Fortinet FortiGate FortiGate-5001SX Manuals

Manuals and User Guides for Fortinet FortiGate FortiGate-5001SX. We have 9 Fortinet FortiGate FortiGate-5001SX manuals available for free PDF download: Administration Manual, Hardware Manual, Introduction Manual, Installation Manual, Introductions Manual, Quick Manual, Security System Manual, Firmware And Fortiusb Manual

Fortinet FortiGate FortiGate-5001SX Administration Manual

Fortinet FortiGate FortiGate-5001SX Administration Manual (764 pages)

Brand: Fortinet | Category: Firewall | Size: 13 MB

Table of Contents

Table of Contents
3
Introduction

23
Fortinet Products

23
About this Document

24
Registering Your Fortinet Product

26
Customer Service and Technical Support

26
Training

27
Documentation

27
Scope

27
Conventions

28
- IP Addresses
  28
- Notes, Tips and Cautions
  28
- Typographical Conventions
  29
- Command Syntax Conventions
  29
What's New in Fortios Version 4.0 MR1

33
New SIP ALG Configuration Options

34
- Opening and Closing SIP Register and Non-Register Pinholes
  34
- Support for RFC 2543-Compliant Branch Commands
  34
Easy Forticare and Fortiguard Services Registration and Renewal

35
Endpoint Control Enhancements

35
Per-VDOM Replacement Messages

35
Content Archiving Is Now DLP Archive

36
Topology Viewer Is Now a Custom Web-Based Manager Page

36
Usage Page Shows Application, Policy, and DLP Archive Usage

37
Alert Message Console Enhancements

37
WCCP Widget

37
SSL VPN Enhancements

38
Two-Factor Authentication

43
- Force UTF-8 Login
  44
Fortigate Wireless Controller

44
Interface Status Detection for Gateway Load Balancing

44
Enhanced ECMP Route Failover and Load Balancing

44
SCEP Extensions

44
Dynamic Routing for Ipv6 Traffic

47
- Additions to Router Bgp Command
  47
- Router Access-List6
  51
- Router Ospf6
  52
- Router Prefix-List6
  56
- Router Ripng
  58
- Get Router Info6 {Bgp | Ospf | Protocols | Rip
  62
Ipv6 DNS

63
Ipv6 Transparent Mode

63
Ipv6 Administrative Access

63
- Network Interface Changes for Ipv6
  64
- Administrator Settings
  65
UTM Features Support Ipv6 Traffic

66
HTTP Basic Authentication in Firewall Policies

66
VDOM Dashboard

66
Ipsec Protocol Improvements

67
- Support for IKE V2
  67
- Support for DH-2048 (Group 14)
  67
- Support for SHA256
  68
Auto-Configuration of Ipsec Vpns

69
- Ipsec Phase 1 CLI Configuration for IKE Configuration Method
  69
- Ipsec Phase 2 Configuration for IKE Configuration Method
  71
Integral Basic DNS Server

72
- Creating Local DNS Entries
  72
- Enabling DNS on an Interface
  73
Per-VDOM DNS Configuration

74
Password Policy

75
Use LDAP Groups in Firewall and SSL-VPN Authentication

76
Traffic Shaping Enhancements

77
Logging Enhancements

79
- Support for Per-VDOM Fortianalyzer Units or Syslog Devices
  79
- SQL Log Format for Executive Summary Reports
  81
Antivirus Changes

82
Reliable Syslog

83
Web Filtering Combined Block/Exempt List

83
Web Filtering by Content Header

85
Safe Search

86
Data Leak Prevention Supports International Character Sets

86
Snmpv3 Enhancements

87
- Support for Snmpengineid
  87
- Authentication and Privacy
  87
Schedule Groups

88
Web-Based Manager

89
Common Web-Based Manager Tasks

90
Button Bar Features

93
Contacting Customer Support

93
Backing up Your Fortigate Configuration

94
Using Fortigate Online Help

94
- Searching the Online Help
  96
Logging out

97
Web-Based Manager Pages

97
Web-Based Manager Icons

105
System Status

107
Viewing the System Dashboard

107
- VDOM and Global Dashboards
  108
- Viewing the System Dashboard
  108
- System Information
  109
- License Information
  110
- Unit Operation
  113
- System Resources
  114
- Alert Message Console
  115
- Log and Archive Statistics
  117
- CLI Console
  119
- Top Sessions
  120
- Viewing the Current Sessions List
  122
- Top Viruses
  124
- Top Attacks
  124
- Traffic History
  124
Changing System Information

125
- Configuring System Time
  125
- Changing the Fortigate Unit Host Name
  126
Changing the Fortigate Firmware

126
- Upgrading to a New Firmware Version
  127
- Reverting to a Previous Firmware Version
  128
Viewing Operational History

129
Manually Updating Fortiguard Definitions

129
Viewing Log and Archive Statistics

130
- Viewing DLP Archive Information on the Statistics Widget
  130
- Viewing the Attack Log
  132
Configuring AMC Modules

133
- Auto-Bypass and Recovery for AMC Bridge Module
  
  134
- Enabling or Disabling Bypass Mode for AMC Bridge Modules
  135
Viewing Application, Policy, and DLP Archive Usage Data

137
- Top Application Usage
  137
- Top Policy Usage
  139
- DLP Archive Usage
  141
Using the Topology Viewer

142
- Adding a Subnet Object
  145
- Customizing the Topology Diagram
  146
Managing Firmware Versions

147
Backing up Your Configuration

148
Testing Firmware before Upgrading

150
Upgrading Your Fortigate Unit

151
Reverting to a Previous Firmware Image

154
Restoring Your Configuration

157
- Restoring Your Configuration Settings in the Web-Based Manager
  157
- Restoring Your Configuration Settings in the CLI
  157
Using Virtual Domains

159
Virtual Domains

159
- Benefits of Vdoms
  159
- VDOM Configuration Settings
  160
- Global Configuration Settings
  163
Enabling Vdoms

164
Configuring Vdoms and Global Settings

165
- VDOM Licenses
  165
- Creating a New VDOM
  166
- Working with Vdoms and Global Settings
  167
- Adding Interfaces to a VDOM
  168
- Inter-VDOM Links
  169
- Assigning an Interface to a VDOM
  170
- Assigning an Administrator to a VDOM
  171
- Changing the Management VDOM
  172
Configuring VDOM Resource Limits

172
- Setting VDOM Global Resource Limits
  173
- Configuring Resource Usage for Individual Vdoms
  174
System Network

177
Configuring Interfaces

177
- Switch Mode
  180
- Interface Settings
  181
- Creating a VLAN Subinterface
  185
- Creating a Loopback Interface
  185
- Creating an 802.3Ad Aggregate Interface
  186
- Creating a Redundant Interface
  187
- Configuring DHCP on an Interface
  188
- Configuring an Interface for Pppoe
  190
- Configuring Dynamic DNS on an Interface
  191
- Configuring a Virtual Ipsec Interface
  191
- Configuring Administrative Access to an Interface
  192
- Interface Status Detection for Gateway Load Balancing
  193
- Interface MTU Packet Size
  195
- Secondary IP Addresses
  196
- Adding a Software Switch Interface
  197
Configuring Zones

198
Configuring the Modem Interface

199
- Configuring Modem Settings
  199
- Redundant Mode Configuration
  201
- Standalone Mode Configuration
  202
- Adding Firewall Policies for Modem Connections
  203
- Connecting and Disconnecting the Modem
  203
- Checking Modem Status
  204
Configuring Networking Options

204
- DNS Servers
  205
Configuring Fortigate DNS Services

205
- About Split DNS
  206
- Configuring Fortigate DNS Services
  206
- Configuring the Fortigate DNS Database
  208
Configuring the Explicit Web Proxy

210
Configuring WCCP

212
Routing Table (Transparent Mode)

213
- Transparent Mode Route Settings
  214
System Wireless

215
Fortiwifi Wireless Interfaces

215
Channel Assignments

216
- IEEE 802.11A Channel Numbers
  216
- IEEE 802.11B Channel Numbers
  216
- IEEE 802.11G Channel Numbers
  217
Wireless Settings

218
- Adding a Wireless Interface
  219
Wireless MAC Filter

221
- Managing the MAC Filter List
  222
Wireless Monitor

223
Rogue AP Detection

224
- Viewing Wireless Access Points
  224
System DHCP

227
Fortigate DHCP Servers and Relays

227
Configuring DHCP Services

228
- Configuring an Interface as a DHCP Relay Agent
  229
- Configuring a DHCP Server
  229
Viewing Address Leases

231
- Reserving IP Addresses for Specific Clients
  231
Ha

233
System Config

233
- HA Options
  233
- Cluster Members List
  236
- Viewing HA Statistics
  238
- Changing Subordinate Unit Host Name and Device Priority
  239
- Disconnecting a Cluster Unit from a Cluster
  240
Snmp

241
- Configuring SNMP
  242
- Configuring an SNMP Community
  242
- Fortinet Mibs
  244
- Fortinet and Fortigate Traps
  245
- Fortinet and Fortigate MIB Fields
  248
Replacement Messages

250
- VDOM and Global Replacement Messages
  251
- Viewing the Replacement Messages List
  251
- Changing Replacement Messages
  252
- Mail Replacement Messages
  254
- HTTP Replacement Messages
  254
- FTP Replacement Messages
  255
- NNTP Replacement Messages
  256
- Alert Mail Replacement Messages
  256
- Spam Replacement Messages
  257
- Administration Replacement Message
  257
- Authentication Replacement Messages
  258
- Fortiguard Web Filtering Replacement Messages
  259
- IM and P2P Replacement Messages
  260
- Endpoint NAC Replacement Message
  261
- NAC Quarantine Replacement Messages
  261
- Traffic Quota Control Replacement Messages
  262
- SSL VPN Replacement Message
  262
- Replacement Message Tags
  262
Operation Mode and VDOM Management Access

263
- Changing Operation Mode
  263
- Management Access
  264
System Admin

267
Administrators

267
Admin Profiles

280
- Viewing the Admin Profiles List
  283
- Configuring an Admin Profile
  284
Central Management

285
Settings

286
Monitoring Administrators

289
Fortigate Ipv6 Support

289
Customizable Web-Based Manager

290
System Certificates

301
Local Certificates

302
Remote Certificates

306
- Importing Remote (OCSP) Certificates
  307
CA Certificates

307
- Importing CA Certificates
  308
Crl

309
- Importing a Certificate Revocation List
  309
System Maintenance

311
About the Maintenance Menu

311
Backing up and Restoring

312
Managing Configuration Revisions

319
Using Script Files

320
- Creating Script Files
  321
- Uploading Script Files
  321
Configuring Fortiguard Services

322
Troubleshooting FDN Connectivity

328
Updating Antivirus and Attack Definitions

328
Enabling Push Updates

330
- Enabling Push Updates When a Fortigate Unit IP Address Changes
  330
- Enabling Push Updates through a NAT Device
  331
Adding VDOM Licenses

333
Router Static

335
Routing Concepts

335
- How the Routing Table Is Built
  336
- How Routing Decisions Are Made
  336
- Multipath Routing and Determining the Best Route
  336
- Route Priority
  337
- Blackhole Route
  337
Static Route

338
ECMP Route Failover and Load Balancing

344
- Configuring Spill-Over or Usage-Based ECMP
  346
- Configuring Weighted Static Route Load Balancing
  348
Policy Route

351
- Adding a Policy Route
  352
- Moving a Policy Route
  354
Router Dynamic

357
Rip

357
Ospf

362
- Defining an OSPF AS-Overview
  363
- Configuring Basic OSPF Settings
  364
- Selecting Advanced OSPF Options
  366
- Defining OSPF Areas
  367
- Specifying OSPF Networks
  368
- Selecting Operating Parameters for an OSPF Interface
  369
Bgp

370
- Viewing and Editing BGP Settings
  371
Multicast

372
Bi-Directional Forwarding Detection (BFD)

375
- Configuring BFD
  375
Customizable Routing Widgets

377
- Access List
  377
- Distribute List
  378
- Key Chain
  378
- Offset List
  379
- Prefix List
  380
- Route Map
  380
Router Monitor

383
Viewing Routing Information

383
Searching the Fortigate Routing Table

385
Firewall Policy

387
How List Order Affects Policy Matching

387
- Moving a Policy to a Different Position in the Policy List
  388
- Enabling and Disabling Policies
  389
Multicast Policies

389
Viewing the Firewall Policy List

390
Configuring Firewall Policies

391
Using Dos Policies to Detect and Prevent Attacks

404
- Viewing the Dos Policy List
  404
- Configuring Dos Policies
  406
Using One-Arm Sniffer Policies to Detect Network Attacks

406
- Viewing the Sniffer Policy List
  407
- Configuring Sniffer Policies
  409
How Fortios Selects Unused NAT Ports

410
- Global Pool
  411
- Global Per-Protocol Pool
  411
- Per NAT IP Pool
  411
- Per NAT IP, Destination IP, Port, and Protocol Pool
  412
Firewall Policy Examples

414
- Scenario One: SOHO-Sized Business
  414
- Scenario Two: Enterprise-Sized Business
  417
Firewall Address

421
About Firewall Addresses

421
Viewing the Firewall Address List

422
Configuring Addresses

423
Configuring Address Groups

424
Viewing the Address Group List

424
Firewall Service

427
Viewing the Predefined Service List

427
Viewing the Custom Service List

432
Configuring Custom Services

433
Viewing the Service Group List

435
Configuring Service Groups

435

Advertisement

Fortinet FortiGate FortiGate-5001SX Administration Manual

Fortinet FortiGate FortiGate-5001SX Administration Manual (402 pages)

FortiGate 5000 series

Brand: Fortinet | Category: Firewall | Size: 6 MB

Table of Contents

Table of Contents
3
Introduction

13
- About Fortigate Antivirus Firewalls
  13
  - Antivirus Protection
    14
  - Web Content Filtering
    15
  - Spam Filtering
    15
  - Firewall
    16
  - Vlans and Virtual Domains
    17
  - Intrusion Prevention System (IPS)
    17
  - Vpn
    17
  - High Availability
    18
  - Secure Installation, Configuration, and Management
    19
- Document Conventions
  20
- Fortigate Documentation
  21
  - Fortinet Knowledge Center
    22
  - Comments on Fortinet Technical Documentation
    22
- Related Documentation
  22
  - Fortimanager Documentation
    22
  - Forticlient Documentation
    23
  - Fortimail Documentation
    23
  - Fortilog Documentation
    23
- Customer Service and Technical Support
  24
Web-Based Manager

25
- Button Bar Features
  26
  - Contact Customer Support
    26
  - Online Help
    27
  - Easy Setup Wizard
    27
  - Console Access
    28
  - Logout
    28
- Web-Based Manager Pages
  29
  - Web-Based Manager Menu
    29
  - Lists
    30
  - Icons
    30
  - Status Bar
    31
- Organization of this Manual
  32
System Status

33
System Network

55
- Interface
  55
  - Interface Settings
    56
  - Configuring Interfaces
    61
- Zone
  66
  - Zone Settings
    66
- Management
  67
- Dns
  68
- Routing Table (Transparent Mode)
  69
  - Routing Table List
    69
  - Transparent Mode Route Settings
    70
- VLAN Overview
  70
  - Fortigate Units and Vlans
    71
- Vlans in Nat/Route Mode
  71
  - Rules for VLAN Ids
    72
  - Rules for VLAN IP Addresses
    72
  - Adding VLAN Subinterfaces
    73
- Vlans in Transparent Mode
  74
- Fortigate Ipv6 Support
  78
System DHCP

79
- Service
  79
  - DHCP Service Settings
    80
- Server
  81
  - DHCP Server Settings
    82
- Exclude Range
  83
  - DHCP Exclude Range Settings
    84
- IP/MAC Binding
  84
  - DHCP IP/MAC Binding Settings
    85
- Dynamic IP
  85
System Config

87
- System Time
  87
- Options
  88
  - HA Overview
    90
  - HA Configuration
    92
    
    Standalone Mode
    93
    
    Cluster Members
    93
  - Configuring an HA Cluster
    98
  - Set Weight
    101
  - Managing an HA Cluster
    102
- Snmp
  105
  - Configuring SNMP
    106
  - SNMP Community
    107
  - Fortigate Mibs
    109
  - Fortigate Traps
    110
  - Fortinet MIB Fields
    112
- Replacement Messages
  114
  - Replacement Messages List
    115
  - Changing Replacement Messages
    116
- Fortimanager
  117
System Admin

119
- Administrators
  121
  - Administrators List
    121
  - Administrators Options
    121
- Access Profiles
  123
  - Access Profile List
    123
  - Access Profile Options
    124
System Maintenance

125
- Backup and Restore
  125
  - Backing up and Restoring
    126
- Update Center
  128
- Support
  135
  - Sending a Bug Report
    136
  - Registering a Fortigate Unit
    137
- Shutdown
  139
System Virtual Domain

141
Router

151
- Static
  151
  - Static Route List
    153
  - Static Route Options
    154
- Policy
  155
  - Policy Route List
    155
  - Policy Route Options
    156
- Rip
  156
  - General
    157
  - Networks List
    158
  - Networks Options
    159
  - Interface List
    159
  - Interface Options
    160
  - Distribute List
    161
  - Distribute List Options
    162
  - Offset List
    163
  - Offset List Options
    163
- Router Objects
  164
  - Access List
    164
  - New Access List
    165
  - New Access List Entry
    165
  - Prefix List
    166
  - New Prefix List
    166
  - New Prefix List Entry
    167
  - Route-Map List
    167
  - New Route-Map
    168
  - Route-Map List Entry
    169
  - Key Chain List
    170
  - New Key Chain
    170
  - Key Chain List Entry
    171
- Monitor
  172
  - Routing Monitor List
    172
- CLI Configuration
  173
  - Get Router Info Ospf
    173
  - Get Router Info Protocols
    173
  - Get Router Info Rip
    174
  - Config Router Ospf
    174
    
    Config Network
    189
    
    Config Redistribute
    195
  - Config Router Static6
    197
Firewall

199
- Policy
  200
  - How Policy Matching Works
    200
  - Policy List
    200
  - Policy Options
    202
  - Advanced Policy Options
    204
    
    Traffic Shaping
    206
    
    Differentiated Services
    206
  - Configuring Firewall Policies
    207
  - Policy CLI Configuration
    208
- Address
  209
  - Address List
    210
  - Address Options
    210
  - Configuring Addresses
    211
  - Address Group List
    212
  - Address Group Options
    212
  - Configuring Address Groups
    213
- Service
  213
  - Predefined Service List
    214
  - Custom Service List
    217
  - Custom Service Options
    217
  - Configuring Custom Services
    219
  - Service Group List
    220
  - Service Group Options
    220
  - Configuring Service Groups
    221
- Schedule
  221
  - One-Time Schedule List
    222
  - One-Time Schedule Options
    222
  - Configuring One-Time Schedules
    223
  - Recurring Schedule List
    223
  - Recurring Schedule Options
    224
  - Configuring Recurring Schedules
    224
- Virtual IP
  225
  - Virtual IP List
    226
  - Virtual IP Options
    226
  - Configuring Virtual Ips
    227
- IP Pool
  229
  - IP Pool List
    230
  - IP Pool Options
    230
  - Configuring IP Pools
    231
  - IP Pools for Firewall Policies that Use Fixed Ports
    231
  - IP Pools and Dynamic NAT
    232
- Protection Profile
  232
  - Protection Profile List
    233
  - Default Protection Profiles
    233
  - Protection Profile Options
    234
    
    Configuring Web Filtering Options
    235
    
    Configuring Web Category Filtering Options
    236
    
    Configuring Spam Filtering Options
    237
  - Configuring Protection Profiles
    239
  - Profile CLI Configuration
    240

Fortinet FortiGate FortiGate-5001SX Hardware Manual

Fortinet FortiGate FortiGate-5001SX Hardware Manual (97 pages)

FortiGate-5000 Series

Brand: Fortinet | Category: Firewall | Size: 4 MB

Table of Contents

Advertisement

Fortinet FortiGate FortiGate-5001SX Introduction Manual

Fortinet FortiGate FortiGate-5001SX Introduction Manual (77 pages)

FortiGate-5000 series

Brand: Fortinet | Category: Network Hardware | Size: 10 MB

Table of Contents

Fortinet FortiGate FortiGate-5001SX Installation Manual

Fortinet FortiGate FortiGate-5001SX Installation Manual (64 pages)

FortiGate 5000 Series

Brand: Fortinet | Category: Firewall | Size: 2 MB

Table of Contents

Fortinet FortiGate FortiGate-5001SX Introductions Manual

Fortinet FortiGate FortiGate-5001SX Introductions Manual (39 pages)

FortiGate-5000 Series

Brand: Fortinet | Category: Firewall | Size: 3 MB

Table of Contents

Fortinet FortiGate FortiGate-5001SX Security System Manual

Fortinet FortiGate FortiGate-5001SX Security System Manual (36 pages)

Fortinet FortiGate FortiGate-5001SX: User Guide

Brand: Fortinet | Category: Firewall | Size: 1 MB

Table of Contents

Fortinet FortiGate FortiGate-5001SX Quick Manual

Fortinet FortiGate FortiGate-5001SX Quick Manual (37 pages)

FortiGate-5000 Series

Brand: Fortinet | Category: Network Hardware | Size: 2 MB

Table of Contents

Fortinet FortiGate FortiGate-5001SX Firmware And Fortiusb Manual

Fortinet FortiGate FortiGate-5001SX Firmware And Fortiusb Manual (23 pages)

FortiGate-5000 Series

Brand: Fortinet | Category: Security System | Size: 1 MB

Table of Contents

Advertisement

Related Products

Fortinet Categories

Firewall Network Hardware Wireless Access Point

Switch

Telephone

More Fortinet Manuals