Fortinet FortiGate FortiGate-100A - Set the Security Options; Configure the Firewall Policies

FortiGate-60 series and FortiGate-100A FortiOS 3.0 MR4 Install Guide
74 01-30004-0266-20070831
Setting up the FortiWiFi-60 as an Access Point Using a wireless network
Set the security options
To ensure proper security and protection of your network and its information, set
the security options for the FortiWiFi-60 unit.
To set the data security
1 Go to System > Wireless > Settings.
2 Select the wlan interface.
3 Enter an SSID.
4 Set the SSID Broadcast.
5 Select a Security mode.
6 Enter a key or pre-shared key depending on the Security Mode selected.
7 Select Apply.
8 If you want to use Mac address filtering. select the MAC Filter tab.
9 Enable MAC filtering and select the edit icon.
10 Enter the MAC addresses and select to Allow or Deny.
11 Select OK.
Configure the firewall policies
The FortiWiFi-60 provides WAN interfaces for Internet connections. You can
configure the Internet connection for both wired networks on the internal and/or
DMZ interfaces and the wireless network through the WLAN interface.
You can provide secure Internet access for wireless clients by creating firewall
policies from the WLAN interface to the WAN1 or WAN2 interfaces.
The following example creates a policy from the wireless clients (WLAN interface)
to the Internet (WAN1 interface) using traffic shaping, firewall authentication and
the default Strict content policy.
To create a new wall policy for a secure Internet connection
1 Go to Firewall > Policy.
2 Select the blue arrow for WLAN to WAN1 and select Create New.
3 Configure the following settings and select OK:
Note: You will need to distribute the information entered in step 3 and step 6 with your
wireless users to connect to the wireless network. It is highly recommended you do not
select “None” for the Security Mode. Selecting None will leave your wireless network prone
to hackers.
Interface/Zone Source WLAN
Interface/Zone Destination WAN1
Address Name Source All
Address Name Destination All
Schedule Always
Service ANY
Action ACCEPT
NAT Enable
Protection Profile Strict