Fortinet FortiGate FortiGate-60 - Administration Guide Manual

Fortinet FortiGate FortiGate-60

388 pages

To Next Page

To Next Page

Loading...

FortiGate 60

Administration Guide

INTERNAL

DMZ4321

LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100

WAN1 WAN2

PWR STATUS

FortiGate-60 Administration Guide

Version 2.80 MR6

5 November 2004

01-28006-0002-20041105

Table of Contents

Default Chapter3
- Table of Contents3
Introduction13
- About Fortigate Antivirus Firewalls13
- Document Conventions20
- Fortigate Documentation22
  - Comments on Fortinet Technical Documentation22
- Related Documentation22
- Customer Service and Technical Support24
System Status25
- Console Access25
- Status26
  - Viewing System Status26
  - Changing Unit Information29
- Session List31
- Changing the Fortigate Firmware32
System Network43
- Interface43
  - Interface Settings44
  - Configuring Interfaces49
- Zone53
  - Zone Settings54
- Management55
- Dns56
- Routing Table (Transparent Mode)57
  - Routing Table List57
  - Transparent Mode Route Settings58
- Configuring the Modem Interface59
  - Connecting a Modem to the Fortigate Unit59
- Fortigate60
System DHCP73
- Service73
  - DHCP Service Settings74
- Server75
  - DHCP Server Settings76
- Exclude Range77
  - DHCP Exclude Range Settings78
- IP/MAC Binding78
  - DHCP IP/MAC Binding Settings79
- Dynamic IP79
System Config81
- System Time81
- Options82
- Snmp97
- Replacement Messages106
  - Replacement Messages List106
  - Changing Replacement Messages107
- Fortimanager108
System Administration109
- Administrators109
  - Administrators List110
  - Administrators Options110
- Access Profiles111
  - Access Profile List112
  - Access Profile Options112
System Maintenance115
- Backup and Restore115
  - Backing up and Restoring116
- Update Center118
- Support125
  - Sending a Bug Report126
  - Registering a Fortigate Unit127
- Shutdown129
System Virtual Domain131
- Virtual Domain Properties132
- Virtual Domains134
- Configuring Virtual Domains136
Router141
- Static141
  - Static Route List143
  - Static Route Options144
- Policy145
  - Policy Route List145
  - Policy Route Options146
- Rip146
- Router Objects154
- Monitor162
  - Routing Monitor List162
- CLI Configuration163
Firewall189
- Policy190
- Address198
- Service202
- Schedule210
- Virtual IP214
- IP Pool218
- Protection Profile221
Users and Authentication233
- Setting Authentication Timeout234
- Local234
  - Local User List234
  - Local User Options234
- Radius235
  - RADIUS Server List235
  - RADIUS Server Options236
- Ldap237
  - LDAP Server List237
  - LDAP Server Options237
- User Group239
  - User Group List239
  - User Group Options240
- CLI Configuration241
  - Peer241
  - Peergrp242
Vpn245
- Phase 1246
  - Phase 1 List246
  - Phase 1 Basic Settings247
  - Phase 1 Advanced Options248
  - Configuring Xauth249
- Phase 2250
  - Phase 2 List250
  - Phase 2 Basic Settings251
  - Phase 2 Advanced Options252
- Manual Key253
  - Manual Key List254
  - Manual Key Options254
- Concentrator255
  - Concentrator List255
  - Concentrator Options256
- Ping Generator256
  - Ping Generator Options257
- Monitor257
  - Dialup Monitor258
  - Static IP and Dynamic DNS Monitor258
- Pptp259
  - Setting up a PPTP-Based VPN259
  - Enabling PPTP and Specifying a PPTP Range260
  - Configuring a Windows 2000 Client for PPTP261
  - Configuring a Windows XP Client for PPTP261
  - PPTP Passthrough262
- L2Tp263
  - Setting up a L2TP-Based VPN264
  - Enabling L2TP and Specifying an L2TP Range264
  - Configuring a Windows 2000 Client for L2TP265
  - Configuring a Windows XP Client for L2TP266
- Certificates268
  - Viewing the Certificate List269
  - Generating a Certificate Request269
  - Installing a Signed Certificate271
  - Enabling VPN Access for Specific Certificate Holders272
- CLI Configuration273
  - Ipsec Phase1273
  - Ipsec Phase2275
  - Ipsec Vip276
- Authenticating Peers with Preshared Keys278
- Gateway-To-Gateway VPN278
- Dialup VPN279
- Dynamic DNS VPN279
- Manual Key Ipsec VPN280
- Adding Firewall Policies for Ipsec VPN Tunnels280
  - Setting the Encryption Policy Direction280
  - Setting the Source Address for Encrypted Traffic280
  - Setting the Destination Address for Encrypted Traffic281
  - Adding an Ipsec Firewall Encryption Policy281
- Internet Browsing through a VPN Tunnel281
  - Configuring Internet Browsing through a VPN Tunnel282
- Ipsec VPN in Transparent Mode283
  - Special Rules283
- Hub and Spoke Vpns284
  - Configuring the Hub284
  - Adding a Vpn Concentrator285
  - Configuring Spokes286
- Redundant Ipsec Vpns287
  - Configuring Redundant Ipsec Vpns287
- Configuring Ipsec Virtual IP Addresses288
- Troubleshooting290
Ips291
- Signature292
  - Predefined292
  - Custom296
    - Adding Custom Signatures297
    - Backing up and Restoring Custom Signature Files297
- Anomaly298
- Configuring IPS Logging and Alert Email302
- Default Fail Open Setting302
Antivirus303
- File Block304
  - File Block List305
  - Configuring the File Block List306
- Quarantine306
- Config310
- CLI Configuration312
Web Filter321
- Content Block322
- URL Block324
- URL Exempt327
- Category Block329
- Script Filter333
  - Web Script Filter Options334
Spam Filter335
- Order of Spam Filter Operations337
- IP Address338
- Rbl & Ordbl339
- Email Address341
- MIME Headers342
- Banned Word344
- Using Perl Regular Expressions346
Log & Report349
- Log Config350
- Log Access360
  - Viewing Log Messages360
  - Searching Log Messages362
- CLI Configuration363
  - Fortilog Setting363
  - Syslogd Setting364
Fortiguard Categories367
Fortigate Maximum Values373
Glossary377
Index381

Other manuals for Fortinet FortiGate FortiGate-60

Quick Start Guide2 pages

Install Guide64 pages

Related product manuals

Preview: Fortinet FortiGate 60M

Fortinet FortiGate 60M

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate 300C

Fortinet FortiGate 300C

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Preview: Fortinet FortiGate FortiGate-50

Fortinet FortiGate FortiGate-50

Preview: Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-100

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A

Preview: FortiGate FortiGate-100A

FortiGate FortiGate-100A

FortiGate FortiGate-4000