Fortinet 3016B user manual Checking the Package Contents, Connecting, Planning the Configuration

Page 1

LED

State

Description

 

 

 

 

 

 

 

 

Power

Green

The FortiGate unit is on.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Off

The FortiGate unit is off.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Status

Green

The FortiGate unit is running normally.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Off

The FortiGate unit is off.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Green

The correct cable is in use and the connected equipment

 

 

 

 

 

 

 

 

MGMT1 and

 

has power.

 

 

 

 

 

 

 

 

MGMT2

 

 

 

 

 

 

 

 

 

 

Flashing Green

Network activity at this interface.

 

 

 

 

 

 

 

 

(Right LED)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Off

No link established.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

MGMT1 and

Green

Connection at 1000 Mb.

 

 

 

 

 

 

Esc

Enter

 

 

 

 

 

 

 

 

 

 

MGMT2

Amber

Connection at 100 Mb.

 

 

 

 

 

 

 

 

(Left LED)

 

 

 

 

 

 

 

 

 

 

Off

Connection at 10 Mb.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Green

The correct cable is in use and the connected equipment

 

 

 

 

 

 

 

 

Ports 1 to 16

 

has power.

 

 

 

 

 

 

 

 

 

Flashing Green

Network activity at this interface.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ASM

 

CONSOLE

MGMT1

1

 

3

 

5

 

7

 

9

 

11

 

13

 

15

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

POWER

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

STATUS

 

 

 

 

MODEM

MGMT2

2

 

4

 

6

 

8

 

10

 

12

 

14

 

16

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

FortiGate-3016B

© Copyright 2008 Fortinet Incorporated. All rights reserved.

Products mentioned in this document are trademarks or registered trade- marks of their respective holders.

Regulatory Compliance

FCC Class A Part 15 CSA/CUS01-30006-0402-20080328

28 March 2008

Checking the Package Contents

Connector

Type

Speed

Protocol

Description

 

 

 

 

 

MGMT1 and

RJ-45

10/100/1000

Ethernet

Copper gigabit connection to 10/100/1000

MGMT2

 

Base-T

 

copper networks.

 

 

 

 

 

Ports 1 to 16

LC SFP

1000Base-SX

Ethernet

Multimode fiber optic connections to

 

 

 

 

gigabit optical networks for small packet

 

 

 

 

performance required for voice, video and

 

 

 

 

other multimedia streaming applications.

 

 

 

 

 

CONSOLE

RJ-45

9600 bps

RS-232

Optional connection to the management

 

 

8/N/1

serial

computer. Provides access to the com-

 

 

 

 

mand line interface (CLI).

 

 

 

 

 

USB

USB

 

USB

Optional connection to a USB key for

 

 

 

 

firmware backup and installation.

 

 

 

 

 

Connecting

Connect the FortiGate unit to a power outlet and to the internal and external networks.

Place the unit on a stable surface.

Front

Ethernet Cables:

Orange - Crossover

Grey - Straight-through

ASM

CONSOLE

MGMT1

1

3

5

7

9

11

13

15

 

 

 

 

 

 

 

 

 

 

 

RJ-45 to

Power Cables (2)

Esc

Enter

 

 

 

 

 

 

 

 

POWER

DB-9 Serial Cable

 

 

 

 

 

 

 

 

 

 

STATUS

 

 

MODEM

MGMT2

2

4

6

8

10

12

14

16

 

 

 

 

USB

 

 

 

 

 

 

 

 

 

 

 

LCD Display

 

Serial and

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Control Buttons

Modem Connections

 

 

 

 

 

Fiber Ports

 

Copper

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Management

 

 

 

 

 

 

 

 

 

 

Ports

 

 

 

 

 

 

Back

4x

Optical Transceivers

4x

Copper Transceivers

Rack-Mount Brackets

Q u i c k S t a r t G u i d e

USER MANUAL

FortiGate-3016B

Copyright 2007 Fortinet Incorporated. All rights reserved.

PowerTrademarks

Products mentioned in this document are trademarks.

ConnectionsDocumentation

ASM

CONSOLE

MGMT1

1

 

3

5

7

 

9

 

11

 

13

15

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Esc

Enter

 

 

 

 

 

 

 

 

POWER

 

 

 

 

 

 

 

 

 

 

STATUS

 

MODEM

MGMT2

2

4

6

8

10

12

14

16

Connect both power cables into the back of the FortiGate unit, then plug the power cables into a power bar.

MAIN MENU appears when the unit is up and running.

If only one power supply is connected, an audible alarm sounds to indicate a failed power supply. To stop this alarm, press the red alarm cancel button.

Planning the Configuration

Optional RJ-45 to DB-9 cable connects to serial port on management computer

Straight-through Ethernet for access to the web-based manager

Fiber optic cable connects

to internal network or Internet

Power alarm reset bu

Power cables connect to power outlets

Before beginning to configure the FortiGate unit, you need to plan how to integrate the unit into your network. Your configuration plan is dependent upon the operating mode that you select: NAT/Route mode (the default) or Transparent mode. Refer to the Documentation CD-ROM for information on how to control traffic, and how to configure HA, antivirus protection, FortiGuard, Web content filtering, Spam filtering, intrusion prevention (IPS), and virtual private networking (VPN).

NAT/Route mode

In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All of its interfaces are on different subnets. Each interface connected to a network must be configured with an IP address that is valid for that network.

You would typically use NAT/Route mode when the FortiGate unit is deployed as a gateway between private and public networks. In its default NAT/Route mode configuration, the unit functions as a firewall. Firewall policies control communications through the FortiGate unit.

No traffic can pass through the FortiGate unit until you add firewall policies.

In NAT/Route mode, firewall policies can operate in NAT mode or in Route mode. In NAT mode, the FortiGate unit performs network address translation before IP packets are sent to the destination network. In Route mode, no translation takes place.

Internal Network

192.168.1.3

 

Routing policies controlling

 

traffic between internal

 

 

networks.

Port 2

 

 

192.168.1.99

Port 3

Internal

Port 1

network

10.10.10.1

204.23.1.5

 

 

 

Internet

Router

10.10.10.2

NAT mode policies controlling traffic between internal and external networks.

Transparent mode

In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on the same subnet. You only have to configure a management IP address so that you can make configuration changes.

You would typically use the FortiGate unit in Transparent mode on a private network behind an existing firewall or behind a router. In its default Transparent mode configuration, the unit functions as a firewall. No traffic can pass through the FortiGate unit until you add fire- wall policies.

You can connect up to four network segments to the FortiGate unit to control traffic between these network segments.

DMZ network

 

Web Server

Port 3

Mail Server

 

Poirt 1

Internet

Router

Port 2

Internal network

Hub or switch

Image 1
Contents Connecting Checking the Package ContentsPlanning the Configuration Configuring the FortiGate Unit Choosing a Configuration Tool7Completing the Configuration Collecting Information
Related manuals
Manual 62 pages 29.33 Kb

3016B specifications

The Fortinet 3016B is a robust firewall solution designed to meet the dynamic security needs of modern enterprises. As part of the FortiGate product line, the 3016B combines advanced security features with high performance, catering to organizations that require reliability and efficiency in managing their network security.

One of the primary features of the Fortinet 3016B is its high throughput capabilities. It supports up to 40 Gbps of firewall throughput and an impressive 7.5 Gbps of intrusion prevention system (IPS) throughput. This ensures that even at peak network loads, the firewall can maintain strong performance without compromising security. This feature is particularly important for businesses that handle large volumes of data and require seamless connectivity for their operational efficiency.

The 3016B leverages Fortinet's proprietary FortiOS operating system, which is known for its user-friendly interface and comprehensive security functionalities. FortiOS includes a variety of tools such as a next-generation firewall (NGFW), antivirus protection, web filtering, and application control, all incorporated into a single platform. This consolidation helps in simplifying management while providing extensive security coverage against a wide array of cyber threats.

Moreover, the Fortinet 3016B incorporates advanced threat intelligence capabilities powered by FortiGuard Labs. This allows the firewall to stay updated with real-time threat feeds, enabling the organization to respond proactively to emerging threats and vulnerabilities. The integration of AI-driven analytics enhances anomaly detection and helps in identifying potential breaches before they can escalate.

Another notable characteristic of the 3016B is its scalability. Designed for medium to large enterprises, it can easily integrate into existing infrastructure and scale as business needs grow. With support for multiple virtual domains (VDOMs), organizations can create isolated environments for different departments or functions, maintaining policy separations while optimizing resource utilization.

In terms of connectivity, the Fortinet 3016B offers various interfaces, including multiple 1G and 10G Ethernet ports, ensuring flexible deployment options. The device also supports high availability (HA) configurations, which provide redundancy and minimize downtime.

Overall, the Fortinet 3016B is an exceptional solution that combines superior security features with high performance and scalability, making it a prime choice for organizations looking to strengthen their network security posture without sacrificing efficiency. With its comprehensive capabilities, it empowers businesses to tackle today’s cybersecurity challenges effectively.