Transparent mode

Getting started

 

 

Figure 6: Example NAT/Route multiple internet connection configuration

Port 1 204.23.1.5

Internet

Port 2 64.83.32.45

FortiGate-500A Unit in NAT/Route mode

Internal network

EscEnter

A

192.168.1.3

LAN 192.168.1.1

NAT mode policies controlling traffic between internal and external networks.

Transparent mode

In Transparent mode, the FortiGate unit is invisible to the network. Similar to a network bridge, all FortiGate interfaces must be on the same subnet. You only have to configure a management IP address so that you can make configuration changes. The management IP address is also used for antivirus and attack definition updates.

You typically use the FortiGate unit in Transparent mode on a private network behind an existing firewall or behind a router. The FortiGate unit performs firewall functions, IPSec VPN, virus scanning, IPS, web content filtering, and Spam filtering.

Figure 7: Example Transparent mode network configuration

Gateway to

public network

10.10.10.1

FortiGate-500A Unit Management IP in Transparent mode

Internal network

204.23.1.5

10.10.10.2

 

 

 

 

 

 

 

 

 

 

 

10.10.10.3

 

 

CONSOLE

USB

 

 

LAN

 

 

 

10/100

 

10/100/1000

 

Esc

Enter

 

L1

L2

L3

L4

1

2

3

4

5

6

 

A

 

 

 

 

 

 

 

 

 

 

 

 

(firewall, router) Port 2

 

Port 1

 

Transparent mode policies

Internet

controlling traffic between

internal and external networks

You can connect up to seven network segments to the FortiGate unit to control traffic between these network segments.

LAN can connect to the internal firewall or router.

Ports 1 can connect to the external network.

Ports 2 to 6 can connect to other networks.

Port 4 can also connect to other FortiGate-500A units if you are installing an HA cluster.

Configuration options

Once you have selected Transparent or NAT/Route mode operation, you can complete the configuration plan and begin to configure the FortiGate unit. Choose among three different tools to configure the FortiGate unit

22

01-28005-0101-20041015

Fortinet Inc.

Page 22
Image 22
Fortinet 127, FORTIGATE, Network Router Configuration options, FortiGate-500A Unit Management IP in Transparent mode

500A, Network Router, 127, FORTIGATE specifications

Fortinet FortiGate 127 is an advanced network security appliance designed to deliver comprehensive protection to organizations while ensuring seamless network performance. As a part of Fortinet's leading next-generation firewall (NGFW) offerings, the FortiGate 127 integrates various essential features and technologies that are critical for modern network security.

One of the standout features of the FortiGate 127 is its ability to perform deep packet inspection. This technology enables the device to analyze and filter network traffic, identifying and mitigating threats such as malware, viruses, and intrusions in real-time. With a robust Threat Intelligence system, FortiGate utilizes FortiGuard Labs to provide continuous updates on emerging threats, equipping organizations with the necessary defense against sophisticated cyberattacks.

Another key technology included in the FortiGate 127 is integrated secure SD-WAN functionality. This feature allows organizations to optimize their wide-area network (WAN) connections, enhancing performance and reducing costs through intelligent traffic routing and real-time application visibility. By leveraging software-defined capabilities, businesses can ensure efficient use of their bandwidth, prioritize critical applications, and maintain high levels of uptime.

The FortiGate 127 also excels in providing advanced VPN support. With multiple VPN protocols such as IPsec and SSL, users can establish secure remote connections, facilitating safe access to corporate resources from anywhere. This is particularly important in today's remote work environment, where secure connectivity is essential for maintaining productivity while protecting sensitive data.

In terms of performance, the FortiGate 127 is equipped with high throughput capabilities, ensuring it can handle extensive network traffic without compromising speed or efficiency. Its multi-core architecture allows for parallel processing, which enhances overall performance and responsiveness.

Additionally, the device features an intuitive and user-friendly interface, enabling IT teams to easily manage and configure network policies. With centralized management options, administrators can efficiently oversee multiple FortiGate devices within their network, ensuring optimal visibility and control.

Overall, the Fortinet FortiGate 127 Network Router is a powerful solution for organizations seeking to bolster their security posture. With its combination of deep packet inspection, integrated SD-WAN functionality, advanced VPN support, and high-performance capabilities, it stands out as a vital asset in the modern cybersecurity landscape. It is an ideal choice for businesses aiming to protect their networks from the ever-evolving threat landscape while maintaining operational efficiency.