Controlling Management Access To An Interface; Configuring Traffic Logging For Connections To An Interface; Changing The Mtu Size To Improve Network Performance - Fortinet FortiGate 400 Installation & Configuration Manual

Network configuration

Controlling management access to an interface

Configuring traffic logging for connections to an interface

Changing the MTU size to improve network performance

FortiGate-400 Installation and Configuration Guide
1 Go to System > Network > Interface.
2 Select Modify
3 Select the management Access methods for the interface.
HTTPS To allow secure HTTPS connections to the web-based manager through this
interface.
PING If you want this interface to respond to pings. Use this setting to verify your
installation and for testing.
HTTP To allow HTTP connections to the web-based manager through this interface.
HTTP connections are not secure and can be intercepted by a third party.
SSH To allow SSH connections to the CLI through this interface.
SNMP To allow a remote SNMP manager to request SNMP information by connecting to
this interface. See
TELNET To allow Telnet connections to the CLI through this interface. Telnet connections
are not secure and can be intercepted by a third party.
Configuring management access for an interface connected to the Internet allows
remote administration of the FortiGate unit from any location on the Internet. Allowing
management access from the Internet could compromise the security of your
FortiGate unit. You should avoid allowing management access for an interface
connected to the Internet unless this is required for your configuration. To improve the
security of a FortiGate unit that allows remote management from the Internet, add
secure administrative user passwords, change these passwords regularly, and only
enable secure management access using HTTPS or SSH.
4 Select OK to save your changes.
1 Go to System > Network > Interface.
2 Select Modify
3 Select Log to record log messages whenever a firewall policy accepts a connection to
this interface.
4 Select OK to save your changes.
You can change the maximum transmission unit (MTU) size for port1, port2, port3,
and port4/ha (if it is not configured for HA). To improve the performance of your
network connection, you can adjust the MTU of the packets that the FortiGate unit
transmits from its interfaces. Ideally, this MTU should be the same as the smallest
MTU of all the networks between the FortiGate unit and the destination of the packets.
If the packets that the FortiGate sends are larger, they are broken up or fragmented,
which slows down transmission speeds.
To change the MTU size:
1 Go to System > Network > Interface.
2 Choose an interface and select Modify
3 Select Fragment outgoing packets greater than MTU.
for the interface for which to configure management access.
"Configuring SNMP" on page
for the interface for which to configure logging.
162.
.
Configuring interfaces
137