Transparent Mode - Fortinet FortiGate FortiGate-100A Install Manual

Configuring the FortiGate unit

Transparent mode

FortiGate-60 series and FortiGate-100A FortiOS 3.0 MR4 Install Guide
01-30004-0266-20070831
Figure 5: FortiGate-100A NAT/Route multiple internet connection configuration
Router
Internet
In Transparent mode, the FortiGate unit is invisible to the network. Similar to a
network bridge, all FortiGate interfaces must be on the same subnet. You only
need to configure a management IP address to make configuration changes. The
management IP address is also used for antivirus and attack definition updates.
You typically use the FortiGate unit in Transparent mode on a private network
behind an existing firewall or behind a router. The FortiGate unit performs firewall
functions, IPSec VPN, virus scanning, IPS web content filtering, and Spam
filtering.
You can connect up to four network segments to the FortiGate unit to control
traffic between these network segments.
Table 7: Transparent mode network segments
FortiGate Unit Internal Interface External Interface
FortiGate-60 Internal
FortiGate-60ADSL
FortiGate-60B
FortiGate-60M Internal
FortiWiFi-60 Internal
FortiWiFi-60B
FortiGate-100A Internal
Note: In Transparent mode, the modem interface is not available on the FortiGate-60M.
DMZ1
WAN1
WAN2
MODEM
Internal
WAN1
WAN1
WAN2
WLAN
WAN1
Planning the FortiGate configuration
Web Server
Hub
or switch
Mail Server
Internal
network
Other
WAN2
DMZ
DMZ
DMZ
WAN1
WAN2
WAN2
DMZ1
DMZ2
31