Transparent Mode - Fortinet FortiGate FortiGate-3000 Install Manual

Configuring the FortiGate unit

Transparent mode

FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215
Figure 7: Example NAT/Route multiple internet connection configuration
204.23.1.5
Internet
64.83.32.45
NAT mode policies controlling
In Transparent mode, the FortiGate unit is invisible to the network. Similar to a
network bridge, all FortiGate interfaces must be on the same subnet. You only
have to configure a management IP address to make configuration changes. The
management IP address is also used for antivirus and attack definition updates.
You typically use the FortiGate unit in Transparent mode on a private network
behind an existing firewall or behind a router. The FortiGate unit performs firewall
functions, IPSec VPN, virus scanning, IPS web filtering, and Spam filtering.
You can connect up to six network segments to the FortiGate unit to control traffic
between these network segments:
Table 10: Transparent mode network segments
FortiGate Unit Internal Interface External
FortiGate-3000 Internal
FortiGate-3600 Internal
Note: When you are installing a HA cluster, Port 4/HA can connect to other FortiGate-3000
units and Port 5/HA can connect to other FortiGate-3600 units.
Figure 8: Example Transparent mode network configuration.
Gateway to public network
204.23.1.5
Internet
Router
(or public switch)
Internal
192.168.1.1
External
Port 1
Port 2
10.10.10.2
traffic between internal
and external networks.
Interface
External
External
External
10.10.10.2
10.10.10.1
Managment IP
Transparent mode policies controlling
traffic between internal and external networks.
Planning the FortiGate configuration
Internal network
192.168.1.18
10.10.10.23
Other
Port 1 to 4/HA
Port 1 to 5/HA
Internal network
Internal
10.10.10.3
33