Fortinet FortiGate FortiGate-800 Administration Guide

Fortinet FortiGate FortiGate-800

392 pages

To Next Page

To Next Page

Page #1 background image

Loading...

Page #1 background image

FortiGate 800

Administration Guide

Esc Enter

CONSOLE

INTERNAL EXTERNAL DMZ HA 123

4 USB

8

PWR

FortiGate-800 Administration Guide

Version 2.80 MR6

5 November 2004

01-28006-0008-20041105

Table of Contents

Default Chapter3
- Table of Contents3
Introduction13
- About Fortigate Antivirus Firewalls13
- Document Conventions20
- Fortigate Documentation21
  - Comments on Fortinet Technical Documentation21
- Related Documentation22
- Customer Service and Technical Support23
System Status25
- Console Access25
- Status26
  - Viewing System Status26
  - Changing Unit Information29
- Session List31
- Changing the Fortigate Firmware32
System Network47
- Interface47
  - Interface Settings49
  - Configuring Interfaces54
- Zone58
  - Zone Settings58
- Management60
- Dns61
- Routing Table (Transparent Mode)61
  - Routing Table List61
  - Transparent Mode Route Settings62
- VLAN Overview62
  - Fortigate Units and Vlans63
- Vlans in Nat/Route Mode64
- Vlans in Transparent Mode66
- Fortigate Ipv6 Support71
System DHCP73
- Service73
  - DHCP Service Settings74
- Server75
  - DHCP Server Settings76
- Exclude Range77
  - DHCP Exclude Range Settings78
- IP/MAC Binding78
  - DHCP IP/MAC Binding Settings79
- Dynamic IP79
System Config81
- System Time81
- Options82
- Snmp98
- Replacement Messages107
  - Replacement Messages List107
  - Changing Replacement Messages108
- Fortimanager109
System Administration111
- Administrators112
  - Administrators List112
  - Administrators Options112
- Access Profiles114
  - Access Profile List114
  - Access Profile Options114
System Maintenance117
- Backup and Restore117
  - Backing up and Restoring118
- Update Center120
- Support128
  - Sending a Bug Report128
  - Registering a Fortigate Unit129
- Shutdown132
System Virtual Domain135
- Virtual Domain Properties136
- Virtual Domains138
- Configuring Virtual Domains140
Router145
- Static145
  - Static Route List147
  - Static Route Options148
- Policy149
  - Policy Route List149
  - Policy Route Options150
- Rip151
- Router Objects158
- Monitor166
  - Routing Monitor List166
- CLI Configuration167
Firewall193
- Policy194
- Address202
- Service206
- Schedule214
- Virtual IP218
- IP Pool222
- Protection Profile225
Users and Authentication237
- Setting Authentication Timeout238
- Local238
  - Local User List238
  - Local User Options238
- Radius239
  - RADIUS Server List239
  - RADIUS Server Options240
- Ldap241
  - LDAP Server List241
  - LDAP Server Options241
- User Group243
  - User Group List243
  - User Group Options244
- CLI Configuration245
  - Peer245
  - Peergrp246
Vpn247
- Phase 1248
  - Phase 1 List248
  - Phase 1 Basic Settings249
  - Phase 1 Advanced Options250
  - Configuring Xauth251
- Phase 2252
  - Phase 2 List252
  - Phase 2 Basic Settings253
  - Phase 2 Advanced Options254
- Manual Key255
  - Manual Key List256
  - Manual Key Options256
- Concentrator257
  - Concentrator List257
  - Concentrator Options258
- Ping Generator258
  - Ping Generator Options259
- Monitor259
  - Dialup Monitor260
  - Static IP and Dynamic DNS Monitor260
- Pptp261
  - Setting up a PPTP-Based VPN261
  - Enabling PPTP and Specifying a PPTP Range262
  - Configuring a Windows 2000 Client for PPTP263
  - Configuring a Windows XP Client for PPTP263
  - PPTP Passthrough264
- L2Tp265
  - Setting up a L2TP-Based VPN266
  - Enabling L2TP and Specifying an L2TP Range266
  - Configuring a Windows 2000 Client for L2TP267
  - Configuring a Windows XP Client for L2TP268
- Certificates270
  - Viewing the Certificate List271
  - Generating a Certificate Request271
  - Installing a Signed Certificate273
  - Enabling VPN Access for Specific Certificate Holders274
- CLI Configuration275
  - Ipsec Phase1275
  - Ipsec Phase2277
  - Ipsec Vip278
- Authenticating Peers with Preshared Keys280
- Gateway-To-Gateway VPN280
- Dialup VPN281
- Dynamic DNS VPN281
- Manual Key Ipsec VPN282
- Adding Firewall Policies for Ipsec VPN Tunnels282
  - Setting the Encryption Policy Direction282
  - Setting the Source Address for Encrypted Traffic282
  - Setting the Destination Address for Encrypted Traffic283
  - Adding an Ipsec Firewall Encryption Policy283
- Internet Browsing through a VPN Tunnel283
  - Configuring Internet Browsing through a VPN Tunnel284
- Ipsec VPN in Transparent Mode285
  - Special Rules285
- Hub and Spoke Vpns286
  - Configuring the Hub286
  - Adding a Vpn Concentrator287
  - Configuring Spokes288
- Redundant Ipsec Vpns289
  - Configuring Redundant Ipsec Vpns289
- Configuring Ipsec Virtual IP Addresses290
- Troubleshooting292
Ips293
- Signature294
  - Predefined294
  - Custom298
    - Adding Custom Signatures299
    - Backing up and Restoring Custom Signature Files299
- Anomaly300
  - Configuring an Anomaly301
  - Anomaly CLI Configuration303
- Configuring IPS Logging and Alert Email304
- Default Fail Open Setting304
Antivirus305
- File Block306
  - File Block List307
  - Configuring the File Block List308
- Quarantine308
- Config312
- CLI Configuration314
Web Filter323
- Content Block325
- URL Block326
- URL Exempt329
- Category Block331
- Script Filter336
  - Web Script Filter Options336
Spam Filter337
- Order of Spam Filter Operations339
- IP Address340
- Rbl & Ordbl341
- Email Address343
- MIME Headers344
- Banned Word346
- Using Perl Regular Expressions348
Log & Report351
- Log Config352
- Log Access362
- CLI Configuration367
  - Fortilog Setting367
  - Syslogd Setting368
Fortiguard Categories371
Fortigate Maximum Values377
Glossary381
Index385

Other manuals for Fortinet FortiGate FortiGate-800

Quick Start Guide2 pages

Installation And Configuration Guide336 pages

Install Guide56 pages

Questions and Answers:

C
Christopher WiseJul 30, 2025
What to do if Perfect Forward Secrecy (PFS) is not enabled on Fortinet FortiGate FortiGate-800?
- C
  Craig BriggsJul 30, 2025
  If Perfect Forward Secrecy (PFS) is required but not enabled on your Fortinet Firewall, enable PFS to resolve the issue.
M
Melinda MitchellAug 7, 2025
What to do if the Fortinet FortiGate FortiGate-800 Firewall policy has wrong source and destination addresses?
- L
  Lisa ByrdAug 7, 2025
  If you're experiencing issues with your Fortinet Firewall due to incorrect source and destination addresses in the firewall policy, re-enter the correct source and destination addresses.

Fortinet FortiGate FortiGate-800 Specifications

General

Brand	Fortinet
Model	FortiGate FortiGate-800
Category	Firewall
Language	English

Related product manuals

Preview: Fortinet FortiGate-80C

Fortinet FortiGate-80C

Preview: Fortinet FortiGate FG-80C

Fortinet FortiGate FG-80C

Preview: Fortinet FortiGate

Fortinet FortiGate

Preview: Fortinet FortiGate 50A

Fortinet FortiGate 50A

Preview: Fortinet FortiGate 300C

Fortinet FortiGate 300C

Preview: Fortinet FortiGate 1000D

Fortinet FortiGate 1000D

Preview: Fortinet FortiGate Series

Fortinet FortiGate Series

Fortinet FortiGate FortiGate-500

Fortinet FortiGate FortiGate-100

Preview: FortiGate FortiGate-3000

FortiGate FortiGate-3000

Preview: FortiGate FortiGate-200A

FortiGate FortiGate-200A

Preview: FortiGate FortiGate-3016B

FortiGate FortiGate-3016B