Table of Contents
Advertisement
Getting started
Factory default firewall configuration
Factory default protection profiles
FortiGate-800/800F Installation Guide
Table 4: Factory default Transparent mode network configuration (Continued)
Administrative access
FortiGate firewall policies control how all traffic is processed by the FortiGate unit.
Until firewall policies are added, no traffic can be accepted by or pass through the
FortiGate unit. To allow traffic through the FortiGate unit you can add firewall policies.
See the FortiGate Administration Guide for information about adding firewall policies.
The following firewall configuration settings are included in the default firewall
configuration to make it easier to add firewall policies.
Table 5: Default firewall configuration
Configuration setting Name
Firewall address
Pre-defined service
Recurring schedule
Protection Profiles
The factory default firewall configuration is the same in NAT/Route and Transparent
mode.
Use protection profiles to apply different protection settings for traffic that is controlled
by firewall policies. You can use protection profiles to:
•
Configure antivirus protection for HTTP, FTP, IMAP, POP3, and SMTP firewall
policies
•
Configure Web filtering for HTTP firewall policies
•
Configure Web category filtering for HTTP firewall policies
•
Configure spam filtering for IMAP, POP3, and SMTP firewall policies
•
Enable the Intrusion Protection System (IPS) for all services
•
Enable content logging for HTTP, FTP, IMAP, POP3, and SMTP firewall policies
01-28006-0024-20041026
Internal
External
DMZ
Port 1
Port 2
Port 3
Port 4
Description
All
Firewall address matches the source or
destination address of any packet.
More than 50
Select from any of the 50 pre-defined services
predefined services
to control traffic through the FortiGate unit that
uses that service.
Always
The recurring schedule is valid at any time.
Strict, Scan, Web,
Control how the FortiGate unit applies virus
Unfiltered
scanning, web content filtering, spam filtering,
and IPS.
Factory default firewall configuration
HTTPS, Ping
Ping
HTTPS, Ping
Ping
Ping
Ping
Ping
21
Advertisement
Table of Contents
