Fortinet 800F Factory default firewall configuration, Factory default protection profiles

Page 21

Getting started

Factory default firewall configuration

 

 

Table 4: Factory default Transparent mode network configuration (Continued)

 

Internal

HTTPS, Ping

 

External

Ping

 

DMZ

HTTPS, Ping

Administrative access

Port 1

Ping

 

Port 2

Ping

 

Port 3

Ping

 

Port 4

Ping

 

 

 

Factory default firewall configuration

FortiGate firewall policies control how all traffic is processed by the FortiGate unit. Until firewall policies are added, no traffic can be accepted by or pass through the FortiGate unit. To allow traffic through the FortiGate unit you can add firewall policies. See the FortiGate Administration Guide for information about adding firewall policies.

The following firewall configuration settings are included in the default firewall configuration to make it easier to add firewall policies.

Table 5: Default firewall configuration

Configuration setting

Name

Description

 

 

 

Firewall address

All

Firewall address matches the source or

 

 

destination address of any packet.

 

 

 

Pre-defined service

More than 50

Select from any of the 50 pre-defined services

 

predefined services

to control traffic through the FortiGate unit that

 

 

uses that service.

 

 

 

Recurring schedule

Always

The recurring schedule is valid at any time.

 

 

 

Protection Profiles

Strict, Scan, Web,

Control how the FortiGate unit applies virus

 

Unfiltered

scanning, web content filtering, spam filtering,

 

 

and IPS.

 

 

 

The factory default firewall configuration is the same in NAT/Route and Transparent mode.

Factory default protection profiles

Use protection profiles to apply different protection settings for traffic that is controlled by firewall policies. You can use protection profiles to:

Configure antivirus protection for HTTP, FTP, IMAP, POP3, and SMTP firewall policies

Configure Web filtering for HTTP firewall policies

Configure Web category filtering for HTTP firewall policies

Configure spam filtering for IMAP, POP3, and SMTP firewall policies

Enable the Intrusion Protection System (IPS) for all services

Enable content logging for HTTP, FTP, IMAP, POP3, and SMTP firewall policies

FortiGate-800/800F Installation Guide

01-28006-0024-20041026

21

Image 21
Contents October 01-28006-0024-20041026 Installation GuideRegulatory Compliance TrademarksTable of Contents Index Introduction Secure installation, configuration, and managementWeb-based manager Command line interfaceDocument conventions Setup wizardFortiGate documentation FortiGate Installation GuideFortiManager documentation Related documentationFortiClient documentation FortiMail documentationComments on Fortinet technical documentation FortiLog documentationCustomer service and technical support Comments on Fortinet technical documentation Getting started Package contents Mounting Turning the FortiGate unit power on and off Connecting to the web-based managerTo power off the FortiGate unit To connect to the web-based manager Connecting to the command line interface CLIWelcome To connect to the CLIFactory default NAT/Route mode network configuration Factory default FortiGate configuration settingsNetwork Settings Factory default Transparent mode network configurationFactory default protection profiles Factory default firewall configurationWeb protection profile settings NAT/Route mode Planning the FortiGate configurationTransparent mode NAT/Route mode with multiple external network connectionsConfiguration options Web-based manager and setup wizardFront control buttons and LCD Next steps Preparing to configure the FortiGate unit in NAT/Route mode NAT/Route mode installationDMZ Dhcp or PPPoE configurationUsing the web-based manager Configuring basic settingsTo configure interfaces Go to System Network Interface To configure DNS server settings Go to System Network DNS Using the front control buttons and LCDTo add a default route Go to System Router StaticConfiguring the FortiGate unit to operate in NAT/Route mode Using the command line interfaceTo add a default gateway to an interface To add/change the administrator passwordExample To configure interfacesGet system interface To configure DNS server settingsOn page 28 and on page 29 for other settings Using the setup wizardDhcp server Starting the setup wizardConnecting the FortiGate unit to the networks FortiGate-800FortiGate-800F To connect to FortiGate-800/800F user-defined interfaces To connect the FortiGate unit running in NAT/Route modeConfiguring the networks Go to System Config Time To set the date and timeTo register the FortiGate unit Go to System Maintenance Update Center To configure virus, attack, and spam definition updatesPreparing to configure Transparent mode Transparent mode installationTo change the Management IP Go to System Network Management To change the management IP address and netmask Reconnecting to the web-based managerTo add a default gateway To change to Transparent mode using the CLITo configure the management IP address End To configure the default gatewayTo start the setup wizard Connecting the FortiGate unit to your networkFortiGate-800F Internal Network Other Network To register your FortiGate unit Reconnecting to the web-based manager Configuring FortiGate units for HA operation High availability installationHigh availability configuration settings Priorities of heartbeat device and monitor prioritiesGroup ID MAC Address To change the FortiGate unit host name High availability settings ScheduleConfig system global Set hostname namestr end Configuring FortiGate units for HA using the CLITo configure the FortiGate unit for HA operation Connecting the cluster to your networksTo connect the cluster Internal Network Installing and configuring the clusterConfiguring FortiGate units for HA using the CLI CLI IndexIndex 01-28006-0024-20041026

800F, 800 specifications

Fortinet, a leader in cybersecurity solutions, has made significant strides in fortifying enterprise networks with its FortiGate 800 and 800F series. These next-generation firewalls are designed to deliver high performance and security for organizations seeking to protect their critical assets while ensuring optimal network efficiency.

The FortiGate 800 and 800F series are built on Fortinet's proprietary Security Fabric architecture, which provides a consolidated approach to security. This architecture allows organizations to leverage seamless integration across various security solutions and services, enhancing visibility and control. With a focus on scalability, these models support various deployment scenarios—from branch offices to data centers—making them versatile options for organizations of any size.

One of the standout features of the FortiGate 800 and 800F series is their robust threat intelligence capabilities. Powered by FortiGuard Labs, these firewalls provide real-time threat intelligence that enables proactive threat mitigation and incident response. This not only helps to defend against known threats but also enhances the firewall’s ability to identify emerging threats, ensuring comprehensive protection.

The series boasts impressive performance metrics. The FortiGate 800F can process up to 20 Gbps of firewall throughput and 1.5 million concurrent sessions, making it a suitable choice for high-performance environments. Additionally, the built-in SSL inspection capabilities allow organizations to decrypt and inspect encrypted traffic, which is crucial for detecting hidden threats.

The FortiGate 800 and 800F also feature advanced security technologies, including Intrusion Prevention System (IPS), antivirus, web filtering, and application control, all managed through a unified interface. This centralization simplifies management and reduces administrative overhead, allowing IT teams to focus on strategic initiatives.

Another significant characteristic of the FortiGate 800F is its energy efficiency. The design includes hardware optimizations that not only enhance performance but also reduce power consumption, aligning with the growing emphasis on sustainability practices.

In summary, the Fortinet FortiGate 800 and 800F series are comprehensive network security solutions that leverage advanced technologies to provide organizations with the security, performance, and flexibility necessary in today's threat landscape. With their robust threat intelligence and high throughput capabilities, these firewalls are well-suited for enterprises looking to fortify their defenses against an ever-evolving array of cyber threats.