Using the AMC modules

AMC modules

Upload rolled files in Select to compress the log files before uploading. gzipped format

Delete files after Select to remove the log files once the FTP upoad has completed. uploading

Log configuration using the CLI

Configure the FortiGate unit to log to the ASM-S08 using the CLI within the FortiAnalyzer command config log disk setting enable.

For details on log configuration, see the FortiGate CLI Reference.

Viewing logs

Logs and content logs stored on the ASM-S08 are available for viewing and analysis.

To view the FortiGate logs, go to Log&Report > Log Access.

To view the content logs, go to Log&Report > Content Archive. Select the log type and select Local from the list box.

Note: HA logging is not available with the AMC-S08.

ASM-FB4 and ADM-XB2 modules

AMC (Advanced Mezzanine Card) modules provide additional hardware accelerated network processing for certain eligible traffic types passing through their SFP (small form-factor pluggable) network interfaces. This additional processing resource frees FortiGate units’ main processing resources for other tasks, improving network performance.

FortiGate-ASM-FB4 modules can improve network throughput for:

traffic with small packets, such as VoIP

latency-sensitive traffic, such as streaming multimedia

traffic with long session lifetimes, such as FTP

IPSec VPN traffic

active-active HA load-balanced traffic

P2P traffic

Eligible traffic processing is off-loaded to the module. This fast path processing leverages the additional hardware acceleration resources provided by the AMC modules.

Ineligible traffic processing is processed normally. Normal processing by the FortiGate unit’s main processing resources (CPU, RAM, and FortiASIC content processor) can include some FortiASIC hardware accelerated processing, but does not utilize the additional hardware acceleration resources provided by the modules.

Changing interfaces to operate in SGMII or SerDes mode

SFP transceivers can operate in two modes: SerDes and SGMII (Serial Gigabit Media Independent Interface). SGMII mode is required if you have SGMII transceivers. In SGMII mode the interface can operate at 10, 100, or 1000 Mbps.

 

FortiGate-310B FortiOS 3.0 MR6 Install Guide

42

01-30006-0472-20080815

Page 42
Image 42
Fortinet 310B manual Log configuration using the CLI, Viewing logs, ASM-FB4 and ADM-XB2 modules

310B specifications

The Fortinet 310B is a powerful next-generation firewall (NGFW) designed to meet the evolving needs of modern enterprises. As part of Fortinet's Security Fabric, the 310B offers robust security features combined with high performance, enhancing network security while maintaining ease of use.

One of the standout features of the Fortinet 310B is its high throughput capability. With up to 10 Gbps of firewall throughput and an impressive IPS throughput of 3.5 Gbps, the device is optimized for handling heavy network traffic with minimal latency. This makes it suitable for both medium and large-scale environments, where performance and speed are critical.

The Fortinet 310B integrates a comprehensive suite of security technologies. At its core is FortiOS, the operating system that powers Fortinet’s security appliances. FortiOS includes advanced threat protection capabilities such as intrusion prevention system (IPS), deep packet inspection, and antivirus scanning. These features help protect against a wide range of threats, including malware, ransomware, and zero-day attacks, ensuring that networks are resilient against various cyber threats.

Another key characteristic of the Fortinet 310B is its multi-layered security architecture. The device supports a range of technologies such as SSL inspection, web filtering, and application control. By leveraging these functionalities, organizations can enforce granular security policies across different applications and users, improving overall visibility and control over the network environment.

The Fortinet 310B also incorporates FortiGate's unique Security Fabric technology, which enables seamless integration with other Fortinet products and third-party solutions. This interoperability allows for centralized management, simplified security operations, and enhanced threat intelligence sharing, creating a holistic security approach.

In addition to its security capabilities, the Fortinet 310B offers a variety of connectivity options, including multiple Ethernet ports and support for FortiLink, which allows for easy integration with FortiAP access points and FortiSwitches. This flexibility facilitates the deployment of secure network segments and wireless solutions.

The device also supports advanced features such as VPN capabilities for secure remote access, SD-WAN for optimizing network performance, and extensive reporting and logging for compliance and accountability. All these attributes make the Fortinet 310B a formidable choice for organizations looking to bolster their network security posture while maximizing operational efficiency. Overall, the Fortinet 310B stands out as a reliable and versatile solution in the realm of network security appliances.