User Manuals: Fortinet Gate 60D Security Appliance

Manuals and User Guides for Fortinet Gate 60D Security Appliance. We have 3 Fortinet Gate 60D Security Appliance manuals available for free PDF download: Administration Manual, Quick Start Manual

Fortinet Gate 60D Administration Manual (706 pages)

Version 4.0

Brand: Fortinet | Category: Stereo System | Size: 12 MB

Table of Contents
3
Introduction

21
Fortinet Products

21
About this Document

21
Document Conventions

24
- IP Addresses
  24
- CLI Constraints
  24
- Cautions, Notes and Tips
  24
- Typographical Conventions
  25
Registering Your Fortinet Product

25
Customer Service and Technical Support

25
Training

26
Fortinet Documentation

26
What's New in Fortios 4.0

27
Fortios 4.0 Fortigate Models and Features Supported

28
UTM Features Grouped under New UTM Menu

29
Data Leak Prevention

29
Application Control

29
SSL Content Scanning and Inspection

29
WAN Optimization

30
Endpoint Control

30
Network Access Control (NAC) Quarantine

30
IPS Extensions

31
Enhanced Antispam Engine (ASE)

33
WCCP V2 Support

33
- Any" Interface for Firewall Policies
  35
?Any” Interface for Firewall Policies

35
Global View of Firewall Policies

35
Identity-Based Firewall Policies

35
Traffic Shaping Enhancements

36
Firewall Load Balancing Virtual IP Changes

36
- User Session Persistence
  36
- Health Check Monitor
  36
- Load Balancing Server Monitor
  36
Web Filtering HTTP Upload Enhancements

36
Per-Firewall Policy Session TTL

37
Gratuitous ARP for Virtual Ips

37
Changes to Protection Profiles

37
Changes to Content Archiving

37
Customizable Web-Based Manager Pages

37
Administration over Modem

38
Auto-Bypass and Recovery for AMC Bridge Module

38
Rogue Wireless Access Point Detection

38
Configurable VDOM and Global Resource Limits

38
User Authentication Monitor

39
OCSP and SCEP Certificate over HTTPS

39
Adding Non-Standard Ports for Firewall Authentication

39
Dynamically Assigning VPN Client IP Addresses from a RADIUS Record

40
DHCP over Route-Based Ipsec Vpns

40
SNMP Upgraded to V3.0

40
File Quarantine

41
Customizable SSL VPN Web Portals

41
Logging Improvements

41
Web Filtering HTTP POST Traffic (Blocking or Comforting HTTP Post Traffic)

41
Web-Based Manager

43
Common Web-Based Manager Tasks

44
Button Bar Features

47
Contacting Customer Support

48
Backing up Your Fortigate Configuration

48
Using Fortigate Online Help

49
- Searching the Online Help
  50
Logging out

52
Web-Based Manager Pages

52
Web-Based Manager Icons

60
System Status

63
Status Page

63
- Viewing System Status
  63
- System Information
  65
Changing System Information

78
- Configuring System Time
  78
- Changing the Fortigate Unit Host Name
  78
Changing the Fortigate Firmware

79
- Upgrading to a New Firmware Version
  80
- Reverting to a Previous Firmware Version
  80
Viewing Operational History

81
Manually Updating Fortiguard Definitions

82
Viewing Statistics

83
Topology

87
- Adding a Subnet Object
  89
- Customizing the Topology Diagram
  90
Managing Firmware Versions

91
Backing up Your Configuration

92
Testing Firmware before Upgrading

94
Upgrading Your Fortigate Unit

95
Reverting to a Previous Firmware Image

98
Restoring Your Configuration

101
- Restoring Your Configuration Settings in the Web-Based Manager
  101
- Restoring Your Configuration Settings in the CLI
  101
Using Virtual Domains

103
Virtual Domains

103
- Benefits of Vdoms
  103
- VDOM Configuration Settings
  104
- Global Configuration Settings
  107
Enabling Vdoms

108
Configuring Vdoms and Global Settings

109
- VDOM Licenses
  109
- Creating a New VDOM
  110
- Working with Vdoms and Global Settings
  111
- Adding Interfaces to a VDOM
  113
- Inter-VDOM Links
  113
- Assigning an Interface to a VDOM
  114
- Assigning an Administrator to a VDOM
  115
- Changing the Management VDOM
  116
Configuring Global and VDOM Resource Limits

116
- VDOM Resource Limits
  117
- Global Resource Limits
  118
System Network

119
Interfaces

119
- Switch Mode
  122
- Interface Settings
  123
- Creating an 802.3Ad Aggregate Interface
  127
- Creating a Redundant Interface
  128
- Configuring DHCP on an Interface
  130
- Configuring an Interface for Pppoe
  131
- Configuring Dynamic DNS on an Interface
  132
- Configuring a Virtual Ipsec Interface
  133
- Configuring Interfaces with CLI Commands
  134
- Administrative Access to an Interface
  135
- Interface MTU Packet Size
  135
- Secondary IP Addresses
  136
Configuring Zones

138
Configuring the Modem Interface

139
- Configuring Modem Settings
  140
- Redundant Mode Configuration
  142
- Standalone Mode Configuration
  143
- Adding Firewall Policies for Modem Connections
  144
- Connecting and Disconnecting the Modem
  144
- Checking Modem Status
  144
Configuring Networking Options

145
- DNS Servers
  146
- Dead Gateway Detection
  146
Web Proxy

147
Routing Table (Transparent Mode)

149
- Transparent Mode Route Settings
  149
VLAN Overview

150
- Fortigate Units and Vlans
  151
Vlans in Nat/Route Mode

151
- Rules for VLAN Ids
  152
- Rules for VLAN IP Addresses
  152
- Adding VLAN Subinterfaces
  153
Vlans in Transparent Mode

154
- Rules for VLAN Ids
  156
- Transparent Mode Virtual Domains and Vlans
  156
- Troubleshooting ARP Issues
  157
System Wireless

159
Fortiwifi Wireless Interfaces

159
Channel Assignments

160
- IEEE 802.11A Channel Numbers
  160
- IEEE 802.11B Channel Numbers
  160
- IEEE 802.11G Channel Numbers
  161
Wireless Settings

162
- Adding a Wireless Interface
  163
Wireless MAC Filter

165
- Managing the MAC Filter List
  166
Wireless Monitor

167
Rogue AP Detection

168
- Viewing Wireless Access Points
  168
System DHCP

171
Fortigate DHCP Servers and Relays

171
Configuring DHCP Services

172
- Configuring an Interface as a DHCP Relay Agent
  173
- Configuring a DHCP Server
  173
Viewing Address Leases

175
- Reserving IP Addresses for Specific Clients
  175
Ha

177
System Config

177
- HA Options
  177
- Cluster Members List
  180
- Viewing HA Statistics
  182
- Changing Subordinate Unit Host Name and Device Priority
  183
- Disconnecting a Cluster Unit from a Cluster
  184
Snmp

185
- Configuring SNMP
  186
- Configuring an SNMP Community
  186
- Fortinet Mibs
  188
- Fortinet and Fortigate Traps
  189
- Fortinet and Fortigate MIB Fields
  192
Replacement Messages

194
- Replacement Messages List
  195
- Changing Replacement Messages
  196
- Mail Replacement Messages
  197
- HTTP Replacement Messages
  197
- FTP Replacement Messages
  198
- NNTP Replacement Messages
  199
- Alert Mail Replacement Messages
  199
- Spam Replacement Messages
  200
- Administration Replacement Message
  200
- Authentication Replacement Messages
  201
- Fortiguard Web Filtering Replacement Messages
  202
- IM and P2P Replacement Messages
  203
- Endpoint Control Replacement Message
  204
- NAC Quarantine Replacement Messages
  204
- SSL VPN Replacement Message
  205
- Replacement Message Tags
  205
Operation Mode and VDOM Management Access

206
- Changing Operation Mode
  206
- Management Access
  207
System Admin

209
Administrators

209
Admin Profiles

222
- Viewing the Admin Profiles List
  224
- Configuring an Admin Profile
  225
Central Management

226
Settings

228
Monitoring Administrators

229
Fortigate Ipv6 Support

230
Customizable Web-Based Manager

231
System Certificates

243
Local Certificates

244
Remote Certificates

248
- Importing Remote (OCSP) Certificates
  249
CA Certificates

249
- Importing CA Certificates
  250
Crl

251
- Importing a Certificate Revocation List
  251
System Maintenance

253
About the Maintenance Menu

253
Backing up and Restoring

254
Managing Configuration Revisions

261
Using Script Files

262
- Creating Script Files
  263
- Uploading Script Files
  264
Configuring Fortiguard Services

264
Troubleshooting FDN Connectivity

271
Updating Antivirus and Attack Definitions

271
Enabling Push Updates

273
- Enabling Push Updates When a Fortigate Unit IP Address Changes
  273
- Enabling Push Updates through a NAT Device
  274
Adding VDOM Licenses

276
Router Static

277
Routing Concepts

277
- How the Routing Table Is Built
  278
- How Routing Decisions Are Made
  278
- Multipath Routing and Determining the Best Route
  278
- Route Priority
  279
- Blackhole Route
  279
Static Route

280
Policy Route

285
- Adding a Policy Route
  286
- Moving a Policy Route
  287
Router Dynamic

289
Rip

289
Ospf

294
- Defining an OSPF AS-Overview
  295
- Configuring Basic OSPF Settings
  296
- Selecting Advanced OSPF Options
  298
- Defining OSPF Areas
  299
- Specifying OSPF Networks
  300
- Selecting Operating Parameters for an OSPF Interface
  301
Bgp

302
- Viewing and Editing BGP Settings
  303
Multicast

304
Bi-Directional Forwarding Detection (BFD)

307
- Configuring BFD
  307
Customizable Routing Widgets

309
- Access List
  309
- Distribute List
  310
- Key Chain
  310
- Offset List
  311
- Prefix List
  312
- Route Map
  312
Router Monitor

315
Viewing Routing Information

315
Searching the Fortigate Routing Table

317
Firewall Policy

319
How List Order Affects Policy Matching

319
- Moving a Policy to a Different Position in the Policy List
  320
Multicast Policies

321
Viewing the Firewall Policy List

321
Configuring Firewall Policies

323
Dos Policies

337
- Viewing the Dos Policy List
  337
- Configuring Dos Policies
  338
Firewall Policy Examples

339
- Scenario One: SOHO-Sized Business
  339
- Scenario Two: Enterprise-Sized Business
  342
Firewall Address

345
About Firewall Addresses

345
Viewing the Firewall Address List

346
Configuring Addresses

347
Viewing the Address Group List

348
Configuring Address Groups

348
Firewall Service

351
Viewing the Predefined Service List

351
Viewing the Custom Service List

356
Configuring Custom Services

357
Viewing the Service Group List

359
Configuring Service Groups

359
Firewall Schedule

361
Viewing the Recurring Schedule List

361
Configuring Recurring Schedules

362
Viewing the One-Time Schedule List

362
Configuring One-Time Schedules

363
Firewall Virtual IP

365
How Virtual Ips Map Connections through Fortigate Units

365
- Inbound Connections
  365
- Outbound Connections
  368
- VIP Requirements
  369
Viewing the Virtual IP List

369
Configuring Virtual Ips

370
Virtual IP Groups

380
Viewing the VIP Group List

380
Configuring VIP Groups

380
IP Pools

381
Viewing the IP Pool List

383
Configuring IP Pools

383
Double NAT: Combining IP Pool with Virtual IP

384
Adding NAT Firewall Policies in Transparent Mode

386
Firewall Load Balance

389
How Load Balancer Works

389
Configuring Virtual Servers

390
Configuring Real Servers

392
Configuring Health Check Monitors

393
Monitoring the Servers

395
Firewall Protection Profile

397
What Is a Protection Profile

397
Adding a Protection Profile to a Firewall Policy

398
Default Protection Profiles

398
SSL Content Scanning and Inspection

399
Viewing the Protection Profile List

399
Configuring a Protection Profile

404
- Protocol Recognition Options
  405
- Anti-Virus Options
  407
- IPS Options
  411
- Web Filtering Options
  411
- Fortiguard Web Filtering Options
  413
- Spam Filtering Options
  416
- Data Leak Prevention Sensor Options
  419
- Application Control Options
  420
- Logging Options
  421
Traffic Shaping

423
Guaranteed Bandwidth and Maximum Bandwidth

423
Traffic Priority

424
Traffic Shaping Considerations

424
Configuring Traffic Shaping

425
SIP Support

427
Voip and SIP

427
The Fortigate Unit and Voip Security

429
- Sip Nat
  429
How SIP Support Works

431
Configuring SIP

432
Antivirus

439
Order of Operations

439
Antivirus Tasks

440
- Fortiguard Antivirus
  441
Antivirus Settings and Controls

441
File Filter

443
File Quarantine

446
- Viewing the File Quarantine List
  447
- Viewing the Autosubmit List
  448
- Configuring the Autosubmit List
  449
- Configuring Quarantine Options
  449
Viewing the Virus Database Information

451
Viewing and Configuring the Grayware List

452
Antivirus CLI Configuration

453
Intrusion Protection

455
About Intrusion Protection

455
- Intrusion Protection Settings and Controls
  456
- When to Use Intrusion Protection
  456
Signatures

456
- Viewing the Predefined Signature List
  457
- Using Display Filters
  458
Custom Signatures

459
- Viewing the Custom Signature List
  459
- Creating Custom Signatures
  459
Protocol Decoders

460
- Viewing the Protocol Decoder List
  460
- Upgrading the IPS Protocol Decoder List
  461
IPS Sensors

461
- Viewing the IPS Sensor List
  461
- Adding an IPS Sensor
  462
- Configuring IPS Sensors
  462
- Configuring Filters
  464
- Configuring Pre-Defined and Custom Overrides
  465
- Packet Logging
  467
Dos Sensors

469
- Viewing the Dos Sensor List
  470
- Configuring Dos Sensors
  470
- Understanding the Anomalies
  472
Intrusion Protection CLI Configuration

472
Web Filter

475
Order of Web Filtering

475
How Web Filtering Works

475
Web Filter Controls

476
Web Content Block

478
URL Filter

483
- Viewing the URL Filter List Catalog
  484
- Creating a New URL Filter List
  484
- Viewing the URL Filter List
  485
- Configuring the URL Filter List
  485
- URL Formats
  486
- Moving Urls in the URL Filter List
  487
Fortiguard - Web Filter

487
- Configuring Fortiguard Web Filtering
  488
- Viewing the Override List
  488
- Configuring Administrative Override Rules
  489
- Creating Local Categories
  491
- Viewing the Local Ratings List
  491
- Configuring Local Ratings
  492
- Category Block CLI Configuration
  493
Antispam

495
- Order of Spam Filtering
  495
- Anti-Spam Filter Controls
  496
Banned Word

498
IP Address and Email Address Black/White Lists

501
Advanced Antispam Configuration

505
- Config Spamfilter Mheader
  505
- Config Spamfilter Dnsbl
  506
Using Wildcards and Perl Regular Expressions

506
- Perl Regular Expression Formats
  507
- Example Regular Expressions
  508
Data Leak Prevention

511
DLP Sensors

511
DLP Rules

515
- Viewing the DLP Rule List
  515
- Adding or Configuring DLP Rules
  516
DLP Compound Rules

519
- Viewing the DLP Compound Rule List
  520
- Adding and Configuring DLP Compound Rules
  520
Application Control

523
What Is Application Control

523
Fortiguard Application Control Database

523
Viewing the Application Control Lists

524
Creating a New Application Control List

524
Configuring an Application Control List

525
Adding or Configuring an Application Control List Entry

526
Application Control Statistics

527
Ipsec VPN

531
Overview of Ipsec VPN Configuration

531
Policy-Based Versus Route-Based Vpns

532
Auto Key

533
Manual Key

541
- Creating a New Manual Key Configuration
  542
Internet Browsing Configuration

544
Concentrator

544
- Defining Concentrator Options
  545
Monitoring Vpns

545
Pptp Vpn

547
PPTP Configuration Using Fortigate Web-Based Manager

547
PPTP Configuration Using CLI Commands

549
Ssl Vpn

551
Ssl.root

551
Configuring SSL VPN

552
Monitoring SSL VPN Sessions

553
SSL VPN Web Portal

554
Default Web Portal Configurations

554
- General Tab
  556
- Advanced Tab
  556
- Adding and Editing Widgets
  558
- Session Information Widget
  559
- Bookmarks Widget
  559
- Connection Tool Widget
  563
- Tunnel Mode Widget
  564
User

567
Getting Started - User Authentication

567
Local User Accounts

568
- Configuring Local User Accounts
  568
Remote

571
Radius

571
- Configuring a RADIUS Server
  572
- Dynamically Assigning VPN Client IP Addresses from a RADIUS Record
  
  573
Ldap

575
- Configuring an LDAP Server
  575
Tacacs

578
- Configuring TACACS+ Servers
  578
Directory Service

579
- Configuring a Directory Service Server
  581
Pki

581
- Configuring Peer Users and Peer Groups
  582
User Group

583
- Firewall User Groups
  584
- Directory Service User Groups
  585
- SSL VPN User Groups
  585
- Viewing the User Group List
  586
- Configuring a User Group
  586
- Configuring Fortiguard Web Filtering Override Options
  589
Options

590
Monitor

591
- Firewall User Monitor List
  591
- IPSEC Monitor List
  592
- SSL VPN Monitor List
  593
- IM User Monitor List
  594
NAC Quarantine and the Banned User List

595
- NAC Quarantine and DLP
  595
- NAC Quarantine and DLP Replacement Messages
  595
- Configuring NAC Quarantine
  596
- The Banned User List
  596
WAN Optimization and Web Caching

599
Frequently Asked Questions about Fortigate WAN Optimization

599
Overview of Fortigate WAN Optimization

601
Configuring WAN Optimization

605
- How List Order Affects Rule Matching
  606
- Moving a Rule to a Different Position in the Rule List
  607
Configuring a WAN Optimization Rule

608
Web Caching

610
Client/Server or Active Passive WAN Optimization

617
- Configuring Client/Server (Active-Passive) WAN Optimization
  617
Peer to Peer WAN Optimization

620
- Configuring Peer to Peer WAN Optimization
  620
- About WAN Optimization Addresses
  622
Protocol Optimization

623
Byte Caching

624
SSL Offloading for WAN Optimization and Web Caching

624
- Example Configuration: SSL Offloading for a WAN Optimization Tunnel
  625
- SSL Offloading and Reverse Proxy Web Caching for an Internet Web Server
  627
WAN Optimization with Forticlient

630
Secure Tunnelling

630
- WAN Optimization over Ipsec VPN
  630
Configuring WAN Optimization Storage

631
- Example WAN Optimization Iscsi Configuration
  632
- About Partition Labels
  633
WAN Optimization and HA

634
Configuring Peers

634
Configuring Authentication Groups

635
- Details about WAN Optimization Peer Authentication
  636
Monitoring WAN Optimization

637
Changing Web Cache Settings

638
Endpoint Control

641
Configuring Endpoint Control

641
Monitoring Endpoints

644
Log&Report

647
Fortigate Logging

647
Fortiguard Analysis and Management Service

648
- Fortiguard Analysis and Management Service Portal Web Site
  649
Log Severity Levels

649
High Availability Cluster Logging

650
Storing Logs

650
- Logging to a Fortianalyzer Unit
  650
- Connecting to Fortianalyzer Using Automatic Discovery
  651
- Testing the Fortianalyzer Configuration
  652
- Logging to a Fortiguard Analysis Server
  653
- Logging to Memory
  654
- Logging to a Syslog Server
  654
- Logging to Webtrends
  655
Log Types

657
- Traffic Log
  657
- Example Configuration: Logging All Fortigate Traffic
  658
- Event Log
  659
- Data Leak Prevention Log
  660
- Application Control Log
  660
- Antivirus Log
  660
- Web Filter Log
  661
- Spam Filter Log
  661
- Attack Log (IPS)
  661
Accessing Logs

662
Viewing Log Information

664
Customizing the Display of Log Messages

665
- Column Settings
  666
- Filtering Log Messages
  667
Content Archive

667
Alert Email

670
- Configuring Alert Email
  672
Reports

673
- Viewing Basic Traffic Reports
  673
- Fortianalyzer Report Schedules
  674
- Viewing Fortianalyzer Reports
  677
- Printing Your Fortianalyzer Report
  677
Index

679

Fortinet Gate 60D Quick Start Manual (20 pages)

FortiVoice phone system

Brand: Fortinet | Category: PBX | Size: 0 MB

Fortinet Gate 60D Quick Start Manual (12 pages)

Brand: Fortinet | Category: Wireless Access Point | Size: 1 MB

Fortinet Categories

Firewall Network Hardware Wireless Access Point

Switch

Telephone

More Fortinet Manuals

User Manuals: Fortinet Gate 60D Security Appliance

Fortinet Gate 60D Administration Manual (706 pages)

Table of Contents

Introduction

Fortinet Products

About this Document

Document Conventions

Registering Your Fortinet Product

Customer Service and Technical Support

Training

Fortinet Documentation

What's New in Fortios 4.0

Fortios 4.0 Fortigate Models and Features Supported

UTM Features Grouped under New UTM Menu

Data Leak Prevention

Application Control

SSL Content Scanning and Inspection

WAN Optimization

Endpoint Control

Network Access Control (NAC) Quarantine

IPS Extensions

IPS Interface Policies for Ipv6

Enhanced Antispam Engine (ASE)

WCCP V2 Support

?Any” Interface for Firewall Policies

Global View of Firewall Policies

Identity-Based Firewall Policies

Traffic Shaping Enhancements

Firewall Load Balancing Virtual IP Changes

Web Filtering HTTP Upload Enhancements

Per-Firewall Policy Session TTL

Gratuitous ARP for Virtual Ips

Changes to Protection Profiles

Changes to Content Archiving

Customizable Web-Based Manager Pages

Administration over Modem

Auto-Bypass and Recovery for AMC Bridge Module

Rogue Wireless Access Point Detection

Configurable VDOM and Global Resource Limits

User Authentication Monitor

OCSP and SCEP Certificate over HTTPS

Adding Non-Standard Ports for Firewall Authentication

Dynamically Assigning VPN Client IP Addresses from a RADIUS Record

DHCP over Route-Based Ipsec Vpns

SNMP Upgraded to V3.0

File Quarantine

Customizable SSL VPN Web Portals

Logging Improvements

Web Filtering HTTP POST Traffic (Blocking or Comforting HTTP Post Traffic)

Web-Based Manager

Common Web-Based Manager Tasks

Button Bar Features

Contacting Customer Support

Backing up Your Fortigate Configuration

Using Fortigate Online Help

Logging out

Web-Based Manager Pages

Web-Based Manager Icons

System Status

Status Page

Changing System Information

Changing the Fortigate Firmware

Viewing Operational History

Manually Updating Fortiguard Definitions

Viewing Statistics

Topology

Managing Firmware Versions

Backing up Your Configuration

Testing Firmware before Upgrading

Upgrading Your Fortigate Unit

Reverting to a Previous Firmware Image

Restoring Your Configuration

Using Virtual Domains

Virtual Domains

Enabling Vdoms

Configuring Vdoms and Global Settings

Configuring Global and VDOM Resource Limits

System Network

Interfaces

Configuring Zones