Fortinet FortiGate 310B User Manual

www.fortinet.comFortiGate-310B FortiOS 3.0 MR6INSTALL GUIDE

FortiGate-310B FortiOS 3.0 MR6 Install Guide10 01-30006-0472-20080815Further Reading Introduction• FortiGate Administration GuideProvides basic inform

Introduction Customer service and technical supportFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 11Comments on Fortinet technica

FortiGate-310B FortiOS 3.0 MR6 Install Guide12 01-30006-0472-20080815Customer service and technical support Introduction

Installing Environmental specificationsFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 13InstallingThis chapter describes installi

FortiGate-310B FortiOS 3.0 MR6 Install Guide14 01-30006-0472-20080815Cautions and warnings Installing• Connect the equipment into an outlet on a circu

Installing Cautions and warningsFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 15When placing the FortiGate unit on any flat, sta

FortiGate-310B FortiOS 3.0 MR6 Install Guide16 01-30006-0472-20080815Plugging in the FortiGate InstallingFigure 3: Mounting in a rackPlugging in the F

Configuring NAT vs. Transparent modeFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 17ConfiguringThis section provides an overview

FortiGate-310B FortiOS 3.0 MR6 Install Guide18 01-30006-0472-20080815Connecting to the FortiGate unit ConfiguringTransparent modeIn Transparent mode,

Configuring Connecting to the FortiGate unitFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 19To support a secure HTTPS authentica

FortiGate-310B Install GuideFortiOS 3.0 MR615 August 200801-30006-0472-20080815© Copyright 2008 Fortinet, Inc. All rights reserved. No part of this pu

FortiGate-310B FortiOS 3.0 MR6 Install Guide20 01-30006-0472-20080815Configuring NAT mode ConfiguringConfiguring NAT modeConfiguring NAT mode involves

Configuring Configuring NAT modeFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 214 Select OK. 5 Repeat this procedure for each in

FortiGate-310B FortiOS 3.0 MR6 Install Guide22 01-30006-0472-20080815Configuring NAT mode ConfiguringFor an initial configuration, you must edit the f

Configuring Configuring NAT modeFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 233 Set the following and select OK.Firewall polic

FortiGate-310B FortiOS 3.0 MR6 Install Guide24 01-30006-0472-20080815Configuring NAT mode ConfiguringTo set an interface to use PPPoE addressingconfig

Configuring Configuring NAT modeFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 25In the factory default configuration, entry numb

FortiGate-310B FortiOS 3.0 MR6 Install Guide26 01-30006-0472-20080815Configuring Transparent mode ConfiguringConfiguring Transparent modeConfiguring T

Configuring Configuring Transparent modeFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 27For the initial installation, a single f

FortiGate-310B FortiOS 3.0 MR6 Install Guide28 01-30006-0472-20080815Configuring Transparent mode ConfiguringTo switch to Transparent modeconfig syste

Configuring Verify the configurationFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 29Note that these policies allow all traffic t

Contents FortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 3ContentsRegister your FortiGate unit...

FortiGate-310B FortiOS 3.0 MR6 Install Guide30 01-30006-0472-20080815Restoring a configuration ConfiguringRestoring a configurationShould you need to

Configuring Additional configurationFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 31To change the administrator password1 Go to

FortiGate-310B FortiOS 3.0 MR6 Install Guide32 01-30006-0472-20080815Additional configuration Configuring

Advanced configuration Protection profilesFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 33Advanced configurationThe FortiGate un

FortiGate-310B FortiOS 3.0 MR6 Install Guide34 01-30006-0472-20080815Firewall policies Advanced configurationThe best way to begin creating your own p

Advanced configuration Antivirus optionsFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 35Configuring firewall policiesTo add or e

FortiGate-310B FortiOS 3.0 MR6 Install Guide36 01-30006-0472-20080815AntiSpam options Advanced configuration• Grayware - These are unsolicited commerc

Advanced configuration Web filteringFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 37Banned word lists are specific words that ma

FortiGate-310B FortiOS 3.0 MR6 Install Guide38 01-30006-0472-20080815Logging Advanced configurationTo configure content blocking, go to Web Filter >

AMC modules Installing AMC filler unitsFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 39AMC modulesFortiGate AMC modules enable y

FortiGate-310B FortiOS 3.0 MR6 Install Guide4 01-30006-0472-20080815ContentsConfiguring Transparent mode...

FortiGate-310B FortiOS 3.0 MR6 Install Guide40 01-30006-0472-20080815Removing modules AMC modulesTo insert a module into a FortiGate chassis1 Ensure t

AMC modules Using the AMC modulesFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 41Formatting the hard diskWhen you first install

FortiGate-310B FortiOS 3.0 MR6 Install Guide42 01-30006-0472-20080815Using the AMC modules AMC modulesLog configuration using the CLIConfigure the For

AMC modules Using the AMC modulesFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 43For these multi-mode SFP interfaces, SerDes is

FortiGate-310B FortiOS 3.0 MR6 Install Guide44 01-30006-0472-20080815Using the AMC modules AMC modules

FortiGate Firmware Downloading firmwareFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 45FortiGate FirmwareFortinet periodically u

FortiGate-310B FortiOS 3.0 MR6 Install Guide46 01-30006-0472-20080815Using the web-based manager FortiGate FirmwareTo download firmware1 Log into the

FortiGate Firmware Using the web-based managerFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 47To revert to a previous firmware v

FortiGate-310B FortiOS 3.0 MR6 Install Guide48 01-30006-0472-20080815Using the CLI FortiGate FirmwareTo configure the USB Auto-Install1 Go to System &

FortiGate Firmware Using the CLIFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 495 Enter the following command to copy the firmwa

Contents FortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 5Using the web-based manager...

FortiGate-310B FortiOS 3.0 MR6 Install Guide50 01-30006-0472-20080815Installing firmware from a system reboot using the CLI FortiGate Firmware4 Make s

FortiGate Firmware Installing firmware from a system reboot using the CLIFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 51If you

FortiGate-310B FortiOS 3.0 MR6 Install Guide52 01-30006-0472-20080815Installing firmware from a system reboot using the CLI FortiGate Firmware9 Type t

FortiGate Firmware Installing firmware from a system reboot using the CLIFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 53To rest

FortiGate-310B FortiOS 3.0 MR6 Install Guide54 01-30006-0472-20080815Testing new firmware before installing FortiGate FirmwareTesting new firmware bef

FortiGate Firmware Testing new firmware before installingFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 558 Type G to get the new

FortiGate-310B FortiOS 3.0 MR6 Install Guide56 01-30006-0472-20080815Testing new firmware before installing FortiGate Firmware

Index FortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 57IndexAadding a default route 21, 24additional resources 9admin password 30a

FortiGate-310B FortiOS 3.0 MR6 Install Guide58 01-30006-0472-20080815IndexPPADT timeout 21password, changing 30power off 16PPPoE 24protection profiles

FortiGate-310B FortiOS 3.0 MR6 Install Guide59 01-30006-0472-20080815Index

FortiGate-310B FortiOS 3.0 MR6 Install Guide6 01-30006-0472-20080815Contents

FortiGate-310B FortiOS 3.0 MR6 Install Guide60 01-30006-0472-20080815Index

www.fortinet.com

www.fortinet.com

Introduction Register your FortiGate unitFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 7IntroductionWelcome and thank you for se

FortiGate-310B FortiOS 3.0 MR6 Install Guide8 01-30006-0472-20080815About the FortiGate-310B IntroductionAbout the FortiGate-310BThe FortiGate-310B is

Introduction Further ReadingFortiGate-310B FortiOS 3.0 MR6 Install Guide01-30006-0472-20080815 9• FortiGate Firmware – Describes how to install, upda