Fortinet FortiGate FortiGate-800

Fortinet FortiGate FortiGate-800

336 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

278 Fortinet Inc.

Logging attacks Network Intrusion Detection System (NIDS)

Table of Contents

Default Chapter1
- Configuration Guide1
- Table of Contents3
Introduction15
- Antivirus Protection16
- Web Content Filtering16
- Email Filtering17
- Firewall17
  - Nat/Route Mode18
  - Transparent Mode18
- Vlans and Virtual Domains18
- Network Intrusion Detection18
- Vpn19
- High Availability19
- Secure Installation, Configuration, and Management20
- Document Conventions22
- Fortinet Documentation22
  - Comments on Fortinet Technical Documentation23
- Customer Service and Technical Support23
Getting Started25
- Package Contents26
- Mounting26
- Powering on27
- Connecting to the Web-Based Manager28
- Connecting to the Command Line Interface (CLI)29
- Factory Default Fortigate Configuration Settings30
- Planning the Fortigate Configuration36
- Fortigate Model Maximum Values Matrix39
- Next Steps40
Nat/Route Mode Installation41
- Preparing to Configure Nat/Route Mode41
  - Advanced Nat/Route Mode Settings42
  - DMZ and User-Defined Interfaces43
- Using the Setup Wizard43
  - Starting the Setup Wizard43
  - Reconnecting to the Web-Based Manager43
- Using the Front Control Buttons and LCD44
- Using the Command Line Interface44
  - Configuring the Fortigate Unit to Operate in Nat/Route Mode44
- Connecting the Fortigate Unit to Your Networks46
- Configuring Your Networks48
- Completing the Configuration49
- Configuration Example: Multiple Connections to the Internet50
Transparent Mode Installation59
- Preparing to Configure Transparent Mode59
- Using the Setup Wizard60
- Using the Front Control Buttons and LCD61
- Using the Command Line Interface61
- Completing the Configuration62
- Connecting the Fortigate Unit to Your Networks63
- Transparent Mode Configuration Examples64
High Availability73
- Configuring an HA Cluster74
- Managing an HA Cluster78
- Advanced HA Options87
- Active-Active Cluster Packet Flow89
System Status93
- Changing the Fortigate Host Name94
- Changing the Fortigate Firmware94
- Manual Virus Definition Updates106
- Manual Attack Definition Updates107
- Displaying the Fortigate Serial Number107
- Displaying the Fortigate up Time108
- Displaying Log Hard Disk Status108
- Backing up System Settings108
- Restoring System Settings108
- Restoring System Settings to Factory Defaults109
- Changing to Transparent Mode109
- Changing to Nat/Route Mode110
- Restarting the Fortigate Unit110
- Shutting down the Fortigate Unit110
- System Status111
- Session List114
Virus and Attack Definitions Updates and Registration117
- Updating Antivirus and Attack Definitions117
- Scheduling Updates120
- Enabling Push Updates122
- Registering Fortigate Units128
  - Forticare Service Contracts129
  - Registering the Fortigate Unit130
- Updating Registration Information131
- Registering a Fortigate Unit after an RMA136
Network Configuration137
- Configuring Zones137
  - Adding Zones138
  - Deleting Zones138
- Configuring Interfaces138
- VLAN Overview145
- Vlans in Nat/Route Mode146
- Virtual Domains in Transparent Mode147
- Adding DNS Server IP Addresses153
- Configuring Routing153
- Configuring DHCP Services157
  - Configuring a DHCP Relay Agent158
  - Configuring a DHCP Server158
RIP Configuration161
- RIP Settings161
- Configuring RIP for Fortigate Interfaces163
- Adding RIP Filters165
System Configuration169
- Setting System Date and Time169
- Changing System Options170
- Adding and Editing Administrator Accounts172
  - Adding New Administrator Accounts172
  - Editing Administrator Accounts173
- Configuring SNMP173
- Replacement Messages181
  - Customizing Replacement Messages182
  - Customizing Alert Emails183
Firewall Configuration185
- Default Firewall Configuration186
- Adding Firewall Policies189
  - Firewall Policy Options190
  - Traffic Shaping192
- Configuring Policy Lists195
- Addresses197
- Services200
- Schedules205
- Virtual Ips208
- IP Pools213
- IP/MAC Binding214
- Content Profiles218
Users and Authentication223
- Setting Authentication Timeout224
- Adding User Names and Configuring Authentication224
  - Deleting User Names from the Internal Database225
- Configuring RADIUS Support226
  - Adding RADIUS Servers226
  - Deleting RADIUS Servers226
- Configuring LDAP Support227
  - Adding LDAP Servers227
  - Deleting LDAP Servers228
- Configuring User Groups229
  - Adding User Groups229
  - Deleting User Groups230
Ipsec VPN231
- Key Management232
  - Manual Keys232
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates232
- Manual Key Ipsec Vpns233
  - General Configuration Steps for a Manual Key VPN233
  - Adding a Manual Key VPN Tunnel233
- Autoike Ipsec Vpns235
- Managing Digital Certificates242
  - Obtaining a Signed Local Certificate242
  - Obtaining CA Certificates245
- Configuring Encrypt Policies245
- Ipsec VPN Concentrators249
- Redundant Ipsec Vpns253
  - Configuring Redundant Ipsec Vpns254
- Monitoring and Troubleshooting Vpns255
PPTP and L2TP VPN257
- Configuring PPTP257
- Configuring L2TP263
Network Intrusion Detection System (NIDS)269
- Detecting Attacks269
- Preventing Attacks274
- Logging Attacks276
  - Logging Attack Messages to the Attack Log276
  - Reducing the Number of NIDS Attack Log and Email Messages276
Antivirus Protection279
- General Configuration Steps279
- Antivirus Scanning280
- File Blocking281
  - Blocking Files in Firewall Traffic282
  - Adding File Patterns to Block282
- Quarantine283
- Blocking Oversized Files and Emails286
  - Configuring Limits for Oversized Files and Email286
- Exempting Fragmented Email from Blocking287
- Viewing the Virus List287
Web Filtering289
- General Configuration Steps289
- Content Blocking290
- URL Blocking293
- Configuring Cerberian URL Filtering296
- Script Filtering299
  - Enabling Script Filtering299
  - Selecting Script Filter Options299
- Exempt URL List300
Email Filter303
- General Configuration Steps303
- Email Banned Word List304
- Email Block List306
- Email Exempt List307
  - Adding Address Patterns to the Email Exempt List308
- Adding a Subject Tag308
Logging and Reporting309
- Recording Logs309
- Filtering Log Messages313
- Configuring Traffic Logging314
- Viewing Logs Saved to Memory317
  - Viewing Logs317
  - Searching Logs318
- Viewing and Managing Logs Saved to the Hard Disk318
- Configuring Alert Email321
Glossary323
Index327

Other manuals for Fortinet FortiGate FortiGate-800

Quick Start Guide2 pages

Administration Guide392 pages

Install Guide56 pages

Related product manuals

Preview: Fortinet FortiGate-80C

Fortinet FortiGate-80C

Preview: Fortinet FortiGate FG-80C

Fortinet FortiGate FG-80C

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate 300C

Fortinet FortiGate 300C

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Fortinet FortiGate FortiGate-500

Fortinet FortiGate FortiGate-100

Preview: FortiGate FortiGate-3000

FortiGate FortiGate-3000

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A

Preview: FortiGate FortiGate-3016B

FortiGate FortiGate-3016B