Fortinet FortiGate FortiGate-400 Quick Start Manual

LED State
Green
Power
Off
Flashing Green
Green
Status
Off
Amber
Flashing Amber
1, 2, 3, 4/HA
Green
Off
Checking the Package Contents
Connector Type Speed
Port 1 RJ-45 10/100 Base-T
Port 2 RJ-45 10/100 Base-T
Port 3 RJ-45 10/100 Base-T
Port 4 RJ-45 10/100 Base-T
Console DB-9 9600 Bps
Connecting
Connect the FortiGate unit to a power outlet and to the internal and external networks.
• Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
• Make sure the power switch on the back of the unit is turned off before connecting the
power and network cables.
• The following is displayed on the LCD when the unit is up and running:
Menu [ Fortigat -> ]
NAT, Standalone

Planning the Configuration

Before beginning to configure the FortiGate unit, you need to plan how to integrate the unit into your network. Your configuration plan depends on the operating mode you select: NAT/Route
mode (the default) or Transparent mode.
NAT/Route mode
In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All of
its interfaces are on different subnets. Each interface that is connected to a network must be
Port 1
Internet
Router
Interface 3
NAT mode policies
controlling traffic between
internal and external networks
the FortiGate unit until you add firewall policies. In NAT/Route mode, firewall policies can
operate in NAT mode or in Route mode. In NAT mode, the FortiGate unit performs network
address translation before IP packets are sent to the destination network. In Route mode, no
translation takes place.
Refer to the Documentation CD-ROM for information on how to control traffic, and how to configure HA, antivirus protection, FortiGuard, Web content filtering, Spam filtering,
intrusion prevention (IPS), and virtual private networking (VPN).
Description
The FortiGate unit is on.
The FortiGate unit is off.
The FortiGate unit is starting up.
The FortiGate unit is running normally.
The FortiGate unit is powered off.
The correct cable is in use and the connected
equipment has power.
Network activity at this interface.
The interface is connected at 100Mbps.
No link established.
Protocol Description
Ethernet Connection to the Internet
Ethernet Connection to the internal network or the Internet.
Ethernet Optional connection to a DMZ or other network. For
details, see the Documentation CD-ROM.
Ethernet Optional connection to another network or other
FortiGate-400 units for high availability (HA). For
details, see the Documentation CD-ROM.
RS-232 Optional connection to the management computer.
Provides access to the command line interface
(CLI).
configured with an IP
address that is valid for
Internal
network
that network.
Internal network
192.168.1.99
You would typically use
NAT/Route mode when the
192.168.1.3
FortiGate unit is deployed
Port 2
Route mode policies
as a gateway between pri-
controlling traffic between
vate and public networks.
internal networks
In its default NAT/Route
DMZ
network
mode configuration, the
unit functions as a firewall.
Firewall policies control
DMZ network
10.10.10.2
10.10.10.1
communications through
the FortiGate unit. No
traffic can pass through
Esc
© Copyright 2007 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trade-
marks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
1 March 2007
Front
Esc Enter
LCD Control
Buttons
Back
Removable
Hard Drive
Crossover Ethernet cable connects to management computer on private network
Straight-through Ethernet cable connects to LAN or switch on private network
Straight-through Ethernet cable connects to public network (public switch, router or modem)
1 2 3
Esc Enter

Transparent mode

In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on
the same subnet. You only have to configure a management IP address so that you can make
Gateway to public network
204.23.1.5 10.10.10.2
Port 1
Internet
Router
Transparent mode policies
controlling traffic between
internal and external networks
You can connect up to four network segments to the FortiGate unit to control traffic between
these network segments.
1
Enter
FortiGate-400
01-30004-0036-20070301
1 2 3 4 / HA
Interface Status Power
1, 2, 3, 4/HA LED LED
RS-232 Serial Power Power
Connection Connection Switch
Documentation
Straight-through Ethernet cable connects to third network
Straight-through Ethernet cable connects to fourth network, or to another FortiGate-400 for HA
4 / HA
Optional null modem cable connects
to serial port on management computer
Power cable connects to power outlet
configuration changes.
You would typically use the
Internal FortiGate unit in Transparent
network
mode on a private network
behind an existing firewall or
Port 2 behind a router. In its default
Transparent mode configuration,
10.10.10.3
the unit functions as a firewall.
No traffic can pass through the
FortiGate unit until you add
firewall policies.
2 3 4 / HA
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Null-Modem Cable
(RS-232)
Power Cable
Rack-Mount Brackets
Q u i c k S t a r t G u i d e
Esc Enter 1 2 3 4 / HA
FortiGate-400
Copyright 2007 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.