Fortinet 620B manual Logging

Page 38

Logging

Advanced configuration

To configure content blocking, go to Web Filter > Content Block.

URL filter enables you to control additional web sites that you can block or allow. This enables you greater control over certain URLs or sub-URLs. The FortiGate unit allows or blocks web pages matching any specified URLs or patterns and displays a replacement message instead.

To configure URL filters, go to Web Filter > URL Filter.

FortiGuard web filtering is a managed web filtering solution provided by Fortinet. FortiGuard web filtering sorts hundreds of millions of web pages into a wide range of categories users can allow, block, or monitor. FortiGuard web filtering includes over 60 million individual ratings of web sites applying to hundreds of millions of pages. Pages are sorted and rated into 56 categories users can allow, block, or monitor. Categories may be added to, or updated, as the Internet evolves. You need to have a FortiGuard subscription to take advantage of FortiGuard web filtering.

The FortiGate unit also enables you to override the FortiGuard filtering designation, and you can add your own. To customize your FortiGuard web filtering, go to Web Filter > FortiGuard - Web Filter.

For details and configuration options for the web filtering features and settings, see the FortiGate Administration Guide or the FortiGate Online Help.

Logging

Logging is an indirect method of protecting your network. The FortiGate unit’s robust logging features enable you to see the attacks, spam and virus activity is occurring on your network. Using this information, you can then take the corrective action necessary to resolve any problems before they become major problems.

With alert email, you can configure the FortiGate unit to send alert messages, when specific events occur with specific frequency. By logging to a FortiAnalyzer unit, you can run over 300 reports on various network traffic.

To configure logging, go to Log&Report > Log Setting.

For details and configuration options for the logging features and settings, see the FortiGate Administration Guide or the FortiGate Online Help.

 

FortiGate-620B FortiOS 3.0 MR6 Install Guide

38

01-30006-83054-20081015

Image 38
Contents Install G U I D E Trademarks Regulatory complianceContents Advanced configuration AMC modulesTesting new firmware before installing Using the web-based managerInstalling firmware from a system reboot using the CLI FortiGate FirmwarePage Introduction Register your FortiGate unitAbout this document Lacp configurationAbout the FortiGate-620B Typographic conventions Further ReadingDocument conventions Addressipv4FortiGate Administration Guide Fortinet Knowledge CenterCustomer service and technical support Comments on Fortinet technical documentationCustomer service and technical support Installing Environmental specificationsGrounding Rack mount instructionsTo install the FortiGate unit into a rack MountingTo power off the FortiGate unit Connecting to the networkTo power on the FortiGate unit Plugging in the FortiGateNAT mode ConfiguringNAT vs. Transparent mode Connecting to the web-based manager Connecting to the FortiGate unitTransparent mode To connect to the web-based managerConnecting to the CLI To connect to the CLIConfigure the interfaces Configuring NAT modeUsing the web-based manager To configure interfaces Go to System Network InterfaceConfigure a DNS server Adding a default route and gatewayTo modify the default gateway Go to Router Static Adding firewall policiesTo set an interface to use Dhcp addressing Using the CLITo set an interface to use a static address To configure DNS server settings To set an interface to use PPPoE addressingTo modify the default gateway To add an outgoing traffic firewall policyTo switch to Transparent mode Go to System Status Configuring Transparent modeSwitching to Transparent mode Source Address All Destination Interface To switch to Transparent mode Verify the configuration Backing up the configurationSet the Administrator password Restoring a configurationAdditional configuration Set the time and dateConfigure FortiGuard Updating antivirus and IPS signaturesAdditional configuration Advanced configuration Protection profilesFirewall policies Firewall policiesConfiguring firewall policies Antivirus optionsAntiSpam options Web filtering Logging To install the filler module Installing AMC filler unitsInstalling modules AMC modulesHard disk module Using the AMC modulesRemoving modules To insert a module into a FortiGate chassisFormatting the hard disk Log configuration using the web-based managerTo format the ASM-S08 hard disk enter the following command Execute formatlogdiskFortiAnalyzer command config log disk setting enable Log configuration using the CLIChanging interfaces to operate in Sgmii or SerDes mode Viewing logsConfigure the speed Config system interface edit AMC-SW1/1 Set speed auto EndUsing the AMC modules FortiGate Firmware Downloading firmwareReverting to a previous version Using the web-based managerUpgrading the firmware To revert to a previous firmware version Backup and Restore from a USB keyUsing the USB Auto-Install Execute ping Using the CLITo upgrade the firmware using the CLI Execute update-now Execute restore image namestr tftpip4Execute restore image image.out To revert to a previous firmware version using the CLIExecute restore image image28.out Installing firmware from a system reboot using the CLIExecute restore image namestr tftpipv4 Execute restore config namestr tftpip4Press any key to display configuration menu To install firmware from a system rebootExecute reboot Enter Tftp server addressEnter Local Address Restoring the previous configurationTo backup configuration using the CLI Enter File Name image.outTo configure the USB Auto-Install using the CLI Additional CLI Commands for a USB keyTo restore configuration using the CLI Testing new firmware before installing To test the new firmware imageTesting new firmware before installing Testing new firmware before installing Index Web filtering 37 web-based manager Page Page

620B specifications

The Fortinet 620B is a state-of-the-art security appliance designed to provide comprehensive cybersecurity solutions for medium to large enterprises. As part of Fortinet's FortiGate series, the 620B combines advanced security features with robust performance capabilities, ensuring that organizations can protect their networks against an evolving threat landscape.

One of the standout features of the Fortinet 620B is its exceptional threat protection capabilities. The device utilizes Fortinet's proprietary FortiOS operating system, which integrates multiple security functions, including firewall, intrusion prevention system (IPS), virtual private network (VPN), and antivirus. This unified approach enables organizations to enforce consistent security policies across their network without compromising performance.

The FortiGate 620B is powered by Fortinet's purpose-built security processing unit (SPU) architecture, which significantly accelerates threat detection and mitigation processes. With multi-core processing capabilities, the device can handle high volumes of traffic while maintaining low latency, making it suitable for environments with heavy data flows. This performance is critical for organizations requiring real-time inspection of encrypted traffic, as the 620B offers strong decryption capabilities without sacrificing throughput.

In addition to its security features, the Fortinet 620B includes advanced networking technologies. The device supports software-defined networking (SDN) and integrates with Fortinet’s Security Fabric, allowing for enhanced visibility and control across the entire network ecosystem. This fabric architecture enables seamless communication between multiple devices, streamlining the management of security policies and improving overall network efficiency.

Another key characteristic of the FortiGate 620B is its scalability. Organizations can easily scale their deployment to meet growing demands by utilizing additional Fortinet appliances and services. The device also provides extensive reporting and analytics features, offering insights into network usage and security incidents, empowering security teams to make informed decisions.

Overall, the Fortinet 620B is an exceptional solution for organizations looking to strengthen their network security posture. With its combination of powerful threat protection, high performance, and advanced networking capabilities, it stands out as a reliable choice for safeguarding critical business operations in today's digital landscape. Its comprehensive feature set, combined with Fortinet's commitment to innovation, makes the FortiGate 620B a formidable asset for any cybersecurity strategy.