VPN 监视和问题解答

IPSec VPN

 

 

按如下步骤配置 IPSec 冗余:

1 最多可以为三个 VPN 连接添加第一阶段参数。

除了网关名和 IP 地址以外,为每个 VPN 连接输入一样的数值。确保远程 VPN 端点 (远 程网关)有静态 IP 地址。

请见 第 185 页 为自动 IKE VPN 添加第一阶段配置

2 最多为三个 VPN 连接添加第二阶段参数 (VPN 通道)。

·如果到互联网的连接在同一区域内,添加一个 VPN 通道和到它的远程网关。您最多可

以添加三个远程网关。

·如果到互联网的连接在不同的区域内,或分配到了单独的接口,为输入的每个远程网 关添加一个 VPN 通道。

请见 第 188 页 为自动 IKE VPN 添加第二阶段配置

3 添加源地址和目的地址。

请见 第 195 页 添加源地址。 请见 第 195 页 添加目的地址

4 最多为三个 VPN 连接添加加密策略。

·如果 VPN 连接在同一区域内,添加一个向外的加密策略;例如一个内部 -> 外部策

略。为这个策略添加自动 IKE 密钥通道。

·如果 VPN 连接在不同区域,为每个连接添加一个单独的向外加密策略。例如,一个内 部 -> 外部策略和一个内部 -> DMZ 策略。每个策略的源地址和目的地址必须相同。 为每个策略添加不同的自动 IKE 密钥通道。

请见 第 196 页 添加一个加密策略

VPN 监视和问题解答

本节提供了一些常见的 VPN 维护和监视手段。 本节叙述了以下内容:

·查看 VPN 通道状态

·查看拨号 VPN 连接的状态

·测试 VPN

查看 VPN 通道状态

您可以使用 IPSec VPN 通道列表查看所有 IPSec 自动密钥 VPN 通道的状态。对于 每个通道,列表中都显示了通道的状态以及通道超时。

下操作用于查看通道状态

1 进入 VPN > IPSEC > 二阶

在 状态 列显示了每个通道的状态。如果状态是 向上,则通道是激活的,如果状态是 向下,则通道是非激活的。

在 超时 列显示了下次密钥交换时间的剩余时间。这个时间的计算方法是从密钥有效 期中减去自上次密钥交换以来经历过的时间。

202

美国飞塔有限公司

Page 214
Image 214
Fortinet 500 manual Vpn 监视和问题解答, 查看 Vpn 通道状态, 202, 以下操作用于查看通道状态 进入 VPN Ipsec 第二阶段。

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.