目录

配置 LDAP 支持

176

添加 LDAP 服务器

177

删除 LDAP 服务器

177

配置用户组

178

添加用户组

178

删除用户组

179

IPSec VPN

181

密钥管理

181

手工密钥

182

使用预置密钥或证书的自动互联网密钥交换 ( 自动 IKE)

182

手工密钥 IPSec VPN

182

手工密钥 VPN 的一般配置步骤

183

添加一个手工密钥 VPN 通道

183

自动 IKE IPSec VPN

184

自动 IKE VPN 的一般配置步骤

184

为自动 IKE VPN 添加第一阶段配置

185

为自动 IKE VPN 添加第二阶段配置

188

管理数字证书

190

获得签名的本地证书

190

获得一个 CA 证书

194

配置加密策略

194

添加源地址

195

添加目的地址

195

添加一个加密策略

196

IPSec VPN 集中器

197

VPN 集中器 ( 集线器 ) 一般配置步骤

198

添加一个 VPN 集中器

199

VPN 辐条一般配置步骤

200

冗余 IPSec VPN

201

配置冗余 IPSec VPN

201

VPN 监视和问题解答

202

查看 VPN 通道状态

202

查看拨号 VPN 连接的状态

203

测试 VPN

203

PPTP L2TP VPN

205

配置 PPTP

205

把 FortiGate 配置为 PPTP 网关

206

配置 PPTP 的 Windows98 客户端

208

配置 Windows2000 的 PPTP 客户端

209

配置 WindowsXP 的 PPTP 客户端

210

x

美国飞塔有限公司

Page 10
Image 10
Fortinet 500 manual 181

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.