Fortinet FortiGate 4000 Manuals

Fortinet FortiGate 4000 Manuals

Manuals and User Guides for Fortinet FortiGate 4000. We have 1 Fortinet FortiGate 4000 manual available for free PDF download: User Manual

Fortinet FortiGate 4000 User Manual

Fortinet FortiGate 4000 User Manual (332 pages)

Fortinet Incorporated User Manual switch FortiGate 4000

Brand: Fortinet | Category: Gateway | Size: 6.61 MB

Table of Contents

User Manual
1
Table of Contents
3
Introduction

15
- Antivirus Protection
  16
- Web Content Filtering
  16
- Email Filtering
  17
- Firewall
  17
  - Nat/Route Mode
    18
  - Transparent Mode
    18
- Vlans and Virtual Domains
  18
- Network Intrusion Detection
  18
- Vpn
  19
- High Availability
  19
- Secure Installation, Configuration, and Management
  20
  - Web-Based Manager
    20
  - Command Line Interface
    21
  - Logging and Reporting
    21
- Document Conventions
  21
- Fortinet Documentation
  22
  - Comments on Fortinet Technical Documentation
    23
- Customer Service and Technical Support
  23
Getting Started

25
Nat/Route Mode Installation

61
Transparent Mode Installation

69
High Availability

81
System Status

101
- Changing the Fortigate Host Name
  102
- Changing the Fortigate Firmware
  102
- Manual Virus Definition Updates
  114
- Manual Attack Definition Updates
  115
- Displaying the Fortigate Serial Number
  115
- Displaying the Fortigate up Time
  115
- Backing up System Settings
  115
- Restoring System Settings
  116
- Restoring System Settings to Factory Defaults
  116
- Changing to Transparent Mode
  117
- Changing to Nat/Route Mode
  117
- Restarting the Fortigate Unit
  118
- Shutting down the Fortigate Unit
  118
- System Status
  118
- Session List
  122
Virus and Attack Definitions Updates and Registration

123
Network Configuration

141
- Configuring Zones
  141
  - Adding Zones
    142
  - Deleting Zones
    142
- Configuring Interfaces
  142
- Out of Band Management
  149
  - Out of Band Management Interface CLI Command
    150
- VLAN Overview
  150
- Vlans in Nat/Route Mode
  151
  - Rules for VLAN Ids
    151
  - Rules for VLAN IP Addresses
    152
  - Adding VLAN Subinterfaces
    152
- Virtual Domains in Transparent Mode
  153
  - Virtual Domain Properties
    154
  - Configuring a Virtual Domain
    154
  - Adding Firewall Policies for Virtual Domains
    157
  - Deleting Virtual Domains
    158
- Adding DNS Server IP Addresses
  158
- Configuring Routing
  158
  - Adding a Default Route
    159
  - Adding Destination-Based Routes to the Routing Table
    159
  - Adding Routes in Transparent Mode
    160
  - Configuring the Routing Table
    161
  - Policy Routing
    161
- Configuring DHCP Services
  162
  - Configuring a DHCP Relay Agent
    163
  - Configuring a DHCP Server
    163
RIP Configuration

167
System Configuration

175
- Setting System Date and Time
  175
- Changing System Options
  176
- Adding and Editing Administrator Accounts
  178
  - Adding New Administrator Accounts
    178
  - Editing Administrator Accounts
    179
- Configuring SNMP
  180
  - Configuring the Fortigate Unit for SNMP Monitoring
    180
  - Configuring Fortigate SNMP Support
    180
  - Fortigate Mibs
    182
  - Fortigate Traps
    183
  - Logging Traps
    184
  - Fortinet MIB Fields
    185
- Replacement Messages
  187
  - Customizing Replacement Messages
    188
  - Customizing Alert Emails
    189
Firewall Configuration

191
- Default Firewall Configuration
  192
  - Interfaces
    192
  - VLAN Subinterfaces
    193
  - Zones
    193
  - Addresses
    193
  - Services
    194
  - Schedules
    194
  - Content Profiles
    194
- Adding Firewall Policies
  194
  - Firewall Policy Options
    196
  - Traffic Shaping
    197
- Configuring Policy Lists
  200
- Addresses
  202
  - Adding Addresses
    202
  - Editing Addresses
    203
  - Deleting Addresses
    204
  - Organizing Addresses into Address Groups
    204
- Services
  205
  - Predefined Services
    205
  - Adding Custom TCP and UDP Services
    208
  - Adding Custom ICMP Services
    209
  - Adding Custom IP Services
    209
  - Grouping Services
    209
- Schedules
  210
  - Creating One-Time Schedules
    211
  - Creating Recurring Schedules
    212
  - Adding Schedules to Policies
    213
- Virtual Ips
  213
- IP Pools
  218
- IP/MAC Binding
  220
- Content Profiles
  223
  - Default Content Profiles
    224
  - Adding Content Profiles
    224
  - Adding Content Profiles to Policies
    226
Users and Authentication

227
- Setting Authentication Timeout
  228
- Adding User Names and Configuring Authentication
  228
  - Deleting User Names from the Internal Database
    229
- Configuring RADIUS Support
  230
  - Adding RADIUS Servers
    230
  - Deleting RADIUS Servers
    230
- Configuring LDAP Support
  231
  - Adding LDAP Servers
    231
  - Deleting LDAP Servers
    232
- Configuring User Groups
  232
  - Adding User Groups
    233
  - Deleting User Groups
    234
Ipsec VPN

235
- Key Management
  236
  - Manual Keys
    236
  - Automatic Internet Key Exchange (Autoike) with Pre-Shared Keys or Certificates
    236
- Manual Key Ipsec Vpns
  237
  - General Configuration Steps for a Manual Key VPN
    237
  - Adding a Manual Key VPN Tunnel
    237
- Autoike Ipsec Vpns
  239
- Managing Digital Certificates
  246
  - Obtaining a Signed Local Certificate
    246
  - Obtaining CA Certificates
    249
- Configuring Encrypt Policies
  249
  - Adding a Source Address
    250
  - Adding a Destination Address
    251
  - Adding an Encrypt Policy
    251
- Ipsec VPN Concentrators
  253
- Monitoring and Troubleshooting Vpns
  257
  - Viewing VPN Tunnel Status
    257
  - Viewing Dialup VPN Connection Status
    258
  - Testing a VPN
    258
PPTP and L2TP VPN

259
- Configuring PPTP
  259
- Configuring L2TP
  265
Network Intrusion Detection System (NIDS)

271
- Detecting Attacks
  271
  - Selecting the Interfaces to Monitor
    272
  - Disabling Monitoring Interfaces
    272
  - Configuring Checksum Verification
    272
  - Viewing the Signature List
    273
  - Viewing Attack Descriptions
    273
  - Disabling NIDS Attack Signatures
    274
  - Adding User-Defined Signatures
    274
- Preventing Attacks
  276
- Logging Attacks
  278
  - Logging Attack Messages to the Attack Log
    278
  - Reducing the Number of NIDS Attack Log and Email Messages
    278
Antivirus Protection

281
- General Configuration Steps
  281
- Antivirus Scanning
  282
- File Blocking
  283
  - Blocking Files in Firewall Traffic
    284
  - Adding File Patterns to Block
    284
- Blocking Oversized Files and Emails
  285
  - Configuring Limits for Oversized Files and Email
    285
- Exempting Fragmented Email from Blocking
  285
- Viewing the Virus List
  286
Web Filtering

287
- General Configuration Steps
  287
- Content Blocking
  288
- URL Blocking
  291
  - Configuring Fortigate Web URL Blocking
    291
  - Configuring Fortigate Web Pattern Blocking
    294
- Configuring Cerberian URL Filtering
  294
  - Installing a Cerberian License Key
    295
  - Adding a Cerberian User
    295
  - Configuring Cerberian Web Filter
    295
  - Enabling Cerberian URL Filtering
    296
- Script Filtering
  297
  - Enabling Script Filtering
    297
  - Selecting Script Filter Options
    297
- Exempt URL List
  298
Email Filter

301
- General Configuration Steps
  301
- Email Banned Word List
  302
- Email Block List
  304
- Email Exempt List
  305
  - Adding Address Patterns to the Email Exempt List
    306
- Adding a Subject Tag
  306
Logging and Reporting

307
- Recording Logs
  307
- Filtering Log Messages
  310
- Configuring Traffic Logging
  311
  - Enabling Traffic Logging
    312
  - Configuring Traffic Filter Settings
    313
  - Adding Traffic Filter Entries
    313
- Viewing Logs Saved to Memory
  314
  - Viewing Logs
    314
  - Searching Logs
    315
- Configuring Alert Email
  315
  - Adding Alert Email Addresses
    316
  - Testing Alert Email
    316
  - Enabling Alert Email
    317
Glossary

319
Index

323

Advertisement

Advertisement

Related Products

Fortinet Categories

Firewall Network Hardware Wireless Access Point

Telephone

Switch

More Fortinet Manuals