Fortinet FortiGate Series Administration Guide

Contents
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903 15
http://docs.fortinet.com/ • Feedback
IP pools ........................................................................................................................ 463
IP pools and dynamic NAT ..................................................................................... 464
IP Pools for firewall policies that use fixed ports..................................................... 464
Source IP address and IP pool address matching.................................................. 464
Viewing the IP pool list ............................................................................................... 465
Configuring IP Pools................................................................................................... 465
Double NAT: combining IP pool with virtual IP........................................................ 466
Adding NAT firewall policies in transparent mode .................................................. 468
Firewall Load Balance ......................................................................... 471
How load balancer works ........................................................................................... 471
Configuring virtual servers ........................................................................................ 472
Configuring real servers............................................................................................. 475
Configuring health check monitors........................................................................... 476
Monitoring the servers ............................................................................................... 478
Firewall Protection Profile................................................................... 479
What is a protection profile?...................................................................................... 479
Adding a protection profile to a firewall policy ........................................................ 480
Default protection profiles ......................................................................................... 480
Viewing the protection profile list ............................................................................. 481
SSL content scanning and inspection ...................................................................... 481
Supported FortiGate models................................................................................... 482
Setting up certificates to avoid client warnings....................................................... 482
Configuring SSL content scanning and inspection ................................................. 484
Configuring a protection profile ................................................................................ 486
Protocol recognition options ................................................................................... 487
Anti-Virus options.................................................................................................... 489
IPS options ............................................................................................................. 492
Web Filtering options.............................................................................................. 493
FortiGuard Web Filtering options............................................................................ 495
Email Filtering options ............................................................................................ 498
Data Leak Prevention Sensor options .................................................................... 501
Application Control options..................................................................................... 502
Logging options ...................................................................................................... 503
SIP support........................................................................................... 505
VoIP and SIP ................................................................................................................ 505
The FortiGate unit and VoIP security ........................................................................ 507
SIP NAT.................................................................................................................. 507
How SIP support works .............................................................................................. 509

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount