Fortinet FortiGate FortiGate-50 - Page 202

Fortinet FortiGate FortiGate-50

240 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

202 Fortinet Inc.

Logging attacks Network Intrusion Detection System (NIDS)

Table of Contents

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction11
- Nat/Route Mode and Transparent Mode11
  - Nat/Route Mode11
  - Transparent Mode11
- About this Document12
- Document Conventions13
- Fortinet Documentation14
  - Comments on Fortinet Technical Documentation14
- Customer Service and Technical Support15
Getting Started17
- Package Contents18
- Mounting18
- Powering on19
- Connecting to the Web-Based Manager20
- Connecting to the Command Line Interface (CLI)21
- Factory Default Fortigate Configuration Settings22
- Planning Your Fortigate Configuration28
- Fortigate Model Maximum Values Matrix30
- Next Steps31
Nat/Route Mode Installation33
- Installing the Fortigate Unit Using the Default Configuration33
  - Changing the Default Configuration34
- Preparing to Configure Nat/Route Mode34
  - Advanced Nat/Route Mode Settings35
- Using the Setup Wizard35
  - Starting the Setup Wizard35
  - Reconnecting to the Web-Based Manager35
- Using the Command Line Interface36
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode36
- Connecting the Fortigate Unit to Your Networks37
- Configuring Your Networks38
- Completing the Configuration38
Transparent Mode Installation41
- Preparing to Configure Transparent Mode41
- Using the Setup Wizard42
- Using the Command Line Interface42
- Connecting the Fortigate Unit to Your Networks44
- Completing the Configuration45
- Transparent Mode Configuration Examples46
System Status53
- Changing the Fortigate Host Name54
- Changing the Fortigate Firmware54
- Manual Virus Definition Updates63
- Manual Attack Definition Updates64
- Displaying the Fortigate Serial Number64
- Displaying the Fortigate up Time64
- Backing up System Settings64
- Restoring System Settings65
- Restoring System Settings to Factory Defaults65
- Changing to Transparent Mode65
- Changing to Nat/Route Mode66
- Restarting the Fortigate Unit66
- Shutting down the Fortigate Unit66
- System Status67
- Session List70
Virus and Attack Definitions Updates and Registration71
- Updating Antivirus and Attack Definitions71
- Registering Fortigate Units81
  - Forticare Service Contracts81
  - Registering the Fortigate Unit82
- Updating Registration Information84
- Registering a Fortigate Unit after an RMA87
Network Configuration89
- Configuring Interfaces89
- Adding DNS Server IP Addresses95
- Configuring Routing95
- Providing DHCP Services to Your Internal Network99
System Configuration101
- Setting System Date and Time101
- Changing Web-Based Manager Options102
- Adding and Editing Administrator Accounts104
  - Adding New Administrator Accounts104
  - Editing Administrator Accounts105
- Configuring SNMP106
- Customizing Replacement Messages108
  - Customizing Replacement Messages109
  - Customizing Alert Emails110
Firewall Configuration113
- Default Firewall Configuration114
- Adding Firewall Policies115
  - Firewall Policy Options116
  - Traffic Shaping118
- Configuring Policy Lists120
- Addresses122
- Services125
- Schedules129
- Virtual Ips131
- IP Pools135
- IP/MAC Binding137
- Content Profiles140
Users and Authentication145
- Setting Authentication Timeout146
- Adding User Names and Configuring Authentication146
  - Deleting User Names from the Internal Database147
- Configuring RADIUS Support148
  - Adding RADIUS Servers148
  - Deleting RADIUS Servers148
- Configuring LDAP Support149
  - Adding LDAP Servers149
  - Deleting LDAP Servers150
- Configuring User Groups151
  - Adding User Groups151
  - Deleting User Groups152
Ipsec VPN153
- Key Management154
  - Manual Keys154
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates154
- Manual Key Ipsec Vpns155
  - General Configuration Steps for a Manual Key VPN155
  - Adding a Manual Key VPN Tunnel155
- Autoike Ipsec Vpns157
- Managing Digital Certificates163
  - Obtaining a Signed Local Certificate163
  - Obtaining a CA Certificate167
- Configuring Encrypt Policies168
- Ipsec VPN Concentrators171
- Redundant Ipsec Vpns175
  - Configuring Redundant Ipsec VPN175
- Monitoring and Troubleshooting Vpns177
PPTP and L2TP VPN179
- Configuring PPTP179
- Configuring L2TP185
Network Intrusion Detection System (NIDS)193
- Detecting Attacks193
- Preventing Attacks197
- Logging Attacks200
  - Logging Attack Messages to the Attack Log200
  - Reducing the Number of NIDS Attack Log and Email Messages201
Antivirus Protection203
- General Configuration Steps203
- Antivirus Scanning204
- File Blocking205
  - Blocking Files in Firewall Traffic205
  - Adding File Patterns to Block205
- Blocking Oversized Files and Emails206
  - Configuring Limits for Oversized Files and Email206
- Exempting Fragmented Email from Blocking206
- Viewing the Virus List206
Web Filtering207
- General Configuration Steps207
- Content Blocking208
  - Adding Words and Phrases to the Banned Word List208
- URL Blocking209
  - Using the Fortigate Web Filter209
  - Using the Cerberian Web Filter212
- Script Filtering214
  - Enabling the Script Filter214
  - Selecting Script Filter Options214
- Exempt URL List215
  - Adding Urls to the Exempt URL List215
Email Filter217
- General Configuration Steps217
- Email Banned Word List218
  - Adding Words and Phrases to the Banned Word List218
- Email Block List219
  - Adding Address Patterns to the Email Block List219
- Email Exempt List219
  - Adding Address Patterns to the Email Exempt List220
- Adding a Subject Tag220
Logging and Reporting221
- Recording Logs221
  - Recording Logs on a Remote Computer221
  - Recording Logs on a Netiq Webtrends Server222
- Filtering Log Messages222
- Configuring Traffic Logging224
- Configuring Alert Email226
Glossary229
Index233

Related product manuals

Fortinet FortiGate FortiGate-500

Preview: Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-50B

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate 500D

Fortinet FortiGate 500D

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 60M

Fortinet FortiGate 60M

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Fortinet FortiGate FG-91G

Preview: Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-100

Preview: Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A