Fortinet FortiGate FortiGate-500 - Administration Guide Manual

394 pages

To Next Page

To Next Page

Loading...

FortiGate 500

Administration Guide

Esc Enter

HADMZ

INTERNAL

EXTERNAL 1 2 3 4 5 6 7 8

FortiGate-500 Administration Guide

Version 2.80 MR6

5 November 2004

01-28006-0007-20041105

Table of Contents

Default Chapter3
- Table of Contents3
Introduction13
- About Fortigate Antivirus Firewalls13
- Document Conventions21
- Fortigate Documentation22
  - Comments on Fortinet Technical Documentation22
- Related Documentation22
- Customer Service and Technical Support24
System Status25
- Console Access25
- Status26
  - Viewing System Status26
  - Changing Unit Information29
- Session List31
- Changing the Fortigate Firmware32
System Network47
- Interface47
  - Interface Settings48
  - Configuring Interfaces53
- Zone57
  - Zone Settings58
- Management59
- Dns61
- Routing Table (Transparent Mode)61
  - Routing Table List61
  - Transparent Mode Route Settings62
- VLAN Overview62
  - Fortigate Units and Vlans63
- Vlans in Nat/Route Mode64
- Vlans in Transparent Mode66
- Fortigate Ipv6 Support71
System DHCP73
- Service73
  - DHCP Service Settings74
- Server75
  - DHCP Server Settings76
- Exclude Range77
  - DHCP Exclude Range Settings78
- IP/MAC Binding78
  - DHCP IP/MAC Binding Settings79
- Dynamic IP79
System Config81
- System Time81
- Options82
- Snmp98
- Replacement Messages107
  - Replacement Messages List107
  - Changing Replacement Messages108
- Fortimanager109
System Administration111
- Administrators112
  - Administrators List112
  - Administrators Options112
- Access Profiles114
  - Access Profile List114
  - Access Profile Options114
System Maintenance117
- Backup and Restore117
  - Backing up and Restoring118
- Update Center120
- Support128
  - Sending a Bug Report128
  - Registering a Fortigate Unit129
- Shutdown132
System Virtual Domain135
- Virtual Domain Properties136
- Virtual Domains138
- Configuring Virtual Domains140
Router145
- Static145
  - Static Route List147
  - Static Route Options148
- Policy149
  - Policy Route List149
  - Policy Route Options150
- Rip151
- Router Objects158
- Monitor166
  - Routing Monitor List166
- CLI Configuration167
Firewall193
- Policy194
- Address202
- Service206
- Schedule214
- Virtual IP218
- IP Pool223
- Protection Profile225
Users and Authentication237
- Setting Authentication Timeout238
- Local238
  - Local User List238
  - Local User Options238
- Radius239
  - RADIUS Server List239
  - RADIUS Server Options240
- Ldap240
  - LDAP Server List241
  - LDAP Server Options241
- User Group243
  - User Group List243
  - User Group Options244
- CLI Configuration245
  - Peer245
  - Peergrp246
Vpn249
- Phase 1250
  - Phase 1 List250
  - Phase 1 Basic Settings251
  - Phase 1 Advanced Options252
  - Configuring Xauth253
- Phase 2254
  - Phase 2 List254
  - Phase 2 Basic Settings255
  - Phase 2 Advanced Options256
- Manual Key257
  - Manual Key List258
  - Manual Key Options258
- Concentrator259
  - Concentrator List259
  - Concentrator Options260
- Ping Generator260
  - Ping Generator Options261
- Monitor261
  - Dialup Monitor262
  - Static IP and Dynamic DNS Monitor262
- Pptp263
  - Setting up a PPTP-Based VPN263
  - Enabling PPTP and Specifying a PPTP Range264
  - Configuring a Windows 2000 Client for PPTP265
  - Configuring a Windows XP Client for PPTP265
  - PPTP Passthrough266
- L2Tp267
  - Setting up a L2TP-Based VPN268
  - Enabling L2TP and Specifying an L2TP Range268
  - Configuring a Windows 2000 Client for L2TP269
  - Configuring a Windows XP Client for L2TP270
- Certificates272
  - Viewing the Certificate List273
  - Generating a Certificate Request273
  - Installing a Signed Certificate275
  - Enabling VPN Access for Specific Certificate Holders276
- CLI Configuration277
  - Ipsec Phase1277
  - Ipsec Phase2279
  - Ipsec Vip280
- Authenticating Peers with Preshared Keys282
- Gateway-To-Gateway VPN282
- Dialup VPN283
- Dynamic DNS VPN283
- Manual Key Ipsec VPN284
- Adding Firewall Policies for Ipsec VPN Tunnels284
  - Setting the Encryption Policy Direction284
  - Setting the Source Address for Encrypted Traffic284
  - Setting the Destination Address for Encrypted Traffic285
  - Adding an Ipsec Firewall Encryption Policy285
- Internet Browsing through a VPN Tunnel285
  - Configuring Internet Browsing through a VPN Tunnel286
- Ipsec VPN in Transparent Mode287
  - Special Rules287
- Hub and Spoke Vpns288
  - Configuring the Hub288
  - Adding a Vpn Concentrator289
  - Configuring Spokes290
- Redundant Ipsec Vpns291
  - Configuring Redundant Ipsec Vpns291
- Configuring Ipsec Virtual IP Addresses292
- Troubleshooting294
Ips295
- Signature296
  - Predefined296
  - Custom300
    - Adding Custom Signatures301
    - Backing up and Restoring Custom Signature Files301
- Anomaly302
  - Configuring an Anomaly303
  - Anomaly CLI Configuration305
- Configuring IPS Logging and Alert Email306
- Default Fail Open Setting306
Antivirus307
- File Block308
  - File Block List309
  - Configuring the File Block List310
- Quarantine310
- Config314
- CLI Configuration316
Web Filter325
- Content Block327
- URL Block328
- URL Exempt331
- Category Block333
- Script Filter338
  - Web Script Filter Options338
Spam Filter339
- Order of Spam Filter Operations341
- IP Address342
- Rbl & Ordbl343
- Email Address345
- MIME Headers346
- Banned Word348
- Using Perl Regular Expressions350
Log & Report353
- Log Config354
- Log Access364
- CLI Configuration369
  - Fortilog Setting369
  - Syslogd Setting370
Fortiguard Categories373
Fortigate Maximum Values379
Glossary383
Index387

Other manuals for Fortinet FortiGate FortiGate-500

Quick Start Guide2 pages

Installation Guide60 pages

Related product manuals

Preview: Fortinet FortiGate FortiGate-50

Fortinet FortiGate FortiGate-50

Preview: Fortinet FortiGate FortiGate-50B

Fortinet FortiGate FortiGate-50B

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate 500D

Fortinet FortiGate 500D

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 300C

Fortinet FortiGate 300C

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Preview: Fortinet FortiGate FortiGate-60

Fortinet FortiGate FortiGate-60

Preview: Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-100

Preview: FortiGate FortiGate-3000

FortiGate FortiGate-3000

Preview: FortiGate FortiGate-3016B

FortiGate FortiGate-3016B