Planning Your Fortigate Configuration; Nat/Route Mode - Fortinet FortiGate FortiGate-60R Installation And Configuration Manual

Getting started

Planning your FortiGate configuration

NAT/Route mode

FortiGate-60R Installation and Configuration Guide
Unfiltered content profile
Use the unfiltered content profile if you do not want to apply any content protection to
content traffic. You can add this content profile to firewall policies for connections
between highly trusted or highly secure networks where content does not need to be
protected.
Table 9: Unfiltered content profile
Options
Antivirus Scan
File Block
Web URL Block
Web Content Block
Web Script Filter
Web Exempt List
Email Block List
Email Exempt List
Email Content Block
Oversized File/Email Block
Pass Fragmented Emails
Before beginning to configure the FortiGate unit, you need to plan how to integrate the
unit into your network. Among other things, you have to decide whether or not the unit
will be visible to the network, which firewall functions it will provide, and how it will
control the traffic flowing between its interfaces.
Your configuration plan is dependent upon the operating mode that you select. The
FortiGate unit can be configured in either of two modes: NAT/Route mode (the default)
or Transparent mode.
In NAT/Route mode, the unit is visible to the network. Like a router, all of its interfaces
are on different subnets. The following interfaces are available in NAT/Route mode:
• WAN1 is the default interface to the external network (usually the Internet).
• WAN2 is the redundant interface to the external network.
• Internal is the interface to the internal network.
• DMZ is the interface to the DMZ network.
You must configure routing to support the redundant WAN1 and WAN2 internet
connections. Routing can be used to automatically re-direct connections from an
interface if its connection to the external network fails.
Planning your FortiGate configuration
HTTP FTP IMAP
pass pass pass
POP3 SMTP
pass pass
37