透明模式配置的例子

透明模式安装

 

 

透明模式配置的例子

运行于透明模式的 FortiGate 也需要一个基本配置,以成为 IP 网络中的一个结 点。至少,FortiGate 必须配置一个 IP 地址和子网掩码。它们可以用来对 FortiGate 进行管理访问,并允许 FortiGate 进行防病毒和攻击定义的更新。另外,FortiGate 必 须有足够的信息达到:

·管理员电脑,

·Forti 响应发布网络 (FDN),

·DNS 服务器。

无论何时,FortiGate 都需要一个路由配置以连接到路由器,从而连接到目的地 址。如果所有的目的地址都在外部网络中,您可能只需要输入一个默认路由。然而, 如果网络拓扑比较复杂,您可能需要再输入一个或多个路由。

本节描述了:

·默认路由和静态路由

·到外部网络的默认路由的例子

·到外部目的地址的静态路由的例子 ·到内部目的地址的静态路由的例子

默认路由和静态路由

要创建到一个目的地的路由,您需要根据 IP 网络地址和相应的网络掩码定义一个 IP 前缀。一个默认的路由匹配任何前缀,可以将数据流转发到下一个路由器 (或默认 网关)。一个静态的路由匹配特定的前缀,并将数据流转发到下一个路由器。

默认路由的例子 :

IP 0.0.0.0 (IP 地址 )

0.0.0.0( 网络码 )

下一个跳跃 192.168.1.2

静态路由的例子

IP 172.100.100.0 (IP 地址 ) 255.255.255.0 ( 网络码 )

下一个跳跃 192.168.1.2

注意:在 FortiGate 中添加路由时,最后添加默认路由,使它出现在路由表的底部。 这可以保证 FortiGate 先匹配特定的路由,最后再选择默认路由。

到外部网络的默认路由的例子

图 11 展示了 FortiGate 中包括管理站点在内的所有目的地址都位于外部网络的例 子。要达到这些地址,FortiGate 必须连接到通向外部网络的上游路由器。为了便于连 接,您需要输入单一的默认路由指向上游路由器,使之成为下一个跳跃 / 默认网关。

52

美国飞塔有限公司

Page 64
Image 64
Fortinet 500 manual 透明模式配置的例子, ·默认路由和静态路由 ·到外部网络的默认路由的例子 ·到外部目的地址的静态路由的例子 ·到内部目的地址的静态路由的例子, 静态路由的例子:

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.