Table of Contents
Advertisement
Quick Configuration Guide
Transparent mode
Choosing the configuration tool
Web-based manager
FortiGate-5005-DIST Security System Getting Started
01-30000-0414-20070615
In Transparent mode, the FortiGate security system is invisible to the network. All
of the FortiGate interfaces are connected to different segments of the same
network. In Transparent mode you only have to configure a management IP
address so that you can connect to the FortiGate security system to make
configuration changes and so the FortiGate security system can connect to
external services such as the FortiGuard Distribution Network (FDN).
You would typically deploy a FortiGate security system in Transparent mode on a
private network behind an existing firewall or behind a router. In the default
Transparent mode configuration, the FortiGate security system functions as a
firewall. No traffic can pass through the FortiGate module until you add firewall
policies.
Figure 8: Example FortiGate-5005-DIST system operating in Transparent mode
204.23.1.2
192.168.1.1
(port1_X2)
Transparent mode policies
controlling 10G traffic
between internal and
external networks.
You can use either the web-based manager or the Command Line Interface (CLI)
to configure the FortiGate module.
The FortiGate web-based manager is an easy to use management tool. Use the
web-based manager to configure the FortiGate administrator password, the
interface addresses, the default gateway, and the DNS server addresses.
Internet
Gateway to
public
network
FortiGate-5005-DIST
security system in
X2
Transparent mode
ACT
USB
USB
7
8
LINK
5
1
2
3
4
5
6
ACT
LINK
CONSOLE
OOS
ACC
STATUS
IPM
ACT
USB
USB
7
8
4
LINK
1
2
3
4
5
6
ACT
LINK
CONSOLE
OOS
ACC
STATUS
IPM
ACT
USB
USB
7
8
LINK
1
2
3
4
5
6
3
ACT
LINK
CONSOLE
OOS
ACC
STATUS
IPM
ACT
USB
USB
7
8
LINK
2
1
2
3
4
5
6
ACT
POWER
LINK
CONSOLE
OOS
ACC
STATUS
IPM
DATA
CONTROL
X 1
X 2
1
5
9
13
1
5
9
13
1
MANAGEMENT
COM 1
COM 2
1
2
6
10
14
2
6
10
14
2
X 1
1/2
3/4
D15/D16
C15/C16
3
7
11
D
15
3
7
11
C
15
3
X 2
4
8
12
D
16
4
8
12
C
16
4
10/100/1000 MBPS ETHERNET ACTIVITY
PAYLOAD OPERATION
STATUS
IPM
5000SM
5050SAP
5000SM
SMC
SMC
10/100
10/100
2
link/Act
SERIAL
SERIAL
link/Act
10/100
1
2
10/100
1
link/Act
link/Act
X1
(port1_X1)
Internal
network
Choosing the configuration tool
Management
interface (mng)
23
Advertisement
Table of Contents
