Fortinet 100, 50B, 50A-50B User Manual

INSTALL GUIDE

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4

www.fortinet.com

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 Install Guide

FortiOS 3.0 MR4 31 August 2007 01-30004-0265-20070831

© Copyright 2007 Fortinet, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of Fortinet, Inc.

Trademarks

Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC, FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat Management System, FortiGuard, FortiGuard-Antispam, FortiGuardAntivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer, FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter, FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of Fortinet, Inc. in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Regulatory compliance

FCC Class A Part 15 CSA/CUS

Caution: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According to the Instructions.

Contents

Contents.............................................................................................. 3

Introduction ........................................................................................ 7

About the FortiGate unit ................................................................................... 7

FortiGate-50A................................................................................................ 7

FortiGate-50B................................................................................................ 8

FortiWiFi-50B ................................................................................................ 8

FortiGate-100 ................................................................................................ 8

Fortinet Family Products .................................................................................. 9

FortiGuard Subscription Services ................................................................. 9

FortiClient...................................................................................................... 9

FortiMail ........................................................................................................ 9

FortiAnalyzer ............................................................................................... 10

FortiReporter ............................................................................................... 10

FortiBridge................................................................................................... 10

FortiManager............................................................................................... 10

About this document....................................................................................... 10

Document conventions................................................................................ 11

Typographic conventions...................................................................... 11

Fortinet documentation .................................................................................. 12

Fortinet Tools and Documentation CD ........................................................ 13

Fortinet Knowledge Center ........................................................................ 13

Comments on Fortinet technical documentation ........................................ 13

Customer service and technical support ...................................................... 13

Installing the FortiGate unit ............................................................ 15

Package Contents............................................................................................ 15

FortiGate-50A.............................................................................................. 15

FortiGate-50B.............................................................................................. 16

FortiWiFi-50B .............................................................................................. 17

FortiGate-100 .............................................................................................. 17

Warnings ..................................................................................................... 18

Mounting........................................................................................................... 19

Powering on the FortiGate unit ...................................................................... 19

Power over Ethernet ................................................................................... 20

Powering off the FortiGate unit ...................................................................... 21

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 3

Contents

Connecting to the FortiGate unit ................................................................... 21

Web-based manager .................................................................................. 21

Command line interface .............................................................................. 21

Connecting to the web-based manager ...................................................... 21

Command line interface .............................................................................. 23

Connecting to the CLI ................................................................................. 23

Quick installation using factory defaults ...................................................... 24

Factory defaults ............................................................................... 27

Factory default DHCP server configuration ................................................ 28

Factory default NAT/Route mode network configuration ............................ 28

Factory default Transparent mode network configuration........................... 29

Factory default firewall configuration .......................................................... 29

Factory default protection profiles............................................................... 30

Restoring the default settings........................................................................ 31

Restoring the default settings using the web-based manager .................... 31

Restoring the default settings using the CLI ............................................... 31

Configuring the FortiGate unit........................................................ 33

Planning the FortiGate configuration ............................................................ 33

NAT/Route mode ........................................................................................ 33

NAT/Route mode with multiple external network connections .................... 34

Transparent mode....................................................................................... 35

Preventing the public interface from responding to ping requests ........... 35

NAT/Route mode installation ......................................................................... 36

Preparing to configure the FortiGate unit in NAT/Route mode ................... 36

DHCP or PPPoE configuration ................................................................... 37

Using the web-based manager ................................................................... 37

Configuring basic settings .................................................................... 37

Adding a default route .......................................................................... 38

Verifying the web-based manager configuration .................................. 39

Verify the connection ............................................................................ 39

Using the command line interface............................................................... 39

Configuring the FortiGate unit to operate in NAT/Route mode............. 39

Adding a default route .......................................................................... 41

Connecting the FortiGate unit to the network(s) ......................................... 42

Configuring the networks ............................................................................ 42

Transparent mode installation ....................................................................... 43

Preparing to configure Transparent mode .................................................. 43

Using the web-based manager ................................................................... 43

Using the command line interface............................................................... 44

Connecting the FortiGate unit to your network ........................................... 45

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

4 01-30004-0265-20070831

Contents

Next steps ........................................................................................................ 46

Set the date and time .................................................................................. 46

Updating antivirus and IPS signatures ........................................................ 47

Updating antivirus and IPS signatures from the web-based manager . 47

Updating the IPS signatures from the CLI ............................................ 48

Scheduling antivirus and IPS updates.................................................. 48

Adding an override server .................................................................... 49

Configuring the modem interface .................................................. 51

Connecting a modem to the FortiGate-50A .................................................. 51

Selecting a modem mode ............................................................................... 52

Redundant mode configuration................................................................... 52

Stand alone mode configuration ................................................................. 52

Configuring the modem for the FortiGate-50A............................................. 53

Adding a Ping Server ...................................................................................... 55

Dead gateway detection ............................................................................. 55

Adding firewall policies for modem connections......................................... 56

Using a wireless network ................................................................ 57

Setting up a wireless network ........................................................................ 57

Positioning an Access Point........................................................................ 58

Radio Frequency interface.......................................................................... 58

Using multiple access points....................................................................... 59

Wireless Security............................................................................................. 60

Wireless Equivalent Privacy (WEP) ............................................................ 60

Wi-Fi Protected Access (WPA) ................................................................... 60

Additional security measures ...................................................................... 61

MAC address filtering ........................................................................... 61

Service Set Identifier ............................................................................ 61

FortiWiFi-50B operation modes ..................................................................... 61

Access Point mode ..................................................................................... 61

Client mode................................................................................................. 62

Changing the operating mode .............................................................. 63

Setting up the FortiWiFi-50B as an Access Point ........................................ 63

Set the DHCP settings ................................................................................ 63

Set the security options............................................................................... 64

Configure the firewall policies ..................................................................... 64

FortiGate Firmware .......................................................................... 65

Upgrading to a new firmware version ........................................................... 65

Upgrading the firmware using the web-based manager ............................. 65

Upgrading the firmware using the CLI ........................................................ 66

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

5 01-30004-0265-20070831

Contents

Reverting to a previous firmware version..................................................... 67

Reverting to a previous firmware version using the web-based manager .. 67

Reverting to a previous firmware version using the CLI ............................. 68

Installing firmware images from a system reboot using the CLI ................ 70

Restoring the previous configuration .......................................................... 72

The FortiUSB key............................................................................................. 73

Backup and Restore from the FortiUSB key ............................................... 73

Using the USB Auto-Install feature ............................................................. 74

Additional CLI commands for the FortiUSB key.......................................... 75

Testing a new firmware image before installing it ....................................... 75

Installing and using a backup firmware image............................................. 77

Installing a backup firmware image............................................................. 77

Index.................................................................................................. 81

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

6 01-30004-0265-20070831

Introduction About the FortiGate unit

Introduction

Welcome and thank you for selecting Fortinet products for your real-time network protection.

FortiGate™ Unified Threat Management System improves network security, reduces network misuse and abuse, and helps you use communications resources more efficiently without compromising the performance of your network. FortiGate Unified Threat Management Systems are ICSA-certified for firewall, IPSec, and antivirus services.

The FortiGate Unified Threat Management System is a dedicated, easily managed security device that delivers a full suite of capabilities, which include:

• application-level services such as virus protection and content filtering

• network-level services such as firewall, intrusion detection, VPN and traffic shaping

The FortiGate Unified Threat Management System uses Fortinet’s Dynamic Threat Prevention System (DTPS™) technology, which leverages breakthroughs in chip design, networking, security and content analysis. The unique ASIC-based architecture analyzes content and behavior in real-time, enabling key applications to be deployed right at the network edge where they are most effective at protecting your networks.

About the FortiGate unit

The FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 appliances are designed for SOHO and SMB offices, to deliver the same enterprise-class network-based antivirus, content filtering, firewall, VPN, and network-based intrusion detection/prevention featured in all FortiGate units.

FortiGate-50A

The FortiGate-50A is designed for telecommuters and small remote offices with 10 or fewer employees. The FortiGate-50A unit includes an external modem port that can be used as a backup or stand alone connection to the Internet.

PWR

STATUS

INTERNAL EXTERNAL

LINK 100 LINK 100

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 7

About the FortiGate unit Introduction

FortiGate-50B

The FortiGate-50B is designed for telecommuters and small remote offices with 10 to 50 employees. The FortiGate-50B unit includes

POWER STATUS

WAN1 WAN2

INTERNAL

321

LINK / ACT

10/100

two WAN ports for a redundant connection to the Internet. It also features a 3-port switch for connecting additional network connections and supports HA configurations with additional FortiGate-50B units.

FortiWiFi-50B

The FortiWiFi-50B is designed for telecommuters and small remote offices with 10 to 50 employees. The FortiWiFi-50B unit includes two WAN ports for a redundant connection to the Internet. It also features a 3-port switch for connecting additional network

POWER STATUS

WAN1 (PoE)

WLAN

connections and supports HA configurations with additional FortiWiFi-50B units. The FortiWiFi-50B includes Power over Ethernet (PoE) capabilities as a Powered Device through the WAN1 port.

INTERNAL

WAN2

321

LINK / ACT

10/100

FortiGate-100

The FortiGate-100 unit is designed for SOHO, SMB and branch office applications.

The FortiGate-100 supports advanced features such as 802.1Q VLAN, virtual domains, high availability (HA), and the RIP and OSPF routing protocols.

Register your FortiGate unit

To register, enter your contact information and the serial numbers of the FortiGate units that you or your organization have purchased. You can register multiple FortiGate units in a single session without re-entering your contact information.

By registering your FortiGate unit, you will receive updates to threat detection and prevention databases (Antivirus, Intrusion Detection, etc.) and will also ensure your access to technical support.

INTERNAL

EXTERNAL

POWER

DMZ

STATUS

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

8 01-30004-0265-20070831

Introduction Fortinet Family Products

Fortinet Family Products

Fortinet offers a family of products that includes both software and hardware appliances for a complete network security solution including mail, logging, reporting, network management, and security along with FortiGate Unified Threat Management Systems. For more information on the Fortinet product family, go to

www.fortinet.com/products.

FortiGuard Subscription Services

FortiGuard Subscription Services are security services created, updated and managed by a global team of Fortinet security professionals. They ensure the latest attacks are detected and blocked before harming your corporate resources or infecting your end-user computing devices. These services are created with the latest security technology and designed to operate with the lowest possible operational costs.

FortiGuard Subscription Services includes:

• FortiGuard Antivirus Service

• FortiGuard Intrusion Prevention subscription services (IPS)

• FortiGuard Web Filtering

• FortiGuard Antispam Service

• FortiGuard Premier Service

An online virus scanner and virus encyclopedia is also available for your reference.

FortiClient

FortiMail

FortiClient™ Host Security software provides a secure computing environment for both desktop and laptop users running the most popular Microsoft Windows operating systems. FortiClient offers many features including:

• creating VPN connections to remote networks

• configuring real-time protection against viruses

• guarding against modification of the Windows registry

• virus scanning

FortiClient also offers a silent installation feature, enabling an administrator to efficiently distribute FortiClient to several users’ computers with preconfigured settings.

FortiMail™ Secure Messaging Platform provides powerful, flexible heuristic scanning and reporting capabilities to incoming and outgoing email traffic. The FortiMail unit has reliable, high performance features for detecting and blocking malicious attachments such as Distributed Checksum Clearinghouse (DCC) scanning and Bayesian scanning. Built on Fortinet’s award winning FortiOS and FortiASIC technology, FortiMail antivirus technology extends full content inspection capabilities to detect the most advanced email threats.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 9

About this document Introduction

FortiAnalyzer

FortiAnalyzer™ provides network administrators with the information they need to enable the best protection and security for their networks and monitor against attacks and vulnerabilities. The FortiAnalyzer unit features include:

• collecting logs from FortiGate, FortiManager, FortiMail devices and syslog devices

• generating reports on network use, vulnerabilities, and traffic patterns.

• storing quarantined files from a FortiGate unit and archived content from email and IM conversations.

The FortiAnalyzer unit can also be configured as a network analyzer to capture real-time traffic on areas of your network where firewalls are not employed. You can also use the unit as a storage device where users can access and share files, including the reports and logs that are saved on the FortiAnalyzer hard disk.

FortiReporter

FortiReporter™ Security Analyzer software generates easy-to-understand reports and can collect logs from any FortiGate unit, as well as over 30 network and security devices from third-party vendors. FortiReporter reveals network abuse, manages bandwidth requirements, monitors web usage, and ensures employees are using the office network appropriately. FortiReporter allows IT administrators to identify and respond to attacks, including identifying ways to proactively secure their networks before security threats arise.

FortiBridge

FortiBridge™ products are designed to provide enterprise organizations with continuous network traffic flow in the event of a power outage or a FortiGate system failure. The FortiBridge unit bypasses the FortiGate unit to ensure that the network can continue processing traffic. FortiBridge products are easy to use and deploy, and you can customize the actions a FortiBridge unit takes when a power failure or a FortiGate system failure occurs.

FortiManager

The FortiManager™ system is designed to meet the needs of large enterprises (including managed security service providers) responsible for establishing and maintaining security policies across many dispersed FortiGate installations. With this system, you can configure multiple FortiGate devices and monitor their status. You can also view real-time and historical logs for the FortiGate devices, including updating firmware images of managed FortiGate devices. The FortiManager System emphasizes ease of use, including easy integration with third party systems.

About this document

This document explains how to install and configure your FortiGate unit onto your network. This document also includes how to install and upgrade new firmware versions on your FortiGate unit.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

10 01-30004-0265-20070831

Introduction About this document

This document contains the following chapters:

• Installing the FortiGate unit – Describes unpacking, setting up, and powering on a FortiGate unit.

• Factory defaults – Provides the factory default settings for the FortiGate unit

• Configuring the FortiGate unit – Provides an overview of the operating modes of the FortiGate unit and how to integrate the FortiGate unit into your network.

• Configuring the modem interface – Describes how to configure and use a modem with the FortiGate-50A and FortiGate-50AM units.

• Using a wireless network – Describes configuring a wireless network and postioning the FortiWiFi-50B unit for best reception.

• FortiGate Firmware – Describes how to install, update, restore and test the firmware for the FortiGate device.

Note: This guide covers information on four FortiGate units; the FortiGate-50A, FortiGate-50B, FortiWiFi-50B and FortiGate-100. While most of the content applies to all the units, where information is specific to a certain model, an icon like the ones below will appear next to the content.

50A

Document conventions

The following document conventions are used in this guide:

• In the examples, private IP addresses are used for both private and public IP addresses.

• Notes and Cautions are used to provide important information:

Note: Highlights useful additional information.

Caution: Warns you about commands or procedures that could have unexpected or

undesirable results including loss of data or damage to equipment.

Typographic conventions

FortiGate documentation uses the following typographical conventions:

50B

100

WiFi-50B

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 11

Fortinet documentation Introduction

Convention Example

Keyboard input In the Gateway Name field, type a name for the remote VPN

Code examples config sys global

CLI command syntax config firewall policy

Document names FortiGate Administration Guide

Menu commands Go to VPN > IPSEC > Phase 1 and select Create New.

Program output Welcome!

Varia bles

peer or client (for example, Central_Office_1).

set ips-open enable

end

edit id_integer

set http_retry_count <retry_integer> set natip <address_ipv4mask>

end

<address_ipv4>

Fortinet documentation

The most up-to-date publications and previous releases of Fortinet product documentation are available from the Fortinet Technical Documentation web site at http://docs.forticare.com.

The following FortiGate product documentation is available:

• FortiGate QuickStart Guide

Provides basic information about connecting and installing a FortiGate unit.

• FortiGate Install Guide

Describes how to install a FortiGate unit. Includes a hardware reference, default configuration information, installation procedures, connection procedures, and basic configuration procedures. Choose the guide for your product model number.

• FortiGate Administration Guide

Provides basic information about how to configure a FortiGate unit, including how to define FortiGate protection profiles and firewall policies; how to apply intrusion prevention, antivirus protection, web content filtering, and spam filtering; and how to configure a VPN.

• FortiGate online help

Provides a context-sensitive and searchable version of the Administration Guide in HTML format. You can access online help from the web-based

manager as you work.

• FortiGate CLI Reference

Describes how to use the FortiGate CLI and contains a reference to all FortiGate CLI commands.

• FortiGate Log Message Reference

Available exclusively from the Fortinet Knowledge Center, the FortiGate Log Message Reference describes the structure of FortiGate log messages and provides information about the log messages that are generated by FortiGate units.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

12 01-30004-0265-20070831

Introduction Customer service and technical support

• FortiGate High Availability User Guide

Contains in-depth information about the FortiGate high availability feature and the FortiGate clustering protocol.

• FortiGate IPS User Guide

Describes how to configure the FortiGate Intrusion Prevention System settings and how the FortiGate IPS deals with some common attacks.

• FortiGate IPSec VPN User Guide

Provides step-by-step instructions for configuring IPSec VPNs using the webbased manager.

• FortiGate SSL VPN User Guide

Compares FortiGate IPSec VPN and FortiGate SSL VPN technology, and describes how to configure web-only mode and tunnel-mode SSL VPN access for remote users through the web-based manager.

• FortiGate PPTP VPN User Guide

Explains how to configure a PPTP VPN using the web-based manager.

• FortiGate Certificate Management User Guide

Contains procedures for managing digital certificates including generating certificate requests, installing signed certificates, importing CA root certificates and certificate revocation lists, and backing up and restoring installed certificates and private keys.

• FortiGate VLANs and VDOMs User Guide

Describes how to configure VLANs and VDOMS in both NAT/Route and Transparent mode. Includes detailed examples.

Fortinet Tools and Documentation CD

All Fortinet documentation is available from the Fortinet Tools and Documentation CD shipped with your Fortinet product. The documents on this CD are current at shipping time. For up-to-date versions of Fortinet documentation see the Fortinet Technical Documentation web site at http://docs.forticare.com.

Fortinet Knowledge Center

Additional Fortinet technical documentation is available from the Fortinet Knowledge Center. The knowledge center contains troubleshooting and how-to articles, FAQs, technical notes, and more. Visit the Fortinet Knowledge Center at

http://kc.forticare.com.

Comments on Fortinet technical documentation

Please send information about any errors or omissions in this document, or any Fortinet technical documentation, to techdoc@fortinet.com.

Customer service and technical support

Fortinet Technical Support provides services designed to make sure that your Fortinet systems install quickly, configure easily, and operate reliably in your network.

Please visit the Fortinet Technical Support web site at http://support.fortinet.com to learn about the technical support services that Fortinet provides.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 13

Customer service and technical support Introduction

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

14 01-30004-0265-20070831

Installing the FortiGate unit Package Contents

Installing the FortiGate unit

This section provides information on installing and setting up the FortiGate unit on your network. This chapter includes the following sections:

• Package Contents

• Mounting

• Powering on the FortiGate unit

• Connecting to the FortiGate unit

Package Contents

Review the contents of your FortiGate package to ensure all components were included.

FortiGate-50A

The FortiGate-50A package contains the following items:

• FortiGate-50A Unified Threat Management System

• one orange crossover Ethernet cable (Fortinet part number CC300248)

• one gray straight-through Ethernet cable (Fortinet part number CC300249)

• one RJ-45 to DB-9 serial cable (Fortinet part number CC300247)

• one AC adapter and power cable

• FortiGate-50A QuickStart Guide

• Fortinet Tools and Documentation CD

Figure 1: FortiGate-50A package contents

Front

Ethernet Cables:

Orange - Crossover

Grey - Straight-through

RJ-45 to

DB-9 Serial Cable

QuickStart Guide

InternalExternal

PWR STATUS

LINK 100 LINK 100

Trademarks Products mentioned in this document are trademarks.

Documentation

FortiGate-50A

DC+12V

Power

PWR STATUS

Power

LED

Modem Console

RJ-45 Serial

Connection

PWR STATUS

Status

LED

USB

Back

External

Internal

INTERNAL EXTERNAL

LINK 100 LINK 100

Internal

Interface

External

Interface

Power Cable Power Supply

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 15

Package Contents Installing the FortiGate unit

Table 1: Technical Specifications

Dimensions 8.63 x 6.13 x 1.38 in. (21.9 x 15.6 x 3.5 cm)

Weight 1.5 lb. (0.68 kg)

Power Requirements DC input voltage: 12V

DC input current: 3A

Environmental Specifications

Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 95% non-condensing

FortiGate-50B

The FortiGate-50B package contains the following items:

• FortiGate-50B Unified Threat Management System

• one gray straight-through Ethernet cable (Fortinet part number CC300249)

• one RJ-45 to DB-9 serial cable (Fortinet part number CC300247)

• one AC adapter and power cable

• FortiGate-50B QuickStart Guide

• Fortinet Tools and Documentation CD

Figure 2: FortiGate-50B package contents

Front

INTERNAL

Internal

Interface

321

LINK / ACT

10/100

Power

LED

POWER STATUS

Status

LED

WAN1 WAN 2

WAN 1,2 Interface

Back

DC+12V

123

WAN2 WAN1

WAN1

WAN2

Power

Connection

RJ-45 Serial

Connection

USB

Internal Interface, switch connectors

1,2,3

Table 2: Technical Specifications

Dimensions 8.5 x 1.4 x 5.8in. (21.6 x 14.8 x 3.6 cm)

Weight 1.6 lb. (0.73 kg)

Power Requirements DC input voltage: 12V

DC input current: 3A

Environmental Specifications

Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 95% non-condensing

Ethernet Cables:

Grey - Straight-through

RJ-45 to

DB-9 Serial Cable

Power Cable Power Supply

QuickStart Guide

INTERNAL

WAN1WAN2

LINK / ACT

POWER STATUS

10/100

321

Documentation

FortiGate-50B

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

16 01-30004-0265-20070831

Installing the FortiGate unit Package Contents

FortiWiFi-50B

The FortiWiFi-50B package contains the following items:

• FortiWiFi-50B Unified Threat Management System

• one gray straight-through Ethernet cable (Fortinet part number CC300249)

• one RJ-45 to DB-9 serial cable (Fortinet part number CC300247)

• one AC adapter and power cable

• two mounting brackets

• FortiWiFi-50B QuickStart Guide

• Fortinet Tools and Documentation CD

Figure 3: FortiWiFi-50B package contents

Front

WLAN

POWER STATUS

Status

LED

WLAN

LED

Power

LED

Ethernet Cables:

Orange - Crossover

Grey - Straight-through

2 Mounting Brackets

WAN 1,2 Interface

DB-9 Serial Cable

Internal

Interface

RJ-45 to

LINK / ACT

10/100

321

DC+12V

Power

Connection

CONSOLE

RJ-45 Serial

Connection

USBGround

Power Supply

Power Cable

INTERNAL

WAN1

WAN2

(PoE)

Table 3: Technical Specifications

Dimensions 8.5 x 1.4 x 5.8in. (21.6 x 14.8 x 3.6 cm)

Weight 1.6 lb. (0.73 kg)

Power Requirements DC input voltage: 12V

DC input current: 3A

Environmental Specifications

Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 95% non-condensing

Back

USB

Internal Interface, switch connectors

Products mentioned in this document are trademarks.

Documentation

1,2,3

QuickStart Guide

WLAN

POWER STATUS

123

WAN1 (PoE)

WAN2 WAN1

INTERNAL

WAN2

FortiWiFi-50B

WAN2

LINK / ACT

10/100

321

WAN1

FortiGate-100

The FortiGate-100 package contains the following items:

• FortiGate-100 Unified Threat Management System

• one orange crossover Ethernet cable (Fortinet part number CC300248)

• one gray straight-through Ethernet cable (Fortinet part number CC300249)

• one null-modem cable

• one AC adapter and power cable

• FortiGate-100 QuickStart Guide

• Fortinet Tools and Documentation CD

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 17

Package Contents Installing the FortiGate unit

Figure 4: FortiGate-100 package contents

Front

Ethernet Cables:

Orange - Crossover

INTERNAL

EXTERNAL

DMZ

Internal, External, DMZ

Interfaces

POWER

STATUS

Status LED

Power

LED

Grey - Straight-through

Null-Modem Cable

(RS-232)

Back

Warnings

Power Cable Power Supply

QuickStart Guide

POWER

INTERNAL

EXTERNAL

DMZ

STATUS

Trademarks Products mentioned in this document are trademarks.

Documentation

FortiGate-100

Power

Connection

ConsoleDC +12V 5A

RS-232 Serial

Connection

External

DMZ

DMZ, External, Internal

Internal

Interfaces

Table 4: Technical Specifications

Dimensions 10.25 x 6.13 x 1.75 in. (26 x 15.6 x 345 cm)

Weight 1.75 lb. (0.8 kg)

Power Requirements DC input voltage: 12V

DC input current: 5A

Environmental Specifications

Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 95% non-condensing

This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference, and

(2) This device must accept any interference received, including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

• Consult the dealer or an experienced radio/TV technician for help.

The equipment compliance with FCC radiation exposure limit set forth for uncontrolled Environment.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

18 01-30004-0265-20070831

Installing the FortiGate unit Mounting

Mounting

Adhere the rubber feet included in the package to the underside of the FortiWiFi unit, near the corners of the device.

Place the FortiGate unit on any flat, stable surface. Ensure the unit has at least

1.5 inches (3.75 cm) of clearance on each side to ensure adequate airflow for cooling.

Alternatively, you can use the mounting brackets to mount the FortiWiFi-50B to a wall. To attach the mounting brackets, place the bracket so that the flat portion is away from the FortiWifi, and the bracket is supported by the bracket side bars. Use the four screws supplied to attach the bracket to the FortiWiFi unit. Repeat for the other bracket. See the illustration below for how the bracket is attached.

Figure 5: FortiWiFi with attached mounting bracket

To mount to the wall, measure where the holes in the brackets are on the wall, and inser nails or screws. Hang the FortiWiFi on the nails or screws from the brackets.

Powering on the FortiGate unit

The FortiGate unit does not have an on/off switch.

To power on the FortiGate unit

1 Connect the AC adapter to the power connection at the back of the FortiGate unit.

2 Connect the AC adapter to the power cable.

3 Connect the power cable to a power outlet.

The FortiGate unit starts and the Power and Status LEDs light up. The Status LED flashes while the FortiGate unit starts up.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 19

Powering on the FortiGate unit Installing the FortiGate unit

Table 5: FortiGate-50A and FortiGate-100 LED indicators

LED State Description

Power Green The FortiGate unit is powered on.

Off The FortiGate unit is powered off.

Status Flashing The FortiGate unit is starting up.

Off The FortiGate unit is running normally.

Internal External DMZ (FortiGate-100)

Internal External DMZ (FortiGate-100 interfaces (back)

Table 6: FortiGate-50B and FortiWiFi-50B LED indicators

Green The correct cable is in use, and the connected

Flashing green

Off No link established.

Green The correct cable is in use, and the connected

Flashing amber

Off No link established.

equipment has power.

Network activity at this interface.

equipment has power.

Network activity at this interface.

LED State Description

Power Green The FortiGate unit is powered on.

Status Flashing The FortiGate unit is starting up.

WLAN (WiFi-50B) Green Wireless port is up.

Link/Activity Green The correct cable is in use, and the connected

10/100 Green The interface is connected at 100 Mbps.

Power over Ethernet

Power over Ethernet (PoE) is a method of powering Ethernet capable devices using CAT5 Ethernet cable to carry both data and power to a device, eliminating the need for a standard power source.

The FortiWiFi-50B includes the availability for PoE through the WAN1 port. The FortiWiFi-50B supports the IEEE 802.3af standard as a Powered Device (PD) using CAT5 Ethernet cable.

This enables you to place the FortiWiFi-50B in locations where connecting to a standard power source is inconvenient or impractical.

Off The FortiGate unit is powered off.

Off The FortiGate unit is running normally.

Off Wireless port is down.

equipment has power.

Flashing green

Off No link established.

Network activity at this interface.

Caution: Attach a grounding cable to the Ground input in the FortiWiFi-50B and connect to a grounding source to avoid potential damage to the device in the event of a power surge.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

20 01-30004-0265-20070831

Installing the FortiGate unit Powering off the FortiGate unit

Powering off the FortiGate unit

Always shut down the FortiGate operating system properly before turning off the power switch to avoid potential hardware problems.

To power off the FortiGate unit

1 From the web-based manager, go to System > Status.

2 In the Unit Operation display, select Shutdown, or from the CLI, enter:

execute shutdown

3 Disconnect the power supply.

Connecting to the FortiGate unit

There are two methods of connecting and configuring the basic FortiGate settings:

• the web-based manager

• the command line interface (CLI)

Web-based manager

You can configure and manage the FortiGate unit using HTTP or a secure HTTPS connection from any computer running Microsoft Internet Explorer or recent browser. The web-based manager supports multiple languages.

Use the web-based manager to configure most FortiGate settings, and monitor the status of the FortiGate unit.

Command line interface

You can access the FortiGate command line interface (CLI) by connecting a management computer serial port to the FortiGate serial console connector. You can also use Telnet or a secure SSH connection to the CLI from any network that is connected to the FortiGate unit, including the Internet.

Connecting to the web-based manager

Use the following procedure to connect to the web-based manager for the first time. Configuration changes made with the web-based manager are effective immediately, without resetting the firewall or interrupting service.

To connect to the web-based manager, you require:

• a computer with an Ethernet connection

• Microsoft Internet Explorer version 6.0 or higher or any recent version of most popular web browser

• a crossover Ethernet cable or an Ethernet hub with two Ethernet cables

Note: Before starting Internet Explorer, (or any recent version of the most popular web browser), ping to your FortiGate unit to see if the connection between the computer and the FortiGate unit is working properly.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 21

Connecting to the FortiGate unit Installing the FortiGate unit

To connect to the web-based manager

1 Set the IP address of the computer with an Ethernet connection to the static IP

address 192.168.1.2 with a netmask of 255.255.255.0.

50A

You can also configure the management computer to obtain an IP address automatically using DHCP. The FortiGate DHCP server assigns the management computer an IP address in the range 192.168.1.1 to

192.168.1.254.

2 Using the crossover cable or the Ethernet hub and cables, connect the internal

interface of the FortiGate unit to the computer Ethernet connection.

3 Start Internet Explorer and browse to the address https://192.168.1.99.

(remember to include the “s” in https://).

To support a secure HTTPS authentication method, the FortiGate unit ships with a self-signed security certificate, which is offered to remote clients whenever they initiate a HTTPS connection to the FortiGate unit. When you connect, the FortiGate unit displays two security warnings in the browser.

The first warning prompts you to accept and optionally install the FortiGate unit’s self-signed security certificate. If you do not accept the certificate, the FortiGate unit refuses the connection. If you accept the certificate, the FortiGate login page appears. The credentials entered are encrypted before they are sent to the FortiGate unit. If you choose to accept the certificate permanently, the warning is not displayed again.

Just before the FortiGate login page is displayed, a second warning informs you that the FortiGate certificate distinguished name differs from the original request. This warning occurs because the FortiGate unit redirects the connection. This is an informational message. Select OK to continue logging in.

Figure 6: FortiGate login

4 Type admin in the Name field and select Login.

After logging into the web-based manager, the web browser displays the system dashboard. The dashboard provides you with all system status information in one location. For details on the information displayed on the dashboard, see the

FortiGate Administration Guide.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

22 01-30004-0265-20070831

Installing the FortiGate unit Connecting to the FortiGate unit

Command line interface

You can access the FortiGate command line interface (CLI) by connecting a management computer serial port to the FortiGate serial console connector. You can also use Telnet or a secure SSH connection to connect to the CLI from any network that is connected to the FortiGate unit, including the Internet.

The CLI supports the same configuration and monitoring functionality as the web-based manager. In addition, you can use the CLI for advanced configuration options that are not available from the web-based manager. This guide contains information about basic and advanced CLI commands. For a more complete description about connecting to and using the FortiGate CLI, see the FortiGate

CLI Reference.

Connecting to the CLI

As an alternative to the web-based manager, you can install and configure the FortiGate unit using the CLI. Configuration changes made with the CLI are effective immediately, without resetting the firewall or interrupting service.

To connect to the FortiGate CLI you require:

• a computer with an available communications port

• the RJ-45 to DB-9 serial cable or null-modem cable included in your FortiGate package.

• terminal emulation software such as HyperTerminal for Microsoft Windows.

Note: The following procedure uses Microsoft Windows HyperTerminal software. You can apply these steps to any terminal emulation program.

To connect to the CLI

1 Connect the RJ-45 to DB-9 serial cable or null-modem cable to the

communications port of your computer and to the FortiGate Console port.

2 Start HyperTerminal, enter a name for the connection and select OK.

3 Configure HyperTerminal to connect directly to the communications port on your

computer and select OK.

4 Select the following port settings and select OK.

Bits per second 9600

Data bits 8

Parity None

Stop bits 1

Flow control None

5 Press Enter to connect to the FortiGate CLI.

The login prompt appears.

6 Type admin and press Enter twice.

The following prompt is displayed:

Welcome!

Type ? to list available commands. For information about how to use the CLI, see the FortiGate CLI Reference.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 23

Quick installation using factory defaults Installing the FortiGate unit

Quick installation using factory defaults

You can quickly set up your FortiGate unit for a home or small office using the

50A

web-based manager and the factory default FortiGate configuration. All you need to do is set your network computers to obtain an IP address automatically and to obtain DNS server IP addresses automatically (using DHCP), access the web-based manager, and configure the required settings for the FortiGate external interface. You can also configure FortiGate DNS servers and add a FortiGate default route if needed.

The FortiGate internal interface acts as a DHCP server for the internal network, automatically assigning IP addresses to computers (up to 100 computers) in the range of 192.168.1.110 –192.168.1.210.

Figure 7: Quick configuration using default settings

Internal interface

192.168.1.99

DHCP server and DNS

server for the internal network

Obtain IP address and DNS server IP address automatically

Internet

Router

External interface

Configuring Manual IP,

DHCP, or PPPoE addressing

FortiGate-50A

The FortiGate DHCP server also assigns the DNS server IP address

192.168.1.99 to each computer on the internal network. As a result, the FortiGate unit internal interface acts as a DNS server for the internal network. Using DNS forwarding, the FortiGate unit forwards DNS requests received from the internal network to the DNS server IP addresses added to the FortiGate unit configuration and returns lookup results to the internal network.

For more information about default DHCP server settings see “Factory default

DHCP server configuration” on page 28.

The following procedure describes how to configure your internal network and the FortiGate unit to use the FortiGate default settings.

1 Connect the FortiGate unit between the internal network and the Internet and turn

on the power.

2 Set the TCP/IP properties of the network computers to obtain an IP address

automatically and a DNS server IP address automatically (using DHCP).

3 From the management computer, browse to https://192.168.1.99.

4 Go to System > Network > Interface and select Edit for the External or WAN1

interface.

5 Select one of the following Addressing modes

• Manual: enter a static IP address and netmask, select OK, and go to step 6

• DHCP: to get an IP address from the Internet Service Provider (ISP) select DHCP and go to step 9

• PPPoE: to get an IP address from the ISP select PPPoE and go to step 9

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

24 01-30004-0265-20070831

Installing the FortiGate unit Quick installation using factory defaults

6 Go to System > Network > Options.

7 Select one of the following DNS settings

• Obtain DNS server address automatically: select to get the DNS addresses from the ISP, select Apply

• Use the following DNS server addresses: select and enter the DNS server addresses given to you by the ISP, select Apply

8 Go to Router > Static, edit route #1 and change Gateway to the default gateway

IP address from the ISP and select OK.

Network configuration is complete. Proceed to “Next steps” on page 46.

9 Select Retrieve default gateway from server and Override internal DNS options if

your ISP supports them, select OK, and proceed to “Next steps” on page 46. Go to step 6 if you are not selecting these options.

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-20070831 25

Quick installation using factory defaults Installing the FortiGate unit

FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide

26 01-30004-0265-20070831

+ 58 hidden pages