Firewall

 

Predefined service list

 

 

 

 

 

 

 

Table 21: FortiGate predefined services (Continued)

 

 

 

 

 

 

 

 

 

 

Service name

Description

Protocol

Port

 

 

 

 

 

 

 

 

IRC

Internet Relay Chat allows people connected

tcp

6660-6669

 

 

 

to the Internet to join live discussions.

 

 

 

 

 

 

 

 

 

 

L2TP

L2TP is a PPP-based tunnel protocol for

tcp

1701

 

 

 

remote access.

 

 

 

 

 

 

 

 

 

 

LDAP

Lightweight Directory Access Protocol is a set

tcp

389

 

 

 

of protocols used to access information

 

 

 

 

 

directories.

 

 

 

 

 

 

 

 

 

 

NetMeeting

NetMeeting allows users to teleconference

tcp

1720

 

 

 

using the Internet as the transmission

 

 

 

 

 

medium.

 

 

 

 

 

 

 

 

 

 

NFS

Network File System allows network users to

tcp

111, 2049

 

 

 

access shared files stored on computers of

 

 

 

 

 

different types.

 

 

 

 

 

 

 

 

 

 

NNTP

Network News Transport Protocol is a

tcp

119

 

 

 

protocol used to post, distribute, and retrieve

 

 

 

 

 

USENET messages.

 

 

 

 

 

 

 

 

 

 

NTP

Network time protocol for synchronizing a

tcp

123

 

 

 

computer’s time with a time server.

 

 

 

 

 

 

 

 

 

 

OSPF

Open Shortest Path First (OSPF) routing

 

89

 

 

 

protocol. OSPF is a common link state

 

 

 

 

 

routing protocol.

 

 

 

 

 

 

 

 

 

 

PC-Anywhere

PC-Anywhere is a remote control and file

udp

5632

 

 

 

transfer protocol.

 

 

 

 

 

 

 

 

 

 

ICMP_ANY

Internet Control Message Protocol is a

 

 

 

 

 

message control and error-reporting protocol

 

 

 

 

 

between a host and gateway (Internet).

 

 

 

 

 

 

 

 

 

 

PING

ICMP echo request/reply for testing

icmp

8

 

 

 

connections to other devices.

 

 

 

 

 

 

 

 

 

 

TIMESTAMP

ICMP timestamp request messages.

icmp

13

 

 

 

 

 

 

 

 

INFO_REQUEST

ICMP information request messages.

icmp

15

 

 

 

 

 

 

 

 

INFO_ADDRESS

ICMP address mask request messages.

icmp

17

 

 

 

 

 

 

 

 

POP3

Post office protocol is an email protocol for

tcp

110

 

 

 

downloading email from a POP3 server.

 

 

 

 

 

 

 

 

 

 

PPTP

Point-to-Point Tunneling Protocol is a

tcp

1723

 

 

 

protocol that allows corporations to extend

 

 

 

 

 

their own corporate network through private

 

 

 

 

 

tunnels over the public Internet.

 

 

 

 

 

 

 

 

 

 

QUAKE

For connections used by the popular Quake

udp

26000,

 

 

 

multi-player computer game.

 

27000,

 

 

 

 

 

27910,

 

 

 

 

 

27960

 

 

 

 

 

 

 

 

RAUDIO

For streaming real audio multimedia traffic.

udp

7070

 

 

 

 

 

 

 

 

RLOGIN

Rlogin service for remotely logging into a

tcp

513

 

 

 

server.

 

 

 

 

 

 

 

 

 

 

RIP

Routing Information Protocol is a common

udp

520

 

 

 

distance vector routing protocol.

 

 

 

 

 

 

 

 

 

 

SIP-

Session Initiation Protocol is used by

 

 

 

 

MSNmessenger

Microsoft Messenger to initiate an interactive,

 

 

 

 

 

possibly multimedia session.

 

 

 

 

 

 

 

 

 

FortiGate-100A Administration Guide

01-28007-0068-20041203

205

Page 205
Image 205
Fortinet 100A manual 205, Irc

100A specifications

Fortinet 100A is a versatile network security device designed to provide comprehensive protection against various cyber threats while ensuring optimal network performance. As part of the FortiGate series, the 100A combines advanced security features with powerful hardware capabilities, making it suitable for small to medium-sized businesses.

One of the key features of the Fortinet 100A is its deep packet inspection technology. This capability allows the firewall to analyze both the header and payload of packets traversing the network, enabling it to detect and block malicious content effectively. The 100A can identify and mitigate a wide range of threats, including malware, intrusions, and application-layer attacks.

The FortiOS operating system powers the Fortinet 100A, offering a robust and user-friendly interface for configuration and management. With its unified security management console, administrators can efficiently monitor network traffic and enforce security policies across the organization. The system provides centralized logging and reporting features, enabling users to gain valuable insights into their security posture and respond swiftly to incidents.

The 100A supports multiple deployment modes, including transparent, NAT, and route modes. This flexibility allows organizations to integrate the device into their existing network architecture with ease. The firewall's high throughput capabilities ensure that network performance remains unaffected, even under heavy load from multiple users and devices.

Another notable aspect of the Fortinet 100A is its support for various VPN technologies, including IPsec and SSL VPN. This feature facilitates secure remote access for employees, enabling them to connect to the corporate network safely, regardless of their location. As remote work continues to be a norm in many sectors, this capability is critical for maintaining productivity and security.

In addition to these features, the Fortinet 100A provides comprehensive web filtering capabilities, protecting users from harmful websites and inappropriate content. This protection is essential for organizations looking to maintain a secure and productive environment.

With its combination of powerful security features, flexible deployment options, and robust performance, the Fortinet 100A stands out as an ideal solution for organizations seeking to bolster their cybersecurity measures while ensuring seamless connectivity for users. As cyber threats continue to evolve, investing in a capable device like the FortiGate 100A is crucial for maintaining a secure network infrastructure.