Fortinet FortiGate Voice Series Manual de usuario

FortiGate®

Version 4.0

Desktop Install Guide

FortiGate Desktop Install Guide

Version 4.0

01 May 2009

01-400-95522-20090501

diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means,

electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of

Fortinet, Inc.

Trademarks

Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC, FortiBIOS, FortiBridge, FortiClient,

FortiGate®, FortiGate Unified Threat Management System, FortiGuard®, FortiGuard-Antispam,

FortiGuard-Antivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer, FortiManager,

Fortinet®, FortiOS, FortiPartner, FortiProtect, FortiReporter, FortiResponse, FortiShield, FortiVoIP, and

FortiWiFi are trademarks of Fortinet, Inc. in the United States and/or other countries. The names of actual

companies and products mentioned herein may be the trademarks of their respective owners.

Regulatory compliance

FCC Class A/Class B Part 15 CSA/CUS

CAUTION: Risk of Explosion if Battery is replaced by an Incorrect Type. Dispose of Used Batteries According

to the Instructions

Contents

FortiGate Version 4.0 Desktop Install Guide

01-400-95522-20090501 1

http://docs.fortinet.com/ • Feedback

Contents

Introduction .............................................................................................. 3

Registering your Fortinet product................................................................................. 3

Customer service and technical support...................................................................... 3

Fortinet documentation ................................................................................................. 4

Fortinet Tools and Documentation CD ....................................................................... 4

Fortinet Knowledge Center ........................................................................................ 4

Comments on Fortinet technical documentation ....................................................... 4

Conventions .................................................................................................................... 4

IP addresses............................................................................................................... 4

CLI constraints............................................................................................................ 4

Notes, Tips and Cautions ........................................................................................... 4

Typographical conventions ......................................................................................... 5

Installing ................................................................................................... 7

Environmental specifications ........................................................................................ 7

Cautions and warnings................................................................................................... 8

Grounding ................................................................................................................... 8

Rack mount instructions ............................................................................................. 8

Mounting ..................................................................................................................... 8

Plugging in the FortiGate unit........................................................................................ 9

Connecting to the network .......................................................................................... 9

Turning off the FortiGate unit ........................................................................................ 9

Configuring............................................................................................. 11

NAT vs. transparent mode ........................................................................................... 11

NAT mode................................................................................................................. 11

Transparent mode .................................................................................................... 12

Connecting to the FortiGate unit ................................................................................. 12

Connecting to the web-based manager.................................................................... 12

Connecting to the CLI ............................................................................................... 13

Configuring NAT mode................................................................................................. 13

Configure the interfaces............................................................................................ 14

Configure a DNS server............................................................................................ 16

Add a default route and gateway .............................................................................. 17

Add firewall policies .................................................................................................. 18

Configuring transparent mode .................................................................................... 20

Switching to transparent mode ................................................................................. 20

Configure a DNS server ..................................................................................... 21

Contents

FortiGate Version 4.0 Desktop Install Guide

201-400-95522-20090501

http://docs.fortinet.com/ • Feedback

Add firewall policies............................................................................................ 21

Verifying the configuration .......................................................................................... 23

Backing up the configuration ...................................................................................... 23

Restoring a configuration ............................................................................................ 24

Additional configuration............................................................................................... 25

Setting the time and date.......................................................................................... 25

Set the Administrator password................................................................................ 26

Configuring FortiGuard ............................................................................................. 27

Updating antivirus and IPS signatures ............................................................... 27

Advanced configuration ........................................................................ 29

Protection profiles ........................................................................................................ 29

Firewall policies ............................................................................................................ 30

Configuring firewall policies ...................................................................................... 31

Antivirus options........................................................................................................... 31

AntiSpam options ......................................................................................................... 32

Web filtering .................................................................................................................. 33

Data leak prevention ..................................................................................................... 34

Application control ....................................................................................................... 34

Logging .......................................................................................................................... 34

FortiGate Firmware ................................................................................ 35

Downloading firmware.................................................................................................. 35

Using the web-based manager .................................................................................... 36

Upgrading the firmware ............................................................................................ 36

Reverting to a previous version ................................................................................ 36

Backup and Restore from a USB key ....................................................................... 37

Using the USB Auto-Install ....................................................................................... 37

Using the CLI ................................................................................................................. 38

Reverting to a previous version ................................................................................ 38

Installing firmware from a system reboot using the CLI ........................................... 40

Restoring the previous configuration ........................................................................ 41

Backup and Restore from a USB key ....................................................................... 42

Using the USB Auto-Install ....................................................................................... 42

Additional CLI Commands for a USB key................................................................. 43

Testing new firmware before installing....................................................................... 43

Index.......................................................................................................... 1

Introduction Registering your Fortinet product

FortiGate Version 4.0 Desktop Install Guide

01-400-95522-20090501 3

http://docs.fortinet.com/ • Feedback

Introduction

Welcome and thank you for selecting Fortinet products for your network protection.

FortiGate®ASIC-accelerated multi-threat security systems improve network security,

reduce network misuse and abuse, and help you use communications resources more

efficiently without compromising the performance of your network. FortiGate Systems are

ICSA-certified for Antivirus, Firewall, IPSec, SSL-TLS, IPS, Intrusion detection, and

AntiSpyware services.

FortiGate Systems are dedicated, easily managed security devices that deliver a full suite

of capabilities including:

• Application-level services such as virus protection, intrusion protection, spam filtering,

web content filtering, IM, P2P, and VoIP filtering

• Network-level services such as firewall, intrusion detection, IPSec and SSL VPN, and

traffic shaping

• Management services such as user authentication, logging, reporting with

FortiAnalyzer, administration profiles, secure web and CLI administrative access, and

SNMP.

The FortiGate security system uses Fortinet’s Dynamic Threat Prevention System

(DTPS™) technology, which leverages breakthroughs in chip design, networking, security

and content analysis. The unique ASIC-accelerated architecture analyzes content and

behavior in real-time, enabling key applications to be deployed right at the network edge

where they are most effective at protecting your networks.

This chapter contains the following topics:

•Registering your Fortinet product

•Customer service and technical support

•Fortinet documentation

•Conventions

Registering your Fortinet product

Before you begin, take a moment to register your Fortinet product at the Fortinet Technical

Support web site, https://support.fortinet.com.

Many Fortinet customer services, such as firmware updates, technical support, and

FortiGuard Antivirus and other FortiGuard services, require product registration.

For more information, see the Fortinet Knowledge Center article Registration Frequently

Asked Questions.

Customer service and technical support

Fortinet Technical Support provides services designed to make sure that your Fortinet

products install quickly, configure easily, and operate reliably in your network.

To learn about the technical support services that Fortinet provides, visit the Fortinet

Technical Support web site at https://support.fortinet.com.

Fortinet documentation Introduction

FortiGate Version 4.0 Desktop Install Guide

401-400-95522-20090501

http://docs.fortinet.com/ • Feedback

You can dramatically improve the time that it takes to resolve your technical support ticket

by providing your configuration file, a network diagram, and other specific information. For

a list of required information, see the Fortinet Knowledge Center article What does

Fortinet Technical Support require in order to best assist the customer?

Fortinet documentation

The Fortinet Technical Documentation web site, http://docs.fortinet.com, provides the

most up-to-date versions of Fortinet publications, as well as additional technical

documentation such as technical notes.

In addition to the Fortinet Technical Documentation web site, you can find Fortinet

technical documentation on the Fortinet Tools and Documentation CD, and on the Fortinet

Knowledge Center.

Fortinet Tools and Documentation CD

Many Fortinet publications are available on the Fortinet Tools and Documentation CD

shipped with your Fortinet product. The documents on this CD are current at shipping

time. For current versions of Fortinet documentation, visit the Fortinet Technical

Documentation web site, http://docs.fortinet.com.

Fortinet Knowledge Center

The Fortinet Knowledge Center provides additional Fortinet technical documentation,

such as troubleshooting and how-to-articles, examples, FAQs, technical notes, a glossary,

and more. Visit the Fortinet Knowledge Center at http://kc.fortinet.com.

Comments on Fortinet technical documentation

Please send information about any errors or omissions in this or any Fortinet technical

document to [email protected].

Conventions

Fortinet technical documentation uses the conventions described below.

IP addresses

To avoid publication of public IP addresses that belong to Fortinet or any other

organization, the IP addresses used in Fortinet technical documentation are fictional and

follow the documentation guidelines specific to Fortinet. The addresses used are from the

private IP address ranges defined in RFC 1918: Address Allocation for Private Internets,

available at http://ietf.org/rfc/rfc1918.txt?number-1918.

CLI constraints

CLI constraints, such as <address_ipv4>, indicate which data types or string patterns

are acceptable input for a given parameter or variable value. CLI constraint conventions

are described in the CLI Reference document for each product.

Notes, Tips and Cautions

Fortinet technical documentation uses the following guidance and styles for notes, tips

and cautions.

Introduction Conventions

FortiGate Version 4.0 Desktop Install Guide

01-400-95522-20090501 5

http://docs.fortinet.com/ • Feedback

Typographical conventions

Fortinet documentation uses the following typographical conventions:

Tip: Highlights useful additional information, often tailored to your workplace activity.

Note: Also presents useful information, but usually focused on an alternative, optional

method, such as a shortcut, to perform a step.

Caution: Warns you about commands or procedures that could have unexpected or

undesirable results including loss of data or damage to equipment.

Table 1: Typographical conventions in Fortinet technical documentation

Convention Example

Button, menu, text box,

field, or check box label

From Minimum log level, select Notification.

CLI input config system dns

set primary <address_ipv4>

end

CLI output FGT-602803030703 # get system settings

comments : (null)

opmode : nat

Emphasis HTTP connections are not secure and can be intercepted by

a third party.

File content <HTML><HEAD><TITLE>Firewall

Authentication</TITLE></HEAD>

<BODY><H4>You must authenticate to use this

service.</H4>

Hyperlink Visit the Fortinet Technical Support web site,

https://support.fortinet.com.

Keyboard entry Type a name for the remote VPN peer or client, such as

Central_Office_1.

Navigation Go to VPN > IPSEC > Auto Key (IKE).

Publication For details, see the FortiGate Administration Guide.

Conventions Introduction

FortiGate Version 4.0 Desktop Install Guide

601-400-95522-20090501

http://docs.fortinet.com/ • Feedback

Installing Environmental specifications

FortiGate Version 4.0 Desktop Install Guide

01-400-95522-20090501 7

http://docs.fortinet.com/ • Feedback

Installing

This chapter describes installing your Fortinet unit in your server room, environmental

specifications and how to mount the Fortinet in a rack if applicable.

This chapter contains the following topics:

•Environmental specifications

•Cautions and warnings

•Plugging in the FortiGate unit

•Turning off the FortiGate unit

Environmental specifications

Before you begin, review the environmental specifications to ensure proper operation of

the FortiGate unit.

• Operating temperature: 32 to 104°F (0 to 40°C)

If you install the Fortinet unit in a closed or multi-unit rack assembly, the operating

ambient temperature of the rack environment may be greater than room ambient

temperature. Therefore, make sure to install the equipment in an environment

compatible with the manufacturer's maximum rated ambient temperature.

• Storage temperature: -13 to 158°F (-25 to 70°C)

• Humidity: 5 to 90% non-condensing

• Air flow - For rack installation, make sure that the amount of air flow required for safe

operation of the equipment is not compromised.

• For free-standing installation, make sure that the appliance has at least 1.5 in. (3.75

cm) of clearance on each side to allow for adequate air flow and cooling.

This device complies with part FCC Class A or Class B, Part 15, UL/CUL, C Tick, CE

and VCCI. Operation is subject to the following two conditions:

• This device may not cause harmful interference, and

• This device must accept any interference received, including interference that may

cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital

device, pursuant to part 15 of the FCC Rules. These limits are designed to provide

reasonable protection against harmful interference in a residential installation. This

equipment generates, uses and can radiate radio frequency energy and, if not installed

and used in accordance with the instructions, may cause harmful interference to radio

communications. However, there is no guarantee that interference will not occur in a

particular installation. If this equipment does cause harmful interference to radio or

television reception, which can be determined by turning the equipment off and on, the

user is encouraged to try to correct the interference by one or more of the following

measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and receiver.

• Connect the equipment into an outlet on a circuit different from that to which the

receiver is connected.

Cautions and warnings Installing

FortiGate Version 4.0 Desktop Install Guide

801-400-95522-20090501

http://docs.fortinet.com/ • Feedback

• Consult the dealer or an experienced radio/TV technician for help.

The equipment compliance with FCC radiation exposure limit set forth for uncontrolled

Environment.

Cautions and warnings

Review the following cautions before installing your Fortinet unit.

Grounding

• Ensure the Fortinet unit is connected and properly grounded to a lightning and surge

protector. WAN or LAN connections that enter the premises from outside the building

should be connected to an Ethernet CAT5 (10/100 Mb/s) surge protector.

• Shielded Twisted Pair (STP) Ethernet cables should be used whenever possible rather

than Unshielded Twisted Pair (UTP).

• Do not connect or disconnect cables during lightning activity to avoid damage to the

Fortinet unit or personal injury.

Rack mount instructions

Elevated operating ambient - If installed in a closed or multi-unit rack assembly, the

operating ambient temperature of the rack environment may be greater than room

ambient. Therefore, consideration should be given to installing the equipment in an

environment compatible with the maximum ambient temperature (Tma) specified by the

manufacturer.

Reduced air flow - Installation of the equipment in a rack should be such that the amount

of air flow required for safe operation of the equipment is not compromised.

Mechanical loading - Mounting of the equipment in the rack should be such that a

hazardous condition is not achieved due to uneven mechanical loading.

Circuit overloading - Consideration should be given to the connection of the equipment

to the supply circuit and the effect that overloading of the circuits might have on

overcurrent protection and supply wiring. Appropriate consideration of equipment

nameplate ratings should be used when addressing this concern.

Reliable earthing - Reliable earthing of rack-mounted equipment should be maintained.

Particular attention should be given to supply connections other than direct connections to

the branch circuit (e.g. use of power strips).

Mounting

If required to fit into a rack unit, remove the rubber feet from the bottom of the Fortinet unit.

Place the FortiGate unit on any flat, stable surface. Ensure the unit has sufficient

clearance on each side to ensure adequate airflow for cooling.

Caution: Risk of Explosion if battery is replaced by an incorrect type. Dispose of used

batteries according to the instructions

Caution: To reduce the risk of fire, use only No. 26 AWG or larger UL Listed or CSA

Certified Telecommunication Line Cord.

Otros manuales para FortiGate Voice Series

Tabla de contenidos

Otros manuales de Cortafuegos de Fortinet

Fortinet

Fortinet FortiGate 500A Manual de usuario

Fortinet

Fortinet FortiTester 2000E Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-50B Manual de usuario

Fortinet

Fortinet Fortiwifi fortiwifi-60 Manual del operador

Fortinet

Fortinet FortiManager-1000C Manual de usuario

Fortinet

Fortinet FortiGate 5140-R Manual de usuario

Fortinet

Fortinet FortiGate-400A Manual de instrucciones

Fortinet

Fortinet FortiGate FortiGate-60M Manual de instrucciones

Fortinet

Fortinet FortiGate 5020 Manual de usuario

Fortinet

Fortinet FortiGate 50A Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-500 Manual de instrucciones

Fortinet

Fortinet FortiGate-3016B Manual de usuario

Fortinet

Fortinet FortiGate-51B-LENC Manual de usuario

Fortinet

Fortinet FortiWiFi FortiWiFi-60B Manual de usuario

Fortinet

Fortinet FortiAnalyzer-4000A Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-400 Manual de instrucciones

Fortinet

Fortinet FortiGate 3000 Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-60R Manual del operador

Fortinet

Fortinet FortiGate FortiGate-800F Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-4000 Manual de usuario

Fortinet

Fortinet FortiGate FortiGate-300 Manual de usuario

Fortinet

Fortinet FortiGate-7060E Manual de lista de piezas

Fortinet

Fortinet FortiGate FortiGate-5001FA2 Manual de usuario

Fortinet

Fortinet FortiWiFi 60CM Manual de usuario

Manuales populares de Cortafuegos de otras marcas

Cisco

Cisco S190 Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Cisco

Cisco 3110 Manual

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario

GTA

GTA GB-200 Manual de usuario

Trend Micro

Trend Micro Deep Edge Manual de usuario