病毒和攻击定义升级及注册

病毒防护定义和攻击定义更新

 

 

按照如下步骤配置 FortiGate NAT 设备: 1 添加一个新的外部到内部的防火墙策略。

2 使用如下设置配置策略:

源地址

外部 _ 全部

目的地址

前面步骤中添加的虚拟 IP 地址。

任务计划

总是。

服务

任意。

动作

NAT

选中。

3 单击确定。

使用一个理 IP 地址口配置 FortiGate 设备

按照如下步骤配置内部网络中的 FortiGate 设备 :

1 进入 系统 > 更新

2 选择允许推送更新。

3 选择使用代理推送更新。

4 将 IP 地址设置为添加到虚拟 IP 的外部 IP 地址。

对于例子中的拓扑结构,输入 64.230.123.149。

5 将端口号设置为添加到虚拟 IP 的外部服务端口。

对于这个例子中的拓扑结构,输入 45001。

6 单击应用。

FortiGate 设备将代理推送更新 IP 地址和端口发送给 FDN。现在 FDN 使用这个 IP 地址 和端口向内部网络中的 FortiGate 设备发送推送更新。

如果外部 IP 地址或者外部服务端口有所改变,将所做的改变添加到使用代理推送更新 的配置中并单击应用,即可更新 FDN 的推送更新信息。

图 4: 推送更新配置举例

7

单击应用。

8

您可以单击刷新以确定推送更新是否正常工作。

 

推送更新的状态应当变为可用。

FortiGate-500 安装和配置指南

103

Page 115
Image 115
Fortinet 500 manual 103, 使用一个代理 IP 地址和端口配置 FortiGate 设备

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.