Fortinet FortiGate FortiGate-3600 Manuals

Manuals and User Guides for Fortinet FortiGate FortiGate-3600. We have 5 Fortinet FortiGate FortiGate-3600 manuals available for free PDF download: Administration Manual, Install Manual, Installation Manual, Quick Start Manual

Fortinet FortiGate FortiGate-3600 Administration Manual (458 pages)

Brand: Fortinet | Category: Firewall | Size: 9 MB

Table of Contents
3
Introduction

17
- Introducing the Fortigate Units
  
  18
  - Fortigate-5000 Series Chassis
    18
  - About the Fortigate-5000 Series Modules
    19
  - Fortigate-3600A
    19
  - Fortigate-3600
    20
  - Fortigate-3000
    20
  - Fortigate-1000A
    20
  - Fortigate-1000AFA2
    21
  - Fortigate-1000
    21
  - Fortigate-800
    21
  - Fortigate-800F
    21
  - Fortigate-500A
    22
  - Fortigate-500
    22
  - Fortigate-400A
    22
  - Fortigate-400
    22
  - Fortigate-300A
    22
  - Fortigate-300
    23
  - Fortigate-200A
    23
  - Fortigate-200
    23
  - Fortigate-100A
    23
  - Fortigate-100
    23
  - Fortigate-60/60M/ADSL
    24
  - Fortiwifi-60/60A/60AM
    24
  - Fortigate-50B
    24
  - Fortigate-50A
    24
- Fortinet Family of Products
  
  25
  - Fortiguard Subscription Services
    25
  - Fortianalyzer
    25
  - Forticlient
    25
  - Fortimanager
    26
  - Fortibridge
    26
  - Fortimail
    26
  - Fortireporter
    26
- About this Document
  
  27
  - Document Conventions
    29
- Fortigate Documentation
  
  29
- Customer Service and Technical Support
  
  31
Web-Based Manager

33
- Button Bar Features
  
  34
  - Contact Customer Support
    34
  - Using the Online Help
    34
  - Logout
    36
- Web-Based Manager Pages
  
  37
  - Web-Based Manager Menu
    37
  - Lists
    38
  - Icons
    38
System Status

41
- Status Page
  
  41
  - Viewing System Status
    41
    
    System Information
    43
    
    License Information
    44
- Changing System Information
  
  49
  - Configuring System Time
    49
  - Changing the Fortigate Unit Host Name
    50
- Changing the Fortigate Firmware
  
  51
  - Upgrading to a New Firmware Version
    51
  - Reverting to a Previous Firmware Version
    51
- Viewing Operational History
  
  52
- Manually Updating Fortiguard Definitions
  
  53
- Viewing Statistics
  
  54
- Topology Viewer
  
  58
  - The Topology Viewer Window
    58
  - Customizing the Topology Diagram
    60
Using Virtual Domains

61
- Virtual Domains
  
  61
  - VDOM Configuration Settings
    62
  - Global Configuration Settings
    63
- Enabling Vdoms
  
  64
- Configuring Vdoms and Global Settings
  
  64
System Network

69
- Interface
  
  69
- Zone
  
  87
  - Zone Settings
    87
- Network Options
  
  88
  - DNS Servers
    89
  - Dead Gateway Detection
    89
- Routing Table (Transparent Mode)
  
  90
  - Transparent Mode Route Settings
    90
- Configuring the Modem Interface
  
  91
- VLAN Overview
  
  96
  - Fortigate Units and Vlans
    96
- Vlans in Nat/Route Mode
  
  97
  - Rules for VLAN Ids
    97
  - Rules for VLAN IP Addresses
    97
  - Adding VLAN Subinterfaces
    98
- Vlans in Transparent Mode
  
  99
  - Rules for VLAN Ids
    101
  - Transparent Mode Virtual Domains and Vlans
    101
  - Troubleshooting ARP Issues
    104
- Fortigate Ipv6 Support
  
  104
System Wireless

105
- The Fortiwifi Wireless LAN Interface
  
  105
- Channel Assignments
  
  106
- System Wireless Settings (Fortiwifi-60)
  
  107
- System Wireless Settings (Fortiwifi-60A and 60AM)
  
  109
- Wireless MAC Filter
  
  110
- Wireless Monitor
  
  111
System DHCP

113
- Fortigate DHCP Servers and Relays
  
  113
- Configuring DHCP Services
  
  114
  - Configuring an Interface as a DHCP Relay Agent
    115
  - Configuring a DHCP Server
    115
- Viewing Address Leases
  
  116
  - Reserving IP Addresses for Specific Clients
    117
- Ha
  
  119
System Config

119
- HA Options
  119
- Cluster Members List
  122
- Viewing HA Statistics
  125
- Changing Subordinate Unit Host Name and Device Priority
  126
- Disconnecting a Cluster Unit from a Cluster
  126
- Snmp
  
  127
  - Configuring SNMP
    127
  - Configuring an SNMP Community
    128
  - Fortinet Mibs
    130
  - Fortigate Traps
    131
  - Fortinet MIB Fields
    133
- Replacement Messages
  
  136
- Operation Mode and VDOM Management Access
  
  141
  - Changing Operation Mode
    141
  - Management Access
    142
System Admin

143
- Administrators
  
  143
- Access Profiles
  
  148
  - Viewing the Access Profiles List
    151
  - Configuring an Access Profile
    152
- Fortimanager
  
  153
- Settings
  
  153
- Monitoring Administrators
  
  154
System Maintenance

157
- Backup and Restore
  
  157
- Fortiguard Center
  
  161
- License
  
  172
System Chassis (Fortigate-5000 Series)

173
- SMC (Shelf Manager Card)
  
  173
- Blades (Fortigate-5000 Chassis Slots)
  
  174
- Chassis Monitoring Event Log Messages
  
  176
Router Static

177
- Routing Concepts
  
  177
- Static Route
  
  180
- Policy Route
  
  185
  - Adding a Route Policy
    186
  - Moving a Route Policy
    187
Router Dynamic

189
- Rip
  
  189
- Ospf
  
  194
  - OSPF Autonomous Systems
    194
  - Defining an OSPF as
    195
  - Viewing and Editing Basic OSPF Settings
    196
  - Selecting Advanced OSPF Options
    198
  - Defining OSPF Areas
    199
  - Specifying OSPF Networks
    200
  - Selecting Operating Parameters for an OSPF Interface
    201
- Bgp
  
  202
  - How BGP Works
    202
  - Viewing and Editing BGP Settings
    203
- Multicast
  
  204
  - Viewing and Editing Multicast Settings
    204
  - Overriding the Multicast Settings on an Interface
    206
Router Monitor

209
- Displaying Routing Information
  
  209
- Searching the Fortigate Routing Table
  
  211
Firewall Policy

213
- About Firewall Policies
  
  213
  - How Policy Matching Works
    214
- Viewing the Firewall Policy List
  
  214
  - Adding a Firewall Policy
    215
  - Moving a Policy to a Different Position in the Policy List
    216
- Configuring Firewall Policies
  
  216
- Firewall Policy Examples
  
  228
  - Scenario One: SOHO Sized Business
    228
  - Scenario Two: Enterprise Sized Business
    231
Firewall Address

235
- About Firewall Addresses
  
  235
- Viewing the Firewall Address List
  
  236
- Configuring Addresses
  
  237
- Viewing the Address Group List
  
  237
- Configuring Address Groups
  
  238
Firewall Service

239
- Viewing the Predefined Service List
  
  239
- Viewing the Custom Service List
  
  243
- Configuring Custom Services
  
  243
- Viewing the Service Group List
  
  245
- Configuring Service Groups
  
  245
Firewall Schedule

247
- Viewing the One-Time Schedule List
  
  247
- Configuring One-Time Schedules
  
  248
- Viewing the Recurring Schedule List
  
  248
- Configuring Recurring Schedules
  
  249
Firewall Virtual IP

251
Firewall Protection Profile

271
- What Is a Protection Profile
  
  271
  - Default Protection Profiles
    272
- Configuring a Protection Profile
  
  272
  - Antivirus Options
    273
  - Web Filtering Options
    275
  - Fortiguard-Web Filtering Options
    276
  - Spam Filtering Options
    277
  - IPS Options
    279
  - Content Archive Options
    279
  - IM and P2P Options
    280
  - Logging Options
    281
  - Voip Options
    282
- Viewing the Protection Profile List
  
  272
- Adding a Protection Profile to a Policy
  
  282
- Protection Profile CLI Configuration
  
  283
Vpn Ipsec

285
- Overview of Ipsec Interface Mode
  
  285
- Auto Key
  
  287
- Manual Key
  
  296
  - Creating a New Manual Key Configuration
    297
- Concentrator
  
  299
  - Defining Concentrator Options
    299
- Monitor
  
  300
Vpn Pptp

303
- PPTP Range
  
  303
Vpn Ssl

305
- Config
  
  305
- Monitor
  
  307
VPN Certificates

309
- Local Certificates
  
  309
- Remote Certificates
  
  314
  - Importing Remote (OCSP) Certificates
    315
- CA Certificates
  
  315
  - Importing CA Certificates
    316
- Crl
  
  317
  - Importing a Certificate Revocation List
    317
User

319
- Configuring User Authentication
  
  319
  - Setting Authentication Timeout
    320
  - Setting User Authentication Protocol Support
    320
- Local User Accounts
  
  321
  - Configuring a User Account
    321
- RADIUS Servers
  
  322
  - Configuring a RADIUS Server
    322
- LDAP Servers
  
  323
  - Configuring an LDAP Server
    324
- PKI Authentication
  
  325
  - Configuring PKI Users
    326
- Windows AD Servers
  
  326
  - Configuring a Windows AD Server
    327
- User Group
  
  327
  - User Group Types
    328
  - User Group List
    329
  - Configuring a User Group
    330
  - Configuring Fortiguard Override Options for a User Group
    331
  - Configuring SSL VPN User Group Options
    332
- Configuring Peers and Peer Groups
  
  334
Antivirus

335
- Order of Operations
  
  335
- Antivirus Elements
  
  335
  - Fortiguard Antivirus
    336
- Antivirus Settings and Controls
  
  337
- File Pattern
  
  338
- Quarantine
  
  341
  - Viewing the Quarantined Files List
    341
  - Viewing the Autosubmit List
    342
  - Configuring the Autosubmit List
    343
  - Configuring Quarantine Options
    343
- Config
  
  345
  - Viewing the Virus List
    345
  - Viewing the Grayware List
    346
- Antivirus CLI Configuration
  
  347
  - System Global Optimize
    347
  - Config Antivirus Heuristic
    348
  - Config Antivirus Quarantine
    348
  - Config Antivirus Service <Service_Name
    348
Intrusion Protection

349
- About Intrusion Protection
  
  349
  - IPS Settings and Controls
    350
  - When to Use IPS
    350
- Predefined Signatures
  
  351
- Custom Signatures
  
  354
  - Viewing the Custom Signature List
    354
  - Creating Custom Signatures
    355
- Protocol Decoders
  
  356
  - Viewing the Protocol Decoder List
    356
  - Upgrading IPS Protocol Decoder List
    357
- Anomalies
  
  357
  - Viewing the Traffic Anomaly List
    358
  - Configuring IPS Traffic Anomalies
    358
- IPS CLI Configuration
  
  359
  - System Autoupdate Ips
    359
  - Ips Global Fail-Open
    359
  - Ips Global Ip_Protocol
    359
  - Ips Global Socket-Size
    359
  - (Config Ips Anomaly) Config Limit
    359
Web Filter

361
- Order of Web Filtering
  
  361
- How Web Filtering Works
  
  361
- Web Filter Controls
  
  362
- Content Block
  
  364
- URL Filter
  
  369
  - Viewing the URL Filter List Catalog
    369
  - Creating a New URL Filter List
    370
  - Viewing the URL Filter List
    370
  - Configuring the URL Filter List
    371
  - Moving Urls in the URL Filter List
    373
- Fortiguard - Web Filter
  
  373
  - Configuring Fortiguard-Web Filtering
    374
  - Viewing the Override List
    374
  - Configuring Override Rules
    375
  - Creating Local Categories
    377
  - Viewing the Local Ratings List
    377
  - Configuring Local Ratings
    378
  - Category Block CLI Configuration
    379
  - Fortiguard-Web Filter Reports
    379

Fortinet FortiGate FortiGate-3600 Administration Manual (394 pages)

Fortinet FortiGate FortiGate-3600: User Guide

Brand: Fortinet | Category: Firewall | Size: 5 MB

Table of Contents
3
Introduction

13
- About Fortigate Antivirus Firewalls
  13
  - Antivirus Protection
    14
  - Web Content Filtering
    15
  - Spam Filtering
    15
  - Firewall
    15
  - Transparent Mode
    16
  - Vlans and Virtual Domains
    17
  - Intrusion Prevention System (IPS)
    17
  - Vpn
    18
  - High Availability
    18
  - Secure Installation, Configuration, and Management
    19
  - Logging and Reporting
    20
- Document Conventions
  21
- Fortigate Documentation
  22
  - Comments on Fortinet Technical Documentation
    22
- Related Documentation
  23
  - Fortimanager Documentation
    23
  - Forticlient Documentation
    23
  - Fortimail Documentation
    23
  - Fortilog Documentation
    24
- Customer Service and Technical Support
  25
System Status

27
System Network

49
- Interface
  49
  - Interface Settings
    50
  - Configuring Interfaces
    55
- Zone
  59
  - Zone Settings
    60
- Management
  61
- Dns
  62
- Routing Table (Transparent Mode)
  63
  - Routing Table List
    63
  - Transparent Mode Route Settings
    64
- VLAN Overview
  64
  - Fortigate Units and Vlans
    65
- Vlans in Nat/Route Mode
  65
  - Rules for VLAN Ids
    66
  - Rules for VLAN IP Addresses
    66
  - Adding VLAN Subinterfaces
    67
- Vlans in Transparent Mode
  68
- Fortigate Ipv6 Support
  73
System DHCP

75
- Service
  75
  - DHCP Service Settings
    76
- Server
  77
  - DHCP Server Settings
    78
- Exclude Range
  79
  - DHCP Exclude Range Settings
    80
- IP/MAC Binding
  80
  - DHCP IP/MAC Binding Settings
    81
- Dynamic IP
  81
System Config

83
- System Time
  83
- Options
  84
  - HA Configuration
    87
    
    Standalone Mode
    88
    
    Cluster Members
    88
  - Configuring an HA Cluster
    93
  - Managing an HA Cluster
    96
- Snmp
  100
  - Configuring SNMP
    100
  - SNMP Community
    101
  - Fortigate Mibs
    103
  - Fortigate Traps
    104
  - Fortinet MIB Fields
    106
- Replacement Messages
  108
  - Replacement Messages List
    109
  - Changing Replacement Messages
    110
- Fortimanager
  111
System Administration

113
- Administrators
  113
  - Administrators List
    114
  - Administrators Options
    114
- Access Profiles
  115
  - Access Profile List
    116
  - Access Profile Options
    116
System Maintenance

119
- Backup and Restore
  119
  - Backing up and Restoring
    120
- Update Center
  122
- Support
  129
  - Sending a Bug Report
    130
  - Registering a Fortigate Unit
    131
- Shutdown
  133
System Virtual Domain

135
Router

145
- Static
  145
  - Static Route List
    147
  - Static Route Options
    148
- Policy
  149
  - Policy Route List
    149
  - Policy Route Options
    150
- Rip
  150
  - General
    151
  - Networks List
    152
  - Networks Options
    153
  - Interface List
    153
  - Interface Options
    154
  - Distribute List
    155
  - Distribute List Options
    156
  - Offset List
    157
  - Offset List Options
    157
- Router Objects
  158
  - Access List
    158
  - New Access List
    158
  - New Access List Entry
    159
  - Prefix List
    159
  - New Prefix List
    160
  - New Prefix List Entry
    161
  - Route-Map List
    161
  - New Route-Map
    162
  - Route-Map List Entry
    163
  - Key Chain List
    164
  - New Key Chain
    164
  - Key Chain List Entry
    165
- Monitor
  166
  - Routing Monitor List
    166
- CLI Configuration
  167
  - Get Router Info Ospf
    167
  - Get Router Info Protocols
    167
  - Get Router Info Rip
    168
  - Config Router Ospf
    168
    
    Config Network
    183
    
    Config Redistribute
    188
  - Config Router Static6
    191
Firewall

193
- Policy
  194
  - How Policy Matching Works
    194
  - Policy List
    194
  - Policy Options
    195
  - Advanced Policy Options
    198
    
    Traffic Shaping
    199
    
    Differentiated Services
    199
  - Configuring Firewall Policies
    200
  - Policy CLI Configuration
    201
- Address
  202
  - Address List
    203
  - Address Options
    203
  - Configuring Addresses
    204
  - Address Group List
    205
  - Address Group Options
    205
  - Configuring Address Groups
    206
- Service
  206
  - Predefined Service List
    207
  - Custom Service List
    210
  - Custom Service Options
    210
  - Configuring Custom Services
    212
  - Service Group List
    213
  - Service Group Options
    213
  - Configuring Service Groups
    214
- Schedule
  214
  - One-Time Schedule List
    215
  - One-Time Schedule Options
    215
  - Configuring One-Time Schedules
    216
  - Recurring Schedule List
    216
  - Recurring Schedule Options
    217
  - Configuring Recurring Schedules
    217
- Virtual IP
  218
  - Virtual IP List
    219
  - Virtual IP Options
    219
  - Configuring Virtual Ips
    220
- IP Pool
  222
  - IP Pool List
    223
  - IP Pool Options
    223
  - Configuring IP Pools
    224
  - IP Pools for Firewall Policies that Use Fixed Ports
    224
  - IP Pools and Dynamic NAT
    225
- Protection Profile
  225
  - Protection Profile List
    226
  - Default Protection Profiles
    226
  - Protection Profile Options
    227
    
    Configuring Web Filtering Options
    228
    
    Configuring Web Category Filtering Options
    229
    
    Configuring Spam Filtering Options
    230
  - Configuring Protection Profiles
    231
  - CLI Configuration
    232
Users and Authentication

237
- Setting Authentication Timeout
  238
- Local
  238
  - Local User List
    238
  - Local User Options
    238
- Radius
  239
  - RADIUS Server List
    239
  - RADIUS Server Options
    240
- Ldap
  240
  - LDAP Server List
    241
  - LDAP Server Options
    241
- User Group
  243
  - User Group List
    243
  - User Group Options
    244
- CLI Configuration
  245
  - Peer
    245
  - Peergrp
    246
Vpn

249
- Phase 1
  250
  - Phase 1 List
    250
  - Phase 1 Basic Settings
    251
  - Phase 1 Advanced Options
    252
  - Configuring Xauth
    253
- Phase 2
  254
  - Phase 2 List
    254
  - Phase 2 Basic Settings
    255
  - Phase 2 Advanced Options
    256
- Manual Key
  257
  - Manual Key List
    258
  - Manual Key Options
    258
- Concentrator
  259
  - Concentrator List
    259
  - Concentrator Options
    260
- Ping Generator
  260
  - Ping Generator Options
    261
- Monitor
  261
  - Dialup Monitor
    262
  - Static IP and Dynamic DNS Monitor
    262
- Pptp
  263
- L2Tp
  267
- Certificates
  272
- CLI Configuration
  277
  - Ipsec Phase1
    277
  - Ipsec Phase2
    279
  - Ipsec Vip
    280
- Authenticating Peers with Preshared Keys
  282
- Gateway-To-Gateway VPN
  282
- Dialup VPN
  283
- Dynamic DNS VPN
  283
- Manual Key Ipsec VPN
  284
- Adding Firewall Policies for Ipsec VPN Tunnels
  284
- Internet Browsing through a VPN Tunnel
  285
  - Configuring Internet Browsing through a VPN Tunnel
    286
- Ipsec VPN in Transparent Mode
  287
  - Special Rules
    287
- Hub and Spoke Vpns
  288
  - Configuring the Hub
    288
  - Adding a Vpn Concentrator
    289
  - Configuring Spokes
    290
- Redundant Ipsec Vpns
  291
  - Configuring Redundant Ipsec Vpns
    291
- Configuring Ipsec Virtual IP Addresses
  292
- Troubleshooting
  294
Ips

295
- Signature
  296
  - Predefined
    296
    
    Predefined Signature List
    297
    
    Configuring Predefined Signatures
    298
    
    Configuring Parameters for Dissector Signatures
    299
  - Custom
    300
    
    Adding Custom Signatures
    301
    
    Backing up and Restoring Custom Signature Files
    301
- Anomaly
  302
  - Configuring an Anomaly
    303
  - Anomaly CLI Configuration
    305
- Configuring IPS Logging and Alert Email
  306
- Default Fail Open Setting
  306
Antivirus

307
- File Block
  308
  - File Block List
    309
  - Configuring the File Block List
    310
- Quarantine
  310
  - Quarantined Files List
    310
  - Quarantined Files List Options
    311
  - Autosubmit List
    312
  - Autosubmit List Options
    312
  - Configuring the Autosubmit List
    312
  - Config
    313
- Config
  314
  - Virus List
    314
  - Grayware
    315
  - Grayware Options
    315
- CLI Configuration
  316
  - System Global Av_Failopen
    316
  - System Global Optimize
    317
  - Heuristic
    318
  - Quarantine
    319
  - Service Http
    320
  - Service Ftp
    321
  - Service Pop3
    322
  - Service Imap
    322
  - Service Smtp
    323

Fortinet FortiGate FortiGate-3600 Install Manual (66 pages)

FortiOS 3.0MR4

Brand: Fortinet | Category: Firewall | Size: 1 MB

Fortinet FortiGate FortiGate-3600 Installation Manual (54 pages)

Fortinet FortiGate FortiGate-3600: Install Guide

Brand: Fortinet | Category: Firewall | Size: 1 MB

Fortinet FortiGate FortiGate-3600 Quick Start Manual (2 pages)

Brand: Fortinet | Category: Network Hardware | Size: 0 MB

Fortinet Categories

Firewall Network Hardware Wireless Access Point

Switch

Telephone

More Fortinet Manuals

Fortinet FortiGate FortiGate-3600 Manuals

Fortinet FortiGate FortiGate-3600 Administration Manual (458 pages)

Table of Contents

Introduction

Introducing the Fortigate Units

Fortinet Family of Products

About this Document

Fortigate Documentation

Customer Service and Technical Support

Web-Based Manager

Button Bar Features

Web-Based Manager Pages

System Status

Status Page

Changing System Information

Changing the Fortigate Firmware

Viewing Operational History

Manually Updating Fortiguard Definitions

Viewing Statistics

Topology Viewer

Using Virtual Domains

Virtual Domains

Enabling Vdoms

Configuring Vdoms and Global Settings

System Network

Interface

Zone

Network Options

Routing Table (Transparent Mode)

Configuring the Modem Interface

VLAN Overview

Vlans in Nat/Route Mode

Vlans in Transparent Mode

Fortigate Ipv6 Support

System Wireless

The Fortiwifi Wireless LAN Interface

Channel Assignments

System Wireless Settings (Fortiwifi-60)

System Wireless Settings (Fortiwifi-60A and 60AM)

Wireless MAC Filter

Wireless Monitor

System DHCP

Fortigate DHCP Servers and Relays

Configuring DHCP Services

Viewing Address Leases

Ha

System Config

Snmp

Replacement Messages

Operation Mode and VDOM Management Access

System Admin

Administrators

Access Profiles

Fortimanager

Settings

Monitoring Administrators

System Maintenance

Backup and Restore

Fortiguard Center

License

System Chassis (Fortigate-5000 Series)

SMC (Shelf Manager Card)

Blades (Fortigate-5000 Chassis Slots)

Chassis Monitoring Event Log Messages

Router Static

Routing Concepts

Static Route

Policy Route

Router Dynamic

Rip

Ospf

Bgp

Multicast

Router Monitor

Displaying Routing Information

Searching the Fortigate Routing Table

Firewall Policy

About Firewall Policies

Viewing the Firewall Policy List

Configuring Firewall Policies