Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

336 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

IPSec VPN AutoIKE IPSec VPNs

FortiGate-800 Installation and Configuration Guide 239

Figure 56: Adding a phase 1 configuration (Standard options)

Figure 57: Adding a phase 1 configuration (Advanced options)

Table of Contents

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction15
- Antivirus Protection16
- Web Content Filtering16
- Email Filtering17
- Firewall17
  - Nat/Route Mode18
  - Transparent Mode18
- Vlans and Virtual Domains18
- Network Intrusion Detection18
- Vpn19
- High Availability19
- Secure Installation, Configuration, and Management20
- Document Conventions22
- Fortinet Documentation22
  - Comments on Fortinet Technical Documentation23
- Customer Service and Technical Support23
Getting Started25
- Package Contents26
- Mounting26
- Powering on27
- Connecting to the Web-Based Manager28
- Connecting to the Command Line Interface (CLI)29
- Factory Default Fortigate Configuration Settings30
- Planning the Fortigate Configuration36
- Fortigate Model Maximum Values Matrix39
- Next Steps40
Nat/Route Mode Installation41
- Preparing to Configure Nat/Route Mode41
  - Advanced Nat/Route Mode Settings42
  - DMZ and User-Defined Interfaces43
- Using the Setup Wizard43
  - Starting the Setup Wizard43
  - Reconnecting to the Web-Based Manager43
- Using the Front Control Buttons and LCD44
- Using the Command Line Interface44
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode44
- Connecting the Fortigate Unit to Your Networks46
- Configuring Your Networks48
- Completing the Configuration49
- Configuration Example: Multiple Connections to the Internet50
Transparent Mode Installation59
- Preparing to Configure Transparent Mode59
- Using the Setup Wizard60
- Using the Front Control Buttons and LCD61
- Using the Command Line Interface61
- Completing the Configuration62
- Connecting the Fortigate Unit to Your Networks63
- Transparent Mode Configuration Examples64
High Availability73
- Configuring an HA Cluster74
- Managing an HA Cluster78
- Advanced HA Options87
- Active-Active Cluster Packet Flow89
System Status93
- Changing the Fortigate Host Name94
- Changing the Fortigate Firmware94
- Manual Virus Definition Updates106
- Manual Attack Definition Updates107
- Displaying the Fortigate Serial Number107
- Displaying the Fortigate up Time108
- Displaying Log Hard Disk Status108
- Backing up System Settings108
- Restoring System Settings108
- Restoring System Settings to Factory Defaults109
- Changing to Transparent Mode109
- Changing to Nat/Route Mode110
- Restarting the Fortigate Unit110
- Shutting down the Fortigate Unit110
- System Status111
- Session List114
Virus and Attack Definitions Updates and Registration117
- Updating Antivirus and Attack Definitions117
- Scheduling Updates120
- Enabling Push Updates122
- Registering Fortigate Units128
  - Forticare Service Contracts129
  - Registering the Fortigate Unit130
- Updating Registration Information131
- Registering a Fortigate Unit after an RMA136
Network Configuration137
- Configuring Zones137
  - Adding Zones138
  - Deleting Zones138
- Configuring Interfaces138
- VLAN Overview145
- Vlans in Nat/Route Mode146
- Virtual Domains in Transparent Mode147
- Adding DNS Server IP Addresses153
- Configuring Routing153
- Configuring DHCP Services157
  - Configuring a DHCP Relay Agent158
  - Configuring a DHCP Server158
RIP Configuration161
- RIP Settings161
- Configuring RIP for Fortigate Interfaces163
- Adding RIP Filters165
System Configuration169
- Setting System Date and Time169
- Changing System Options170
- Adding and Editing Administrator Accounts172
  - Adding New Administrator Accounts172
  - Editing Administrator Accounts173
- Configuring SNMP173
- Replacement Messages181
  - Customizing Replacement Messages182
  - Customizing Alert Emails183
Firewall Configuration185
- Default Firewall Configuration186
- Adding Firewall Policies189
  - Firewall Policy Options190
  - Traffic Shaping192
- Configuring Policy Lists195
- Addresses197
- Services200
- Schedules205
- Virtual Ips208
- IP Pools213
- IP/MAC Binding214
- Content Profiles218
Users and Authentication223
- Setting Authentication Timeout224
- Adding User Names and Configuring Authentication224
  - Deleting User Names from the Internal Database225
- Configuring RADIUS Support226
  - Adding RADIUS Servers226
  - Deleting RADIUS Servers226
- Configuring LDAP Support227
  - Adding LDAP Servers227
  - Deleting LDAP Servers228
- Configuring User Groups229
  - Adding User Groups229
  - Deleting User Groups230
Ipsec VPN231
- Key Management232
  - Manual Keys232
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates232
- Manual Key Ipsec Vpns233
  - General Configuration Steps for a Manual Key VPN233
  - Adding a Manual Key VPN Tunnel233
- Autoike Ipsec Vpns235
- Managing Digital Certificates242
  - Obtaining a Signed Local Certificate242
  - Obtaining CA Certificates245
- Configuring Encrypt Policies245
- Ipsec VPN Concentrators249
- Redundant Ipsec Vpns253
  - Configuring Redundant Ipsec Vpns254
- Monitoring and Troubleshooting Vpns255
PPTP and L2TP VPN257
- Configuring PPTP257
- Configuring L2TP263
Network Intrusion Detection System (NIDS)269
- Detecting Attacks269
- Preventing Attacks274
- Logging Attacks276
  - Logging Attack Messages to the Attack Log276
  - Reducing the Number of NIDS Attack Log and Email Messages276
Antivirus Protection279
- General Configuration Steps279
- Antivirus Scanning280
- File Blocking281
  - Blocking Files in Firewall Traffic282
  - Adding File Patterns to Block282
- Quarantine283
- Blocking Oversized Files and Emails286
  - Configuring Limits for Oversized Files and Email286
- Exempting Fragmented Email from Blocking287
- Viewing the Virus List287
Web Filtering289
- General Configuration Steps289
- Content Blocking290
- URL Blocking293
- Configuring Cerberian URL Filtering296
- Script Filtering299
  - Enabling Script Filtering299
  - Selecting Script Filter Options299
- Exempt URL List300
Email Filter303
- General Configuration Steps303
- Email Banned Word List304
- Email Block List306
- Email Exempt List307
  - Adding Address Patterns to the Email Exempt List308
- Adding a Subject Tag308
Logging and Reporting309
- Recording Logs309
- Filtering Log Messages313
- Configuring Traffic Logging314
- Viewing Logs Saved to Memory317
  - Viewing Logs317
  - Searching Logs318
- Viewing and Managing Logs Saved to the Hard Disk318
- Configuring Alert Email321
Glossary323
Index327

Other manuals for Fortinet FortiGate FortiGate-800

Quick Start Guide2 pages

Administration Guide392 pages

Install Guide56 pages

Related product manuals

Preview: Fortinet FortiGate-80C

Fortinet FortiGate-80C

Preview: Fortinet FortiGate FG-80C

Fortinet FortiGate FG-80C

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate 300C

Fortinet FortiGate 300C

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Fortinet FortiGate FortiGate-500

Fortinet FortiGate FortiGate-100

Preview: FortiGate FortiGate-3000

FortiGate FortiGate-3000

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A

Preview: FortiGate FortiGate-3016B

FortiGate FortiGate-3016B