IPSec VPN

 

管理数字证书

 

 

4

申请一个签名了的本地证书。

 

按照 CA 网页服务器的指令进行如下操作:

 

·将一个 base64 编码的 PKCS#10 认证请求添加到 CA 网页服务器,

 

·将证书请求粘贴到 CA 网页服务器,

 

·在 CA 网页服务器上提交证书请求。

 

现在证书请求已经提交到 CA 以进行签名。

 

图 24:

在文本编辑器中开证书请

领取一个签名的本地证书

在下面的操作中,您可以连接到 CA 网页服务器并将一个签名的本地证书下载到管 理员电脑 (在 CA 已经对证书请求签名之后再领取证书)。

按照如下步骤领取一个签名了的本地证书:

1 连接到 CA 网页服务器。

2 按照 CA 网页服务器的指示下载签名了的本地证书。 将显示文件下载对话框。

3 单击保存。

4 在管理员电脑中的一个目录中保存文件。

导入签名的本地证书

在下面的操作中,您可以从管理员电脑中将签名的本地证书导入 FortiGate 设备 中。

按照如下步骤导入签名的本地证书:

1 进入 VPN > 本地证书。

2 单击导入。

3 输入路径或通过浏览在管理员电脑中定位签名的本地证书。

FortiGate-500 安装和配置指南

193

Page 205
Image 205
Fortinet 500 manual 领取一个签名的本地证书, 导入签名的本地证书, 193

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.