monitor258
- Pptp259
  - Setting up a PPTP-Based VPN259
  - Enabling PPTP and Specifying a PPTP Range260
  - Configuring a Windows 2000 Client for PPTP261
  - Configuring a Windows XP Client for PPTP261
  - PPTP Passthrough262
- L2Tp263
  - Setting up a L2TP-Based VPN264
  - Enabling L2TP and Specifying an L2TP Range264
  - Configuring a Windows 2000 Client for L2TP265
  - Configuring a Windows XP Client for L2TP266
- Certificates268
  - Viewing the Certificate List269
  - Generating a Certificate Request269
  - Installing a Signed Certificate271
  - Enabling VPN Access for Specific Certificate Holders272
- CLI Configuration273
  - Ipsec Phase1273
  - Ipsec Phase2275
  - Ipsec Vip276
- Authenticating Peers with Preshared Keys278
- Gateway-To-Gateway VPN278
- Dialup VPN279
- Dynamic DNS VPN279
- Manual Key Ipsec VPN280
- Adding Firewall Policies for Ipsec VPN Tunnels280
  - Setting the Encryption Policy Direction280
  - Setting the Source Address for Encrypted Traffic280
  - Setting the Destination Address for Encrypted Traffic281
  - Adding an Ipsec Firewall Encryption Policy281
- Internet Browsing through a VPN Tunnel281
  - Configuring Internet Browsing through a VPN Tunnel282
- Ipsec VPN in Transparent Mode283
  - Special Rules283
- Hub and Spoke Vpns284
  - Configuring the Hub284
  - Adding a Vpn Concentrator285
  - Configuring Spokes286
- Redundant Ipsec Vpns287
  - Configuring Redundant Ipsec Vpns287
- Configuring Ipsec Virtual IP Addresses288
- Troubleshooting290
Ips291
- Signature292
  - Predefined292
  - Custom296
    - Adding Custom Signatures297
    - Backing up and Restoring Custom Signature Files297
- Anomaly298
  - Configuring an Anomaly299
  - Anomaly CLI Configuration301
- Configuring IPS Logging and Alert Email302
- Default Fail Open Setting302
Antivirus303
- File Block304
  - File Block List305
  - Configuring the File Block List306
- Quarantine306
- Config310
- CLI Configuration312
Web Filter321
- Content Block322
- URL Block324
- URL Exempt327
- Category Block329
- Script Filter333
  - Web Script Filter Options334
Spam Filter335
- Order of Spam Filter Operations337
- IP Address338
- Rbl & Ordbl339
- Email Address341
- MIME Headers342
- Banned Word344
- Using Perl Regular Expressions346
Log & Report349
- Log Config350
- Log Access359
  - Viewing Log Messages359
  - Searching Log Messages361
- CLI Configuration362
  - Fortilog Setting362
  - Syslogd Setting363
Fortiguard Categories367
Fortigate Maximum Values373
Glossary377
Index381

Other manuals for Fortinet FortiGate FortiGate-100

Quick Start Guide2 pages

Install Guide84 pages

Installation Guide54 pages

Related product manuals

FortiGate FortiGate-1000

Preview: FortiGate FortiGate-100A

FortiGate FortiGate-100A

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Fortinet FortiGate 1000F Series

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 70D

Fortinet FortiGate 70D

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate-200A

Fortinet FortiGate-200A

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Preview: Fortinet FortiGate FG-80C

Fortinet FortiGate FG-80C

Preview: Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-60

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A