Fortinet FortiGate Series Administration Guide

Contents
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 13
http://docs.fortinet.com/ • Feedback
Customizable routing widgets ................................................................................... 377
Access List.............................................................................................................. 377
Distribute List.......................................................................................................... 378
Key Chain ............................................................................................................... 378
Offset List................................................................................................................ 379
Prefix List................................................................................................................ 380
Route Map .............................................................................................................. 380
Router Monitor ..................................................................................... 383
Viewing routing information ...................................................................................... 383
Searching the FortiGate routing table....................................................................... 385
Firewall Policy ...................................................................................... 387
How list order affects policy matching ..................................................................... 387
Moving a policy to a different position in the policy list ........................................... 388
Enabling and disabling policies............................................................................... 389
Multicast policies ........................................................................................................ 389
Viewing the firewall policy list ................................................................................... 390
Configuring firewall policies ...................................................................................... 391
Adding authentication to firewall policies ................................................................ 396
Identity-based firewall policy options (non-SSL-VPN) ............................................ 397
IPSec firewall policy options ................................................................................... 399
Configuring SSL VPN identity-based firewall policies............................................. 400
Using DoS policies to detect and prevent attacks................................................... 404
Viewing the DoS policy list...................................................................................... 404
Configuring DoS policies ........................................................................................ 406
Using one-arm sniffer policies to detect network attacks ...................................... 406
Viewing the sniffer policy list................................................................................... 407
Configuring sniffer policies...................................................................................... 409
How FortiOS selects unused NAT ports ................................................................... 410
Global pool.............................................................................................................. 411
Global per-protocol pool ......................................................................................... 411
Per NAT IP pool...................................................................................................... 411
Per NAT IP, destination IP, port, and protocol pool ................................................ 412
Firewall policy examples ............................................................................................ 414
Scenario one: SOHO-sized business ..................................................................... 414
Scenario two: enterprise-sized business ................................................................ 417
Firewall Address .................................................................................. 421
About firewall addresses............................................................................................ 421
Viewing the firewall address list................................................................................ 422
Configuring addresses ............................................................................................... 423
Viewing the address group list .................................................................................. 424

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount