How it Works
Fortinet
Loading...
F
Loading...
Loading...
Fortigate-400A
Administration Manual
458 pgs9.62 Mb0
Install Manual
68 pgs1.88 Mb0
Quick Start Manual
2 pgs486.65 Kb0

Fortinet FortiGate FortiGate-200A, FortiGate-300A, FortiGate-400A, FortiGate-500A Install Manual

INSTALL GUIDE
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4
www.fortinet.com
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A
!
Install Guide
© Copyright 2007 Fortinet, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of Fortinet, Inc.
Trademarks
Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC, FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat Management System, FortiGuard, FortiGuard-Antispam, FortiGuard­Antivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer, FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter, FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of Fortinet, Inc. in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
Regulatory compliance
FCC Class A Part 15 CSA/CUS
Caution: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According to the Instructions.
Contents
Contents
Contents.............................................................................................. 3
Introduction ........................................................................................ 7
About the FortiGate units ................................................................................. 7
FortiGate-200A.............................................................................................. 7
FortiGate-300A.............................................................................................. 7
FortiGate-400A.............................................................................................. 8
FortiGate-500A.............................................................................................. 8
Register your FortiGate unit .......................................................................... 8
Fortinet Family Products .................................................................................. 8
FortiGuard Subscription Services ................................................................. 8
FortiClient...................................................................................................... 9
FortiMail ........................................................................................................ 9
FortiAnalyzer ................................................................................................. 9
FortiReporter ............................................................................................... 10
FortiBridge................................................................................................... 10
FortiManager............................................................................................... 10
About this document....................................................................................... 10
Document conventions................................................................................ 10
Typographic conventions...................................................................... 11
Fortinet documentation .................................................................................. 11
Fortinet documentation CDs ....................................................................... 12
Fortinet Knowledge Center ........................................................................ 12
Comments on Fortinet technical documentation ........................................ 13
Customer service and technical support ...................................................... 13
Installing the FortiGate unit ............................................................ 15
Package Contents............................................................................................ 15
FortiGate-200A............................................................................................ 15
Mounting ............................................................................................... 16
FortiGate-300A............................................................................................ 16
Mounting ............................................................................................... 17
FortiGate-400A............................................................................................ 17
Mounting ............................................................................................... 18
FortiGate-500A............................................................................................ 18
Mounting ............................................................................................... 19
Air Flow ....................................................................................................... 19
Mechanical Loading .................................................................................... 19
Powering on the FortiGate unit ...................................................................... 19
Powering off the FortiGate unit ................................................................... 20
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 3
Contents
Connecting to the FortiGate unit ................................................................... 21
Web-based manager .................................................................................. 21
Front control buttons and LCD.................................................................... 21
Command line interface .............................................................................. 21
Connecting to the web-based manager ...................................................... 21
System Dashboard ............................................................................... 23
Command line interface .............................................................................. 23
Connecting to the CLI ................................................................................. 23
LCD front control buttons............................................................................... 24
Using the front control buttons and LCD ..................................................... 25
Factory defaults ............................................................................... 27
Factory default NAT/Route mode network configuration ............................ 27
Factory default Transparent mode network configuration........................... 28
Factory default firewall configuration .......................................................... 29
Factory default protection profiles............................................................... 29
Restoring the default settings........................................................................ 30
Restoring the default settings using the web-based manager .................... 30
Restoring the default settings using the CLI ............................................... 30
Configuring the FortiGate unit........................................................ 31
Planning the FortiGate configuration ............................................................ 31
NAT/Route mode ........................................................................................ 31
NAT/Route mode with multiple external network connections .................... 32
Transparent mode....................................................................................... 33
Preventing the public FortiGate interface from responding to ping requests 33
NAT/Route mode installation ......................................................................... 34
Preparing to configure the FortiGate unit in NAT/Route mode ................... 34
DHCP or PPPoE configuration ................................................................... 35
Using the web-based manager ................................................................... 35
Configuring basic settings .................................................................... 35
Adding a default route .......................................................................... 36
Verifying the web-based manager configuration .................................. 37
Verify the connection ............................................................................ 37
Using the front control buttons and LCD ..................................................... 37
Adding a default gateway using the front control buttons and LCD...... 38
Verifying the front control buttons and LCD.......................................... 38
Verify the connection ............................................................................ 38
Using the command line interface............................................................... 38
Configuring the FortiGate unit to operate in NAT/Route mode............. 38
Adding a default route .......................................................................... 40
Verify the connection ............................................................................ 40
Connecting the FortiGate unit to the network(s) ......................................... 41
Configuring the networks ............................................................................ 41
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
4 01-30004-0268-20070712
Contents
Transparent mode installation ....................................................................... 42
Preparing to configure Transparent mode .................................................. 42
Using the web-based manager ................................................................... 43
Using the front control buttons and LCD ..................................................... 43
Adding a default gateway using the front control buttons and LCD...... 44
Verifying the front control buttons and LCD.......................................... 44
Verify the connection ............................................................................ 44
Using the command line interface............................................................... 44
Reconnecting to the web-based manager ............................................ 45
Connecting the FortiGate unit to your network............................................ 46
Verify the connection ............................................................................ 46
Next Steps ........................................................................................................ 46
Set the date and time .................................................................................. 47
Updating antivirus and IPS signatures ........................................................ 47
Updating antivirus and IPS signatures from the web-based manager.. 48
Updating the IPS signatures from the CLI ............................................ 48
Scheduling antivirus and IPS updates .................................................. 49
Adding an override server..................................................................... 49
FortiGate Firmware .......................................................................... 51
Upgrading to a new firmware version............................................................ 51
Upgrading the firmware using the web-based manager ............................. 51
Upgrading the firmware using the CLI......................................................... 52
Reverting to a previous firmware version ..................................................... 53
Reverting to a previous firmware version using the web-based manager .. 53
Reverting to a previous firmware version using the CLI.............................. 54
Installing firmware images from a system reboot using the CLI ................ 56
Restoring the previous configuration........................................................... 58
The FortiUSB key............................................................................................. 58
Backup and Restore from the FortiUSB key ............................................... 59
Using the USB Auto-Install feature ............................................................. 59
Additional CLI Commands for the FortiUSB key ......................................... 60
Testing a new firmware image before installing it........................................ 61
Index.................................................................................................. 65
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 5
Contents
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
6 01-30004-0268-20070712
Introduction About the FortiGate units
Introduction
Welcome and thank you for selecting Fortinet products for your real-time network protection.
The FortiGate™ Unified Threat Management System improves network security, reduces network misuse and abuse, and helps you use communications resources more efficiently without compromising the performance of your network. FortiGate Unified Threat Management Systems are ICSA-certified for firewall, IPSec, and antivirus services.
The FortiGate Unified Threat Management System is a dedicated, easily managed security device that delivers a full suite of capabilities, which include:
• application-level services such as virus protection and content filtering
• network-level services such as firewall, intrusion detection, VPN and traffic shaping
The FortiGate Unified Threat Management System uses Fortinet’s Dynamic Threat Prevention System (DTPS™) technology, which leverages breakthrough in chip design, networking, security and content analysis. The unique ASIC-based architecture analyzes content and behavior in real-time, enabling key applications to be deployed right at the network edge where they are most effective at protecting your networks.
About the FortiGate units
The FortiGate-x00A series appliances are designed for larger businesses, and deliver the same enterprise-class network-based antivirus, content filtering, firewall, VPN, and network-based intrusion detection/prevention featured in all FortiGate units.
FortiGate-200A
The FortiGate-200A unit is an easy-to-deploy and easy-to-administer solution that delivers exceptional value and performance for small office, home office and branch office applications.
FortiGate-300A
The FortiGate-300A unit meets enterprise-class requirements for performance, availability, and reliability. The FortiGate-300A also support high availability (HA) and includes automatic failover with no session loss, making the FortiGate-300A a good choice for mission critical applications.
Esc Enter
A
 
  
1234
DMZ2DMZ1INTERNAL WAN1 WAN2CONSOLE USB
    
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 7
Fortinet Family Products Introduction
FortiGate-400A
The FortiGate-400A unit meets enterprise-class requirements for performance,
Esc Enter
A
CONSOLE 10/100 10/100/1000USB
1 2 3 4 5 6
availability, and reliability. The FortiGate-400A also supports high availability (HA) and features automatic failover with no session loss, making it the choice for mission critical applications.
FortiGate-500A
The FortiGate-500A unit provides the carrier-class levels of performance and
Esc Enter
A
CONSOLE
USB LAN
L1 L2 L3
reliability demanded by large enterprises and service providers. With a total of 10 network connections, (including a 4-port LAN switch), and high-availability features with automatic failover with no session loss, the FortiGate-500A is the choice for mission critical applications. The flexibility, reliability, and easy management of the FortiGate-500A makes it a natural choice for managed service offerings.
12 3 4
L4
10/100 10/100/1000
56
Register your FortiGate unit
After installing your FortiGate unit, register the unit by visiting
http://support.fortinet.com and select Product Registration.
To register, enter your contact information and the serial numbers of the FortiGate units that you or your organization have purchased. You can register multiple FortiGate units in a single session without re-entering your contact information.
By registering your FortiGate unit, you will receive updates to threat detection and prevention databases (Antivirus, Intrusion Detection, etc.) and will also ensure your access to technical support.
Fortinet Family Products
Fortinet offers a family of products that includes both software and hardware appliances for a complete network security solution including mail, logging, reporting, network management, and security along with FortiGate Unified Threat Management Systems. For more information on the Fortinet product family, go to
www.fortinet.com/products.
FortiGuard Subscription Services
FortiGuard Subscription Services are security services created, updated and managed by a global team of Fortinet security professionals. They ensure the latest attacks are detected and blocked before harming your corporate resources or infecting your end-user computing devices. These services are created with the latest security technology and designed to operate with the lowest possible operational costs.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
8 01-30004-0268-20070712
Introduction Fortinet Family Products
FortiGuard Subscription Services includes:
• FortiGuard Antivirus Service
• FortiGuard Intrusion Prevention subscription services (IPS)
• FortiGuard Web Filtering
• FortiGuard Antispam Service
• FortiGuard Premier Service
An online virus scanner and virus encyclopedia is also available for your reference.
FortiClient
FortiClient™ Host Security software provides a secure computing environment for both desktop and laptop users running the most popular Microsoft Windows operating systems. FortiClient offers many features including:
• creating VPN connections to remote networks
• configuring real-time protection against viruses
• guarding against modification of the Windows registry
• virus scanning.
FortiClient also offers a silent installation feature, enabling an administrator to efficiently distribute FortiClient to several users’ computers with preconfigured settings.
FortiMail
FortiAnalyzer
FortiMail™ provides powerful, flexible heuristic scanning and reporting capabilities to incoming and outgoing email traffic. The FortiMail unit has reliable, high performance features for detecting and blocking malicious attachments such as Distributed Checksum Clearinghouse (DCC) scanning and Bayesian scanning. Built on Fortinet’s award winning FortiOS and FortiASIC technology, FortiMail antivirus technology extends full content inspection capabilities to detect the most advanced email threats.
FortiAnalyzer™ provides network administrators with the information they need to enable the best protection and security for their networks against attacks and vulnerabilities. The FortiAnalyzer unit features include:
• collects logs from FortiGate devices and syslog devices
• creates hundreds of reports using collected log data
• scans and reports vulnerabilities
• stores files quarantined from a FortiGate unit
The FortiAnalyzer unit can also be configured as a network analyzer to capture real-time traffic on areas of your network where firewalls are not employed. You can also use the unit as a storage device where users can access and share files, including the reports and logs that are saved on the FortiAnalyzer hard disk.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 9
About this document Introduction
FortiReporter
FortiReporter™ Security Analyzer software generates easy-to-understand reports and can collect logs from any FortiGate unit, as well as over 30 network and security devices from third-party vendors. FortiReporter reveals network abuse, manages bandwidth requirements, monitors web usage, and ensures employees are using the office network appropriately. FortiReporter allows IT administrators to identify and respond to attacks, including identifying ways to proactively secure their networks before security threats arise.
FortiBridge
FortiBridge™ products are designed to provide enterprise organizations with continuous network traffic flow in the event of a power outage or a FortiGate system failure. The FortiBridge unit bypasses the FortiGate unit to make sure that the network can continue processing traffic. FortiBridge products are easy to use and deploy, including providing customizable actions a FortiBridge unit takes in the event of a power outage or FortiGate system failure.
FortiManager
The FortiManager™ system is designed to meet the needs of large enterprises (including managed security service providers) responsible for establishing and maintaining security policies across many dispersed FortiGate installations. With this system you can configure multiple FortiGate devices and monitor their status. You can also view real-time and historical logs for the FortiGate devices. The FortiManager System emphasizes ease of use, including easy integration with third party systems.
About this document
This document explains how to install and configure your FortiGate unit onto your network. This document also includes how to install and upgrade new firmware versions on your FortiGate unit.
This document contains the following chapters:
• Installing the FortiGate unit – Describes setting up, and powering on a FortiGate unit.
• Factory defaults – Provides the factory defaults settings for the FortiGate unit.
• Configuring the FortiGate unit – Provides an overview of the operating modes of the FortiGate unit and how to integrate the FortiGate unit into your network.
• FortiGate Firmware – Describes how to install, update, restore and test the firmware for the FortiGate device.
Document conventions
The following document conventions are used in this guide:
• In the examples, private IP addresses are used for both private and public IP addresses.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
10 01-30004-0268-20070712
Introduction Fortinet documentation
!
• Notes and Cautions are used to provide important information:
Note: Highlights useful additional information.
Caution: Warns you about commands or procedures that could have unexpected or
undesirable results including loss of data or damage to equipment.
Typographic conventions
FortiGate documentation uses the following typographical conventions:
Convention Example
Keyboard input In the Gateway Name field, type a name for the remote VPN
Code examples config sys global
CLI command syntax config firewall policy
Document names FortiGate Administration Guide
Menu commands Go to VPN > IPSEC > Phase 1 and select Create New.
Program output Welcome!
Varia bles
peer or client (for example, Central_Office_1).
set ips-open enable
end
edit id_integer
set http_retry_count <retry_integer> set natip <address_ipv4mask>
end
<address_ipv4>
Fortinet documentation
The most up-to-date publications and previous releases of Fortinet product documentation are available from the Fortinet Technical Documentation web site at http://docs.forticare.com.
The following FortiGate product documentation is available:
• FortiGate QuickStart Guide
Provides basic information about connecting and installing a FortiGate unit.
• FortiGate Install Guide
Describes how to install a FortiGate unit. Includes a hardware reference, default configuration information, installation procedures, connection procedures, and basic configuration procedures. Choose the guide for your product model number.
• FortiGate Administration Guide
Provides basic information about how to configure a FortiGate unit, including how to define FortiGate protection profiles and firewall policies; how to apply intrusion prevention, antivirus protection, web content filtering, and spam filtering; and how to configure a VPN.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 11
Fortinet documentation Introduction
• FortiGate online help
Provides a context-sensitive and searchable version of the Administration Guide in HTML format. You can access online help from the web-based
manager as you work.
• FortiGate CLI Reference
Describes how to use the FortiGate CLI and contains a reference to all FortiGate CLI commands.
• FortiGate Log Message Reference
Available exclusively from the Fortinet Knowledge Center, the FortiGate Log Message Reference describes the structure of FortiGate log messages and provides information about the log messages that are generated by FortiGate units.
• FortiGate High Availability User Guide
Contains in-depth information about the FortiGate high availability feature and the FortiGate clustering protocol.
• FortiGate IPS User Guide
Describes how to configure the FortiGate Intrusion Prevention System settings and how the FortiGate IPS deals with some common attacks.
• FortiGate IPSec VPN User Guide
Provides step-by-step instructions for configuring IPSec VPNs using the web­based manager.
• FortiGate SSL VPN User Guide
Compares FortiGate IPSec VPN and FortiGate SSL VPN technology, and describes how to configure web-only mode and tunnel-mode SSL VPN access for remote users through the web-based manager.
• FortiGate PPTP VPN User Guide
Explains how to configure a PPTP VPN using the web-based manager.
• FortiGate Certificate Management User Guide
Contains procedures for managing digital certificates including generating certificate requests, installing signed certificates, importing CA root certificates and certificate revocation lists, and backing up and restoring installed certificates and private keys.
• FortiGate VLANs and VDOMs User Guide
Describes how to configure VLANs and VDOMS in both NAT/Route and Transparent mode. Includes detailed examples.
Fortinet documentation CDs
All Fortinet documentation is available from the Fortinet documentation CD shipped with your Fortinet product. The documents on this CD are current at shipping time. For up-to-date versions of Fortinet documentation, see the Fortinet Knowledge Center.
Fortinet Knowledge Center
Additional Fortinet technical documentation is available from the Fortinet Knowledge Center. The knowledge center contains troubleshooting and how-to articles, FAQs, technical notes, and more. Visit the Fortinet Knowledge Center at
http://kc.forticare.com.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
12 01-30004-0268-20070712
Introduction Customer service and technical support
Comments on Fortinet technical documentation
Please send information about any errors or omissions in this document, or any Fortinet technical documentation, to techdoc@fortinet.com.
Customer service and technical support
Fortinet Technical Support provides services designed to make sure that your Fortinet systems install quickly, configure easily, and operate reliably in your network.
Please visit the Fortinet Technical Support web site at http://support.fortinet.com to learn about the technical support services that Fortinet provides.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 13
Customer service and technical support Introduction
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
14 01-30004-0268-20070712
Installing the FortiGate unit Package Contents
Installing the FortiGate unit
This section provides information on installing and setting up the FortiGate unit on your network. This section includes the following topics:
• Package Contents
• Air Flow
• Mechanical Loading
• Powering on the FortiGate unit
• Connecting to the FortiGate unit
Package Contents
Review the contents of your FortiGate package to ensure all components were included.
FortiGate-200A
The FortiGate-200A package contains the following items:
• FortiGate-200A Unified Threat Management System
• one orange crossover Ethernet cable (CC300248)
• one gray straight-through Ethernet cable (CC300249)
• one RJ-45 to DB-9 serial cable (CC300302)
• two 19-inch rack mount brackets
• one power cable
• FortiGate-200A QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 1: FortiGate-200A package contents
Front
DMZ
1, 2
DMZ2DMZ1INTERNAL WAN1 WAN2CONSOLE USB
WAN
1, 2
Power
LED
LCD
Serial
Port
(future)
1234
Internal
(4-port switch)
USB
Esc Enter
A
Control Buttons
Back
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
RJ-45 to
DB-9 Serial Cable
Power Cable
Rack-Mount Brackets
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 15
Power
Connection
Power
Switch
USER MANUAL
QuickStart Guide
1234
Esc Enter
A
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks Products mentioned in this document are trademarks.
FortiGate-200A
Documentation
DMZ2DMZ1INTERNAL WAN1 WAN2CONSOLE USB
Package Contents Installing the FortiGate unit
Mounting
The FortiGate-200A can be installed on any stable surface. The FortiGate-200A unit can also be mounted on a standard 19-inch rack. It requires 1U of vertical space in the rack.
Table 1: Technical Specifications
Dimensions 16.8 x 10 x 1.75 in. (42.7 x 25.4 x 4.5 cm.)
Weight 7.3 lb. (3.3 kg)
Power Requirements Power consumption: 14W
AC input voltage: 100 to 240VAC AC input current: 1.6A Frequency: 50 to 60Hz
Environmental specifications
Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 95% non-condensing
FortiGate-300A
The FortiGate-300A package contains the following items:
• FortiGate-300A Unified Threat Management System
• one orange crossover Ethernet cable (CC300248)
• one gray straight-through Ethernet cable (CC300249)
• one RJ-45 to DB-9 serial cable (CC300302)
• two 19-inch rack mount brackets
• one power cable
• FortiGate-300A QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 2: FortiGate-300A package contents
Front
Power
LED
CONSOLE 10/100 10/100/1000USB
Serial
Port
Back
USB
(future)
1 2 3 4 5 6
1, 2, 3, 4
LCD
Esc Enter
Control Buttons
10/100
Connection
5, 6
10/100/1000
Power
Power Switch
USER MANUAL
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
RJ-45 to
DB-9 Serial Cable
Power Cable
Rack-Mount Brackets
QuickStart Guide
Esc Enter
A
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks Products mentioned in this document are trademarks.
Documentation
1234
FortiGate-300A
DMZ2DMZ1INTERNAL WAN1 WAN2CONSOLEUSB
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
16 01-30004-0268-20070712
Installing the FortiGate unit Package Contents
Mounting
The FortiGate-300A can be installed on any stable surface. The FortiGate-300A unit can also be mounted on a standard 19-inch rack. It requires 1 U of vertical space in the rack.
Table 2: Technical Specifications
Dimensions 16.8 x 10 x 1.75 in. (42.7 x 25.4 x 4.5 cm.)
Weight 7.3 lb. (3.3 kg)
Power Requirements Power consumption: 120W
AC input voltage: 100 to 240VAC AC input current: 1.6A Frequency: 50 to 60Hz
Environmental Specifications
Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F(-25 to 70 C) Humidity: 5 to 95% non-condensing
FortiGate-400A
The FortiGate-400A package contains the following items:
• FortiGate-400A Unified Threat Management System
• one orange crossover Ethernet cable (CC300248)
• one gray straight-through Ethernet cable (CC300249)
• one RJ-45 to DB-9 serial cable (CC300302)
• two 19-inch rack mount brackets
• one power cable
• FortiGate-400A QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 3: FortiGate-400A package contents
Front
Power
LED
CONSOLE 10/100 10/100/1000USB
Serial
Port
Back
USB
(future)
1 2 3 4 5 6
1, 2, 3, 4
10/100
LCD
Esc Enter
A
Control Buttons
10/100/1000
Power
Connection
5, 6
Power Switch
Rack-Mount Brackets
USER MANUAL
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
RJ-45 to
DB-9 Serial Cable
Power Cable
QuickStart Guide
DMZ2DMZ1INTERNAL WAN1 WAN2CONSOLE USB
1234
Esc Enter
A
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks Products mentioned in this document are trademarks.
FortiGate-400A
Documentation
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 17
Package Contents Installing the FortiGate unit
Mounting
The FortiGate-400A can be installed on any stable surface. The FortiGate-400A unit can also be mounted on a standard 19-inch rack. It requires 1U of vertical space in the rack.
Table 3: Technical Specifications
Dimensions 16.8 x 10 x 1.75 in. (42.7 x 25.4 x 4.5 cm.)
Weight 7.3 lb. (3.3 kg)
Power Requirements Power consumption: 130W
AC input voltage: 100 to 240VAC AC input current: 1.6A Frequency: 50 to 60Hz
Environmental Specifications
Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F(-25 to 70 C) Humidity: 5 to 95% non-condensing
FortiGate-500A
The FortiGate-500A package contains the following items:
• FortiGate-500A Unified Threat Management System
• one orange crossover Ethernet cable (CC300248)
• one gray straight-through Ethernet cable (CC300249)
• one RJ-45 to DB-9 serial cable (CC300302)
• two 19-inch rack mount brackets
• one power cable
• FortiGate-500A QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 4: FortiGate-500A package contents
Front
CONSOLE
Power
LED
Serial
Port
Back
USB LAN
L1, L2, L3, L4
USB
(future)
L1 L2 L3
LAN
12 3 4
L4
1, 2, 3, 4
10/100
LCD
Esc Enter
A
Control Buttons
10/100 10/100/1000
56
5, 6
10/100/1000
Power
Connection
Power Switch
Rack-Mount Brackets
USER MANUAL
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
RJ-45 to
DB-9 Serial Cable
Power Cable
QuickStart Guide
DMZ2DMZ1INTERNAL WAN1 WAN2CONSOLE USB
1234
Esc Enter
A
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks Products mentioned in this document are trademarks.
FortiGate-500A
Documentation
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
18 01-30004-0268-20070712
Installing the FortiGate unit Powering on the FortiGate unit
Mounting
The FortiGate-500A can be installed on any stable surface. The FortiGate-500A unit can also be mounted on a standard 19-inch rack. It requires 1 U of vertical space in the rack.
Table 4: Technical Specifications
Dimensions 16.8 x 10 x 1.75 in. (42.7 x 25.4 x 4.5 cm.)
Weight 7.3 lb. (3.3 kg)
Power Requirements Power consumption: 140W
AC input voltage: 100 to 240VAC AC input current: 1.6A Frequency: 50 to 60Hz
Environmental Specifications
Operating temperature: 32 to 104 F (0 to 40 C) Storage temperature: -13 to 158 F(-25 to 70 C) Humidity: 5 to 95% non-condensing
Air Flow
• For rack installation, make sure the amount of air flow required for safe operation of the FortiGate unit is not compromised
• For free-standing installation, make sure the FortiGate unit has at least 1.5 in. (3.75 cm) of clearance on each side to allow for adequate air flow and cooling.
• If you install the FortiGate unit in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Make sure the operating ambient temperature does not exceed the manufacturer’s maximum rated ambient temperature.
Mechanical Loading
For rack installation, make sure the mechanical loading of the FortiGate unit is evenly distributed to avoid a hazardous condition.
Powering on the FortiGate unit
The FortiGate unit has an on/off switch.
To power on the FortiGate unit
1 Make sure the power switch on the back of the FortiGate unit is turned off.
2 Connect the power cable to the power connection on the back of the FortiGate
unit.
3 Connect the power cable to a power outlet.
4 Turn on the power switch.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 19
Powering on the FortiGate unit Installing the FortiGate unit
After a few seconds, SYSTEM STARTING appears on the LCD.
The main menu setting appears on the LCD when the system is running.
Menu [ Fortigat -> ] NAT, Standalone
The FortiGate unit starts and the Power LEDs light up.
Table 5: Led indicators
LED State Description
Power Green The FortiGate unit is powered on.
Off The FortiGate unit is powered off.
Status Flashing
Internal External WAN1 WAN2 DMZ1 DMZ2 LAN (L1 -L4) 1, 2, 3, 4, 5, 6
Green
Green The FortiGate unit is running normally.
Off The FortiGate unit is powered off.
Amber The correct cable is in use, and the connected equipment has
Flashing Amber
Green The interface is connected.
Red Ports 5 and 6 connect at up to 1000 Mbps.
Off No link established.
The FortiGate unit is starting up.
power.
Network activity at this interface.
• 1, 2, 3, 4, 5 and 6 connect at up to 100 Mbps
Powering off the FortiGate unit
Always shut down the FortiGate operating system properly before turning off the power switch to avoid potential hardware problems.
To power off the FortiGate unit
1 From the web-based manager, go to System > Status.
2 In the Unit Operation display, select Shutdown, or from the CLI, enter:
execute shutdown
3 Turn off the power switch.
4 Disconnect the power supply.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide
20 01-30004-0268-20070712
Installing the FortiGate unit Connecting to the FortiGate unit
Connecting to the FortiGate unit
There are three methods of connecting and configuring the basic FortiGate settings:
• the web-based manager
• the front control buttons and LCD
• the command line interface (CLI)
Web-based manager
You can configure and manage the FortiGate unit using HTTP or a secure HTTPS connection from any computer running Microsoft Internet Explorer 6.0 or recent browser. The web-based manager supports multiple languages.
You can use the web-based manager to configure most FortiGate settings, and monitor the status of the FortiGate unit.
Front control buttons and LCD
You can use the front control buttons and LCD on the FortiGate unit to configure IP addresses, default gateways and switch operating modes. The LCD shows you what mode you are in without having to go to the command line interface (CLI) or the web-based manager. For more information on the front control buttons and LCD, see “LCD front control buttons” on page 24.
Command line interface
You can access the FortiGate command line interface (CLI) by connecting a management computer serial port to the FortiGate serial console connector. You can also use Telnet or a secure SSH connection to connect to the CLI from any network that is connected to the FortiGate unit, including the Internet.
Connecting to the web-based manager
Use the following procedure to connect to the web-based manager for the first time. Configuration changes made with the web-based manager are effective immediately, without resetting the firewall or interrupting service.
To connect to the web-based manager, you require:
• a computer with an Ethernet connection
• Microsoft Internet Explorer version 6.0 or higher or any recent version of most popular web browser
• a crossover Ethernet cable or an Ethernet hub with two Ethernet cables
Note: Before starting Internet Explorer, (or any recent version of the most popular web browser), ping to your FortiGate unit to see if the connection between the computer and the FortiGate unit is working properly.
To connect to the web-based manager
1 Set the IP address of the computer with an Ethernet connection to the static IP
address 192.168.1.2 with a netmask of 255.255.255.0.
2 Using the crossover cable or the Ethernet hub and cables, connect the internal
interface of the FortiGate unit to the computer Ethernet connection.
FortiGate-200A, FortiGate-300A, FortiGate-400A, and FortiGate-500A FortiOS 3.0 MR4 Install Guide 01-30004-0268-20070712 21
Loading...
+ 47 hidden pages
Buy Points How it Works FAQ Contact Us Questions and Suggestions Privacy Policy Cookie Policy Terms of Use