Choosing a Configuration Tool

Web-based manager

The FortiMail web-based manager is an easy to use management tool.

Use it to configure the administrator password, the interface and default gateway addresses, and the DNS server addresses.

Requirements:

An Ethernet connection between the FortiMail unit and management computer.

Internet Explorer 5.0 or higher on the management computer.

Collecting Information

Gateway/Server mode

Port 1

IP:

____.____.____.____

 

Netmask:

____.____.____.____

Port 2

IP:

____.____.____.____

 

Netmask:

____.____.____.____

Transparent mode

Management IP

IP:

____.____.____.____

 

Netmask:

____.____.____.____

Configuring the FortiMail Unit

Web-based Manager

1.Connect the FortiMail Port 1 interface to a management computer Ethernet interface. Use a cross-over Ethernet cable to connect the devices directly. Use straight-through Ethernet cables to connect the devices through a hub or switch.

2.Configure the management computer to be on the same subnet as the internal interface of the FortiMail unit. To do this, change the IP address of the management computer to 192.168.1.2 and the netmask to 255.255.255.0.

3.To access the FortiMail web-based manager, start Internet Explorer and browse to https://192.168.1.99/admin (remember to include the “s” in https://).

4.Type admin in the Name field and select Login.

The web-based manager has two configuration modes: Basic and Advanced. You can switch between the basic mode and advanced mode of the web-based manager at any time with no configuration loss. To switch between the two modes, go to either Basic >> or Advanced >>. The following configurations are described for Basic mode (the default configuration mode).

Server mode

To switch to Server mode

1.Go to Management > Status.

2.Select Change for the Operation Mode.

3.Select Server. The FortiMail unit will reset to factory default settings.

To change the administrator password

1.Go to Settings > Config > Admin.

2.Select Change Password for the admin administrator and enter a new password.

To configure interfaces

1.Go to Settings > Network > Interface.

2.Select the Modify icon for each interface to configure.

3.Set the addressing mode for the interface. (See the online help for information.)

To configure the Primary and Secondary DNS server IP addresses

1.Go to Settings > Network > DNS, enter the Primary and Secondary DNS IP addresses.

To configure a Default Gateway

1.Go to Settings > Network > Routing and select Edit icon for the static route.

2.Set Gateway to the Default Gateway IP address you recorded above and select OK.

Gateway mode

To switch to Gateway mode

1.Go to Management > Status.

2.Select Change for the Operation Mode.

3.Select Gateway. The FortiMail unit will reset to factory default settings.

To change the administrator password

1.Go to Settings > Config > Admin.

2.Select Change Password for the admin administrator and enter a new password.

To configure interfaces

1.Go to Settings > Network > Interface.

2.Select the Modify icon for each interface to configure.

3.Set the addressing mode for the interface. (See the online help for information.)

To configure the DNS server and default gateway IP addresses

1. Go to Settings > Network > Network, enter the Primary and Secondary DNS, and Default Gateway IP addresses.

7Completing the Configuration

Congratulations!

You have finished configuring the basic settings. To explore the full range of configuration options, see the online help or the Documentation CD.

Command Line Interface (CLI)

The CLI is a text-based management tool. Use it to configure the administrator password, the interface addresses, the default gateway address, and the DNS server addresses. To configure advanced settings, see the FortiMail Administration Guide.

Requirements:

The DB-9 null modem connection between the FortiMail unit and management computer.

A terminal emulation application (HyperTerminal for Windows) on the management computer.

General settings

Administrator password:

 

 

 

 

 

Network Settings:

Default Gateway:

____.____.____.____

 

Primary DNS Server:

____.____.____.____

 

Secondary DNS Server:

____.____.____.____

A default gateway is required for the FortiMail unit to route connections to the Internet.

Factory default settings

Gateway/Server mode

 

Administrative account settings

Port 1

192.168.1.99

User name

admin

Port 2

192.168.2.99

Password

(none)

Transparent mode

 

 

 

 

 

 

 

Management IP

192.168.1.99

 

 

 

 

 

 

Transparent mode

To switch to Transparent mode

1.Go to Management > Status.

2.Select Change for the Operation Mode.

3.Select Transparent. The FortiMail unit will reset to factory default settings.

To change the administrator password

1.Go to Settings > Config > Admin.

2.Select Change Password for the admin administrator and enter a new password.

To change the management interface

1.Go to Settings > Network > Management IP.

2.Enter the Management IP address and netmask.

To configure the Primary and Secondary DNS server IP addresses

Go to Settings > Network > DNS, enter the Primary and Secondary DNS IP addresses.

Command Line Interface

1.Use the DB-9 serial cable to connect the FortiMail Console port to the management computer serial port.

2.Start a terminal emulation program (HyperTerminal) on the management computer. Use these settings:

Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.

3.At the Login: prompt, type admin and press Enter twice (no password required).

Configuring the FortiMail unit

The CLI commands to configure the FortiMail unit are the same for all three modes.

1.Configure the interface IP addresses.

set system interface <port_number> mode static ip <ip_ address><netmask>

3.Configure the primary and secondary DNS server IP addresses. set system dns primary <dns-server_ip>

set system dns secondary <dns-server_ip>

4.Configure the default gateway.

set system route number <route_number>gw1 <gateway_ip>

Changing Operating Modes

1.To change modes

set system opmode {gateway server transparent}

2.Set the management IP for Transparent mode.

set system managementip <ip_address> netmask <netmask>

Visit these links for more information and documentation for your Fortinet product.

Technical Documentation - http://docs.forticare.com

Fortinet Knowledge Center - http://kc.forticare.com

Fortinet Technical Support - http://support.fortinet.com

Page 2
Image 2
Fortinet FORTIMAIL-5000 quick start Choosing a Configuration Tool, Collecting Information, Configuring the FortiMail Unit

FORTIMAIL-5000 specifications

Fortinet's FortiMail-5000 is a robust email security solution designed to safeguard organizations against a multitude of email-based threats. In an era where email is a primary communication channel, the need for comprehensive protection against phishing, malware, and spam has never been greater. The FortiMail-5000 addresses these challenges with a combination of cutting-edge technologies and advanced features that ensure secure email transactions.

One of the key characteristics of the FortiMail-5000 is its high-performance architecture. It is engineered to handle the email security needs of large enterprises and service providers, ensuring that it can process vast volumes of email traffic without compromising on speed or efficiency. This performance ensures that administrators can rely on the system for real-time processing and quick responses to emerging threats.

Additionally, FortiMail-5000 employs a multi-layered approach to threat detection and prevention. Utilizing machine learning and artificial intelligence, the appliance can analyze and categorize incoming emails, identifying potential threats based on patterns and behaviors. This proactive approach allows organizations to stay ahead of evolving threats.

Another highlight of the FortiMail-5000 is its integrated data loss prevention (DLP) capabilities. Organizations can define policies to monitor and control the sharing of sensitive information through email, ensuring compliance with regulations and protecting critical data from accidental or malicious exposure.

FortiMail also features advanced reporting and analytics tools, enabling administrators to gain insights into email traffic patterns, security incidents, and compliance violations. This visibility supports informed decision-making and helps organizations fine-tune their email security posture over time.

For organizations with hybrid or cloud environments, FortiMail-5000 supports deployment flexibility. It can be integrated seamlessly with existing infrastructure, whether on-premises, cloud-based, or a mixture of both. This adaptability ensures that companies can leverage Fortinet's advanced security capabilities without overhauling their existing systems.

Security is further enhanced through Fortinet's Security Fabric, which integrates FortiMail with other Fortinet solutions and third-party products to create a comprehensive security ecosystem. The interconnected architecture of the Security Fabric allows for streamlined incident response and enhanced threat intelligence sharing across the organization.

In summary, Fortinet’s FortiMail-5000 is not just an email filtering appliance; it represents a holistic email security solution equipped with advanced features, state-of-the-art technologies, and the scalability needed for modern enterprises. With its multifactored approach to security, analytics, DLP, and integration capabilities, FortiMail-5000 effectively addresses the complex landscape of email threats, ensuring organizations can communicate securely in today’s digital world.