Fortinet MR8 manual Introduction, Secure installation, configuration, and management

Page 5
LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100

FortiGate-60 Installation Guide Version 2.80 MR8

Introduction

FortiGate Antivirus Firewalls improve network security, reduce network misuse and abuse, and help you use communications resources more efficiently without compromising the performance of your network. FortiGate Antivirus Firewalls are ICSA-certified for firewall, IPSec, and antivirus services.

The FortiGate Antivirus Firewall is a dedicated easily managed security device that delivers a full suite of capabilities that include:

application-level services such as virus protection and content filtering,

network-level services such as firewall, intrusion detection, VPN, and traffic shaping.

The FortiGate Antivirus Firewall uses Fortinet’s Accelerated Behavior and Content Analysis System (ABACAS™) technology, which leverages breakthroughs in chip design, networking, security, and content analysis. The unique ASIC-based architecture analyzes content and behavior in real-time, enabling key applications to be deployed right at the network edge where they are most effective at protecting your networks.

The FortiGate-60 model is ideally

 

 

suited for small businesses, remote

 

 

offices, retail stores, and

PWR STATUS

1 2 3 4 DMZ WAN1 WAN2

 

 

INTERNAL

telecommuters. The FortiGate-60 Antivirus Firewall features dual WAN

link support for redundant internet

connections, and an integrated 4-port switch that eliminates the need for an external hub or switch. Networked devices connect directly to the FortiGate-60 unit.

The FortiGate-60 also supports advanced features such as 802.1Q VLANs, virtual domains, high availability (HA), and the RIP and OSPF routing protocols.

Secure installation, configuration, and management

The FortiGate unit default configuration includes a default firewall policy and IP addresses and is only a few steps away from protecting your network. There are several ways to configure basic FortiGate settings:

the web-based manager,

the command line interface (CLI), or

the setup wizard.

FortiGate-60 Installation Guide

01-28008-0018-20050128

5

Image 5
Contents January 01-28008-0018-20050128 Installation GuideRegulatory Compliance TrademarksTable of Contents Index Introduction Secure installation, configuration, and managementWeb-based manager Command line interfaceDocument conventions Setup wizardFortiGate documentation FortiGate Installation GuideFortinet Knowledge Center Related documentationComments on Fortinet technical documentation FortiManager documentationFortiLog documentation Customer service and technical supportFortiMail documentation Customer service and technical support Customer service and technical support Getting started Mounting Package contentsPower requirements Turning the FortiGate unit power on and offEnvironmental specifications To power on the FortiGate unitTo connect to the web-based manager Connecting to the web-based managerTo connect to the CLI Connecting to the command line interface CLIBits per second 9600 Data bits Parity Stop bits Flow controlGo to System Network DNS Quick installation using factory defaultsFactory default Dhcp server configuration Factory default FortiGate configuration settingsFactory default NAT/Route mode network configuration Factory default firewall configuration Factory default Transparent mode network configurationAdministrative access Management IPScan Factory default protection profilesStrict NAT/Route mode Planning the FortiGate configurationExample NAT/Route mode network configuration NAT/Route mode with multiple external network connectionsExample NAT/Route multiple internet connection configuration Transparent modeNext steps Configuration optionsWeb-based manager and setup wizard Preparing to configure the FortiGate unit in NAT/Route mode NAT/Route mode installationPPPoE settings User name Password Using the web-based managerDhcp or PPPoE configuration To configure interfaces Go to System Network Interface Configuring basic settingsTo configure DNS server settings Go to System Network DNS To add a default routeConfiguring the FortiGate unit to operate in NAT/Route mode Using the command line interfaceTo add/change the administrator password To configure interfacesGet system interface ExampleTo configure DNS server settings Using the setup wizardExternal Interface Setup wizard settings PasswordDhcp server Internal serversSetup wizard settings Antivirus Connecting the FortiGate unit to the networksStarting the setup wizard FortiGate-60 FortiGate-60 NAT/Route mode connectionsConfiguring the Modem interface Configuring the networksTo configure virus, attack, and spam definition updates Go to System Config TimeTo set the date and time To register the FortiGate unitGo to System Maintenance Update Center Preparing to configure Transparent mode Transparent mode installationManagement IP To change the Management IP Go to System Network ManagementTo change to Transparent mode using the CLI Reconnecting to the web-based managerTo configure the default gateway To configure the management IP addressTo start the setup wizard Internal Connecting the FortiGate unit to your networkTo register your FortiGate unit Go to System Maintenance Update Center Configuring FortiGate units for HA operation High availability installationHigh availability configuration settings Priorities of heartbeat device and monitor prioritiesGroup ID MAC Address To change the FortiGate unit host name Config system global Set hostname namestr end Configuring FortiGate units for HA using the CLITo configure the FortiGate unit for HA operation Connecting the cluster to your networksTo connect the cluster HA network configurationInstalling and configuring the cluster Installing and configuring the cluster Redundant mode configuration Configuring the modem interfaceSelecting a modem mode To operate in standalone mode Go to System Network Modem Standalone mode configurationMode Configuring modem settingsAuto-dial Redundant forTo connect to a dialup account Go to System Network Modem Connecting and disconnecting the modem in Standalone modeTo configure modem settings Go to System Network Modem Dead gateway detection Defining a Ping ServerTo disconnect the modem ISPAdding firewall policies for modem connections CLI IndexIndex