Fortinet FortiGate FortiGate-500A Quick Start Manual

LED State
Green
Power
Off
Flashing Amber
(left LED)
Amber (left
(LED)
Ports 1, 2, 3, 4, 5, and 6
Green (right
LAN Ports
LED)
Red (right LED)
Off
Checking the Package Contents
Connector Type Speed
LAN (L1, RJ-45 10/100 Base-T
L2, L3, L4)
Port 1 RJ-45 10/100 Base-T
Port 2 RJ-45 10/100 Base-T
Ports 3 RJ-45 10/100 Base-T
and 4
Ports 5 RJ-45 10/100/1000
and 6 Base-T
Console RJ-45 9600 Bps
USB USB
Connecting
Connect the FortiGate unit to a power outlet and to the internal and external networks.
• Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
• Make sure the power switch on the back of the unit is turned off before connecting the
power and network cables.
• The following is displayed on the LCD when the unit is up and running:
Menu [ Fortigat -> ]
NAT, Standalone

Planning the Configuration

Before beginning to configure the FortiGate unit, you need to plan how to integrate the unit into your network. Your configuration plan depends on the operating mode you select: NAT/Route
mode (the default) or Transparent mode
NAT/Route mode
In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All of
its interfaces are on different subnets. Each interface that is connected to a network must be
Port 2
192.168.1.99
Port 1
204.23.1.5
Internet
Router
Port 4
10.10.10.1
NAT mode policies
controlling traffic between
internal and external networks
the FortiGate unit. No traffic can pass through the FortiGate unit until you add firewall poli-
cies. In NAT/Route mode, firewall policies can operate in NAT mode or in Route mode. In
NAT mode, the FortiGate unit performs network address translation before IP packets are
sent to the destination network. In Route mode, no translation takes place.
Refer to the Toos and Documentation CD-ROM for information on how to control traffic, and how to configure HA, antivirus protection, FortiGuard, Web content filtering, Spam
filtering, intrusion prevention (IPS), and virtual private networking (VPN).

Choosing a Configuration Tool

Web-based manager
The FortiGate web-based manager is an easy to use management tool. Use it to configure
the administrator password, the interface and default gateway addresses, and the DNS
server addresses.
Requirements:
• An Ethernet connection between the FortiGate unit and management computer.
• Internet Explorer 6.0 or higher on the management computer.
Description
The FortiGate unit is on.
The FortiGate unit is off.
Network activity at this interface.
The correct cable is in use and the connected
equipment has power on ports.
Ports 1, 2, 3, 4, and LAN ports, the interface is con-
nected at 100Mbps.
Ports 5 and 6, the interface is connected at
1000Mbps.
No link established.
Protocol Description
Ethernet A 4-port switch connection for up to four network
devices or an internal network.
Ethernet Connection to the internal network or Internet.
Ethernet Connection to the internal network or Internet.
Ethernet Optional connections to other networks, or to other
FortiGate-500A units for HA. For details, see the
Documentation CD-ROM.
Ethernet Optional connection to other networks.
RS-232 Optional connection to the management computer.
Provides access to the command line interface
(CLI).
USB Optional connection for the FortiUSB key, modem or
backup operation.
configured with an IP
Internal
network
address that is valid for
that network.
You would typically use
192.168.1.3
NAT/Route mode when the
Route mode policies FortiGate unit is deployed
controlling traffic between
internal networks as a gateway between pri-
vate and public networks.
DMZ
network In its default NAT/Route
mode configuration, the
unit functions as a firewall.
10.10.10.2
Firewall policies control
communications through
Esc Enter
A
© Copyright 2007 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trade-
marks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
13 April 2007
Front
CONSOLE
Esc Enter
A
Control Serial
LCD
Buttons Port
Power
LED
Back
Optional RJ-45 serial cable connects to management computer
CONSOLE USB LAN 10/100
Esc Enter
L1 L2 L3 L4 1 2 3 4
A
Straight-through Ethernet cables
connect to network devices on an internal network
Straight-through Ethernet cable connects
Straight-through Ethernet cable connects to LAN or switch on internal network
to Internet (public switch, router, or modem)
Crossover Ethernet cable connects to management computer on internal network

Transparent mode

In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on
the same subnet. You only have to configure a management IP address so that you can make
Gateway to public network
Port 1
204.23.1.5 10.10.10.2
Internet
Router
10.10.10.1
Management IP
Transparent mode policies
controlling traffic between
internal and external networks.
You can connect up to four network segments to the FortiGate unit to control traffic
between these network segments.
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to configure the administrator password,
the interface addresses, the default gateway address, and the DNS server addresses. To
configure advanced settings, see the Tools and Documentation CD-ROM.
Requirements:
• The RJ-45 to DB-9 serial connection between the FortiGate unit and management
computer.
• A terminal emulation application (HyperTerminal for Windows) on the management
computer.
CONSOLE USB LAN 10/100
L1 L2 L3 L4 1 2 3 4
FortiGate-500A
01-30004-0103-20070413
Grey - Straight-through
USB LAN 10/100 10/100/1000
L1 L2 L3 L4 1 2 3 4 5 6
LAN 1, 2, 3, 4
L1, L2, L3, L4 10/100
USB 5, 6
10/100/1000
Rack-Mount Brackets
Power Power
Connection Switch
Documentation
10/100/1000
5 6
Straight-through Ethernet cables connect
to other networks
configuration changes.
You would typically use the
FortiGate unit in Transparent
Internal Network
mode on a private network
Port 2 behind an existing firewall or
behind a router. In its default
10.10.10.3
Transparent mode configura-
tion, the unit functions as a
firewall. No traffic can pass
through the FortiGate unit until
you add firewall policies.
10/100/1000
5 6
Ethernet Cables:
Orange - Crossover
RJ-45 to
DB-9 Serial Cable
Power Cable
Q u i c k S t a r t G u i d e
CONSOLE USB LAN 10/100 10/100/1000
Esc Enter L1 L2 L3 L4 1 2 3 4 5 6
A
FortiGate-500A
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
Power cable connects to power outlet