Fortinet FortiGate 1000AFA2 Manuals

Manuals and User Guides for Fortinet FortiGate 1000AFA2. We have 1 Fortinet FortiGate 1000AFA2 manual available for free PDF download: Administration Manual

Fortinet FortiGate 1000AFA2 Administration Manual

Fortinet FortiGate 1000AFA2 Administration Manual (412 pages)

Fortinet FortiGate FortiGate-1000A: User Guide

Brand: Fortinet | Category: Firewall | Size: 6 MB

Table of Contents

Table of Contents
3
Introduction

13
- About Fortigate Antivirus Firewalls
  13
  - Antivirus Protection
    14
  - Web Content Filtering
    15
  - Spam Filtering
    15
  - Firewall
    16
  - Vlans and Virtual Domains
    17
  - Intrusion Prevention System (IPS)
    17
  - Vpn
    17
  - High Availability
    18
  - Secure Installation, Configuration, and Management
    19
- About the Fortios International and US Domestic Distributions
  20
  - US Domestic Distribution Changes
    20
- Document Conventions
  22
- Fortinet Documentation
  23
  - Fortinet Knowledge Center
    24
  - Comments on Fortinet Technical Documentation
    24
- Customer Service and Technical Support
  24
Web-Based Manager

25
- Button Bar Features
  26
  - Contact Customer Support
    26
  - Online Help
    27
  - Easy Setup Wizard
    27
  - Console Access
    28
  - Logout
    28
- Web-Based Manager Pages
  29
  - Web-Based Manager Menu
    29
  - Lists
    30
  - Icons
    30
  - Status Bar
    31
- Organization of this Manual
  32
System Status

33
System Network

55
- Interface
  55
  - Interface Settings
    56
  - Configuring Interfaces
    62
- Zone
  66
  - Zone Settings
    67
- Management
  68
- Dns
  69
- Routing Table (Transparent Mode)
  70
  - Routing Table List
    70
  - Transparent Mode Route Settings
    70
- VLAN Overview
  71
  - Fortigate Units and Vlans
    72
- Vlans in Nat/Route Mode
  72
  - Rules for VLAN Ids
    72
  - Rules for VLAN IP Addresses
    72
  - Adding VLAN Subinterfaces
    73
- Vlans in Transparent Mode
  74
- Fortigate Ipv6 Support
  79
System DHCP

81
- Service
  81
  - DHCP Service Settings
    82
- Server
  83
  - DHCP Server Settings
    84
- Exclude Range
  85
  - DHCP Exclude Range Settings
    86
- IP/MAC Binding
  86
  - DHCP IP/MAC Binding Settings
    87
- Dynamic IP
  87
System Config

89
- System Time
  89
- Options
  90
  - HA Overview
    92
  - HA Configuration
    95
    
    Standalone Mode
    96
    
    Cluster Members
    96
  - Configuring an HA Cluster
    101
  - Set Weight
    104
  - Managing an HA Cluster
    105
- Snmp
  108
  - Configuring SNMP
    108
  - SNMP Community
    109
  - Fortigate Mibs
    112
  - Fortigate Traps
    112
  - Fortinet MIB Fields
    114
- Replacement Messages
  117
  - Replacement Messages List
    118
  - Changing Replacement Messages
    119
- Fortimanager
  120
System Admin

123
- Administrators
  125
  - Administrators List
    125
  - Administrators Options
    125
- Access Profiles
  127
  - Access Profile List
    127
  - Access Profile Options
    128
System Maintenance

129
- Backup and Restore
  129
  - Backing up and Restoring
    130
- Update Center
  132
- Support
  140
  - Sending a Bug Report
    140
  - Registering a Fortigate Unit
    141
- Shutdown
  143
System Virtual Domain

145
Router

155
- Static
  155
  - Static Route List
    157
  - Static Route Options
    158
- Policy
  159
  - Policy Route List
    159
  - Policy Route Options
    160
- Rip
  160
  - General
    161
  - Networks List
    162
  - Networks Options
    163
  - Interface List
    163
  - Interface Options
    164
  - Distribute List
    165
  - Distribute List Options
    166
  - Offset List
    167
  - Offset List Options
    167
- Router Objects
  168
  - Access List
    168
  - New Access List
    169
  - New Access List Entry
    169
  - Prefix List
    170
  - New Prefix List
    170
  - New Prefix List Entry
    171
  - Route-Map List
    171
  - New Route-Map
    172
  - Route-Map List Entry
    173
  - Key Chain List
    174
  - New Key Chain
    174
  - Key Chain List Entry
    175
- Monitor
  176
  - Routing Monitor List
    176
- CLI Configuration
  177
  - Get Router Info Ospf
    177
  - Get Router Info Protocols
    177
  - Get Router Info Rip
    178
  - Config Router Ospf
    178
    
    Config Network
    193
    
    Config Redistribute
    199
  - Config Router Static6
    201
Firewall

203
- Policy
  204
  - How Policy Matching Works
    204
  - Policy List
    204
  - Policy Options
    205
  - Advanced Policy Options
    208
    
    Traffic Shaping
    210
    
    Differentiated Services
    210
  - Configuring Firewall Policies
    211
  - Policy CLI Configuration
    212
- Address
  213
  - Address List
    214
  - Address Options
    214
  - Configuring Addresses
    215
  - Address Group List
    216
  - Address Group Options
    216
  - Configuring Address Groups
    217
- Service
  218
  - Predefined Service List
    218
  - Custom Service List
    221
  - Custom Service Options
    222
  - Configuring Custom Services
    223
  - Service Group List
    224
  - Service Group Options
    225
  - Configuring Service Groups
    225
- Schedule
  226
  - One-Time Schedule List
    226
  - One-Time Schedule Options
    227
  - Configuring One-Time Schedules
    227
  - Recurring Schedule List
    228
  - Recurring Schedule Options
    229
  - Configuring Recurring Schedules
    229
- Virtual IP
  230
  - Virtual IP List
    230
  - Virtual IP Options
    231
  - Configuring Virtual Ips
    232
- IP Pool
  234
  - IP Pool List
    235
  - IP Pool Options
    236
  - Configuring IP Pools
    236
  - IP Pools for Firewall Policies that Use Fixed Ports
    237
  - IP Pools and Dynamic NAT
    237
- Protection Profile
  237
  - Protection Profile List
    238
  - Default Protection Profiles
    238
  - Protection Profile Options
    239
    
    Configuring Web Filtering Options
    240
    
    Configuring Web Category Filtering Options
    241
    
    Configuring Spam Filtering Options
    242
  - Configuring Protection Profiles
    244
  - Profile CLI Configuration
    245
User

249
- Setting Authentication Timeout
  250
- Local
  250
  - Local User List
    250
  - Local User Options
    250
- Radius
  251
  - RADIUS Server List
    251
  - RADIUS Server Options
    252
- Ldap
  252
  - LDAP Server List
    253
  - LDAP Server Options
    253
- User Group
  255
  - User Group List
    255
  - User Group Options
    256
- CLI Configuration
  257
  - Peer
    257
  - Peergrp
    258
Vpn

261
- Phase 1
  262
  - Phase 1 List
    262
  - Phase 1 Basic Settings
    263
  - Phase 1 Advanced Settings
    265
- Phase 2
  266
  - Phase 2 List
    267
  - Phase 2 Basic Settings
    268
  - Phase 2 Advanced Options
    268
- Manual Key
  270
  - Manual Key List
    271
  - Manual Key Options
    271
- Concentrator
  272
  - Concentrator List
    273
  - Concentrator Options
    273
- Ping Generator
  274
  - Ping Generator Options
    275
- Monitor
  275
  - Dialup Monitor
    275
  - Static IP and Dynamic DNS Monitor
    277
- Pptp
  277
  - PPTP Range
    278
- L2Tp
  278
  - L2TP Range
    278
- Certificates
  279
  - Local Certificate List
    279
  - Certificate Request
    280
  - Importing Signed Certificates
    281
  - CA Certificate List
    282
  - Importing CA Certificates
    282
- VPN Configuration Procedures
  283
- CLI Configuration
  286
  - Ipsec Phase1
    286
  - Ipsec Phase2
    288
  - Ipsec Vip
    289
  - Configuring Ipsec Virtual Ip Addresses
    290
Ips

293
- Configuring Ips Logging and Alert Email
  293
- Signature
  294
  - Predefined Signatures
    295
  - Predefined Signature List
    295
  - Configuring Predefined Signatures
    296
  - Configuring Parameters for Dissector Signatures
    298
  - Custom Signatures
    298
  - Custom Signature List
    299
  - Adding Custom Signatures
    300
  - Backing up and Restoring Custom Signature Files
    300
- Anomaly
  300
  - Anomaly List
    301
  - Configuring an Anomaly
    301
- IPS CLI Configuration
  303
  - Configuring System Settings
    304
  - Configuring Anomaly Settings
    305
Antivirus

307
- File Block
  308
  - File Block List
    309
  - Configuring the File Block List
    310
- Quarantine
  310
  - Quarantined Files List
    310
  - Quarantined Files List Options
    311
  - Autosubmit List
    312
  - Autosubmit List Options
    312
  - Configuring the Autosubmit List
    312
  - Config
    313
- Config
  314
  - Virus List
    314
  - Grayware
    315
  - Grayware Options
    315
- CLI Configuration
  317
  - System Global Av_Failopen
    317
  - System Global Optimize
    318
  - Config Antivirus Heuristic
    319
  - Config Antivirus Quarantine
    320
  - Config Antivirus Service Http
    320
  - Config Antivirus Service Ftp
    322
  - Config Antivirus Service Pop3
    324
  - Config Antivirus Service Imap
    325
  - Config Antivirus Service Smtp
    327
Web Filter

329
- Content Block
  331
  - Web Content Block List
    331
  - Web Content Block Options
    331
  - Configuring the Web Content Block List
    332
- URL Block
  332
  - Web URL Block List
    333
  - Web URL Block Options
    333
  - Configuring the Web URL Block List
    334
  - Web Pattern Block List
    334
  - Web Pattern Block Options
    335
  - Configuring Web Pattern Block
    335
- URL Exempt
  335
  - URL Exempt List
    336
  - URL Exempt List Options
    336
  - Configuring URL Exempt
    336
- Category Block
  337
  - Fortiguard-Web Filtering Service
    337
  - Category Block Configuration Options
    338
  - Configuring Web Category Block
    339
  - Category Block Reports
    339
  - Category Block Reports Options
    340
  - Generating a Category Block Report
    340
  - Category Block CLI Configuration
    340
- Script Filter
  341
  - Web Script Filter Options
    342
Spam Filter

343
- Order of Spam Filter Operations
  345
- Fortiguard-Antispam Service
  346
- IP Address
  350
  - IP Address List
    350
  - IP Address Options
    350
  - Configuring the IP Address List
    350
- Dnsbl & Ordbl
  351
  - DNSBL & ORDBL List
    352
  - DNSBL & ORDBL Options
    352
  - Configuring the DNSBL & ORDBL List
    352
- Email Address
  353
  - Email Address List
    353
  - Email Address Options
    353
  - Configuring the Email Address List
    353
- MIME Headers
  354
  - MIME Headers List
    355
  - MIME Headers Options
    355
  - Configuring the MIME Headers List
    355
- Banned Word
  356
  - Banned Word List
    356
  - Banned Word Options
    357
  - Configuring the Banned Word List
    357
- Using Perl Regular Expressions
  358
Log & Report

361
- Log Config
  362
  - Log Setting Options
    362
  - Syslog Settings
    365
  - Alert E-Mail Options
    366
  - Log Filter Options
    367
    
    Traffic Log
    368
    
    Event Log
    368
  - Configuring Log Filters
    370
  - Enabling Traffic Logging
    370
- High Availability Cluster Logging
  371
- Log Access
  371
  - Disk Log File Access
    371
  - Viewing Log Messages
    373
  - Searching Log Messages
    375
- CLI Configuration
  376
  - Fortilog Setting
    376
  - Syslogd Setting
    377
Fortiguard Categories

381
Glossary

387
Index

393

Advertisement

Advertisement

Related Products

Fortinet Categories

Firewall Network Hardware Wireless Access Point

Telephone

Switch

More Fortinet Manuals