Français dropdown-ico

Fortinet 100 manuel d'utilisation

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

Aller à la page of

Les manuels d’utilisation similaires

Un bon manuel d’utilisation

Les règles imposent au revendeur l'obligation de fournir à l'acheteur, avec des marchandises, le manuel d’utilisation Fortinet 100. Le manque du manuel d’utilisation ou les informations incorrectes fournies au consommateur sont à la base d'une plainte pour non-conformité du dispositif avec le contrat. Conformément à la loi, l’inclusion du manuel d’utilisation sous une forme autre que le papier est autorisée, ce qui est souvent utilisé récemment, en incluant la forme graphique ou électronique du manuel Fortinet 100 ou les vidéos d'instruction pour les utilisateurs. La condition est son caractère lisible et compréhensible.

Qu'est ce que le manuel d’utilisation?

Le mot vient du latin "Instructio", à savoir organiser. Ainsi, le manuel d’utilisation Fortinet 100 décrit les étapes de la procédure. Le but du manuel d’utilisation est d’instruire, de faciliter le démarrage, l'utilisation de l'équipement ou l'exécution des actions spécifiques. Le manuel d’utilisation est une collection d'informations sur l'objet/service, une indice.

Malheureusement, peu d'utilisateurs prennent le temps de lire le manuel d’utilisation, et un bon manuel permet non seulement d’apprendre à connaître un certain nombre de fonctionnalités supplémentaires du dispositif acheté, mais aussi éviter la majorité des défaillances.

Donc, ce qui devrait contenir le manuel parfait?

Tout d'abord, le manuel d’utilisation Fortinet 100 devrait contenir:
- informations sur les caractéristiques techniques du dispositif Fortinet 100
- nom du fabricant et année de fabrication Fortinet 100
- instructions d'utilisation, de réglage et d’entretien de l'équipement Fortinet 100
- signes de sécurité et attestations confirmant la conformité avec les normes pertinentes

Pourquoi nous ne lisons pas les manuels d’utilisation?

Habituellement, cela est dû au manque de temps et de certitude quant à la fonctionnalité spécifique de l'équipement acheté. Malheureusement, la connexion et le démarrage Fortinet 100 ne suffisent pas. Le manuel d’utilisation contient un certain nombre de lignes directrices concernant les fonctionnalités spécifiques, la sécurité, les méthodes d'entretien (même les moyens qui doivent être utilisés), les défauts possibles Fortinet 100 et les moyens de résoudre des problèmes communs lors de l'utilisation. Enfin, le manuel contient les coordonnées du service Fortinet en l'absence de l'efficacité des solutions proposées. Actuellement, les manuels d’utilisation sous la forme d'animations intéressantes et de vidéos pédagogiques qui sont meilleurs que la brochure, sont très populaires. Ce type de manuel permet à l'utilisateur de voir toute la vidéo d'instruction sans sauter les spécifications et les descriptions techniques compliquées Fortinet 100, comme c’est le cas pour la version papier.

Pourquoi lire le manuel d’utilisation?

Tout d'abord, il contient la réponse sur la structure, les possibilités du dispositif Fortinet 100, l'utilisation de divers accessoires et une gamme d'informations pour profiter pleinement de toutes les fonctionnalités et commodités.

Après un achat réussi de l’équipement/dispositif, prenez un moment pour vous familiariser avec toutes les parties du manuel d'utilisation Fortinet 100. À l'heure actuelle, ils sont soigneusement préparés et traduits pour qu'ils soient non seulement compréhensibles pour les utilisateurs, mais pour qu’ils remplissent leur fonction de base de l'information et d’aide.

Table des matières du manuel d’utilisation

  • Page 1

    www.fortinet.com For tiGate-50A/ 50B, For tiWiF i-50B and FortiG at e -1 00 FortiO S 3 .0 MR 4 INST ALL GUIDE[...]

  • Page 2

    FortiGate-50A/50B, FortiW iFi-50B and FortiGate-100 Inst all Guide FortiOS 3.0 MR4 31 August 2007 01-30004-02 65-20070831 © Copyright 2007 Fortine t, Inc. All rights reserved. No p art of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mec[...]

  • Page 3

    Contents FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 3 Content s Contents...................................................................... .............. .......... 3 Introduction ............... ................................. .............................. .......... 7 About th[...]

  • Page 4

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 4 01-30004-0265-200708 31 Contents Connecting to the FortiGate unit ............................... ................ ................... . 21 Web-based manager ................. ................ ................... ................ .............. 21 Command line inter[...]

  • Page 5

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 5 01-30004-0265-200708 31 Contents Next steps ................... ................. ................ ............. ................ ................ ....... 46 Set the date and ti me ....... ................ ............. ................ ................ ............[...]

  • Page 6

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 6 01-30004-0265-200708 31 Contents Reverting to a previous firmware version ....... .................... ................ .......... 67 Reverting to a pr evious firmware ve rsion using the web-based manager .. 67 Reverting to a previous firmware vers ion using the CLI[...]

  • Page 7

    Introduction About the FortiGate unit FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 7 Introduction Welcome an d thank you for selecting Fortinet product s for your real-time network protection. FortiGate™ Unified Threat Management System improves n etwork security , reduces network misu[...]

  • Page 8

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 8 01-30004-0265-200708 31 About the FortiGate unit Introduction FortiGate-50B The FortiGate-50B is designed for te lecommuters and small remote offices with 10 to 50 employees. The FortiGate-50B unit includes two WAN ports for a redundant connection to the Interne t. [...]

  • Page 9

    Introduction Fortinet Family Products FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 9 Fortinet Family Product s Fortinet of fers a family of products that includes both sof tware and hardware appliances for a complete networ k secu rity solution including mail, logging, reporting, netwo r[...]

  • Page 10

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 10 01-30004-0265-200708 31 About this document Introduction FortiAnalyzer FortiAnalyze r™ provides ne twork admin istrators with t he information they need to enable the be st protection an d security for their networks and moni tor against attacks and vulnerabiliti[...]

  • Page 11

    Introduction About this document FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 11 This document contain s the following chapters: • Installing the FortiGate unit – Describes unp acking, setting up, and powering on a FortiGate unit. • Factory defaults – Provides the factory default[...]

  • Page 12

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 12 01-30004-0265-200708 31 Fortinet documentation Introduction Fortinet document ation The most up-to-da te publications and previous releases of Fortinet product documenta tion are available from the Fort inet T echnical Docu mentation web site at http://docs.fortic [...]

  • Page 13

    Introduction Customer service a nd technical su pport FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 13 • FortiGate High Availability Us er Guide Contains in-depth informat ion about the FortiGate hi gh availability feature and the FortiGate clustering prot ocol. • FortiGate IPS User G[...]

  • Page 14

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 14 01-30004-0265-200708 31 Customer service and technical support Introduction[...]

  • Page 15

    Installing the FortiGate unit Package Contents FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 15 Inst alling the FortiGate unit This section provides inform ation on installing and sett ing up the FortiGate unit on your network. This chapter inclu des the following sections: • Package Co[...]

  • Page 16

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 16 01-30004-0265-200708 31 Package Contents Insta lling the FortiGat e unit T able 1: T echnical Specifications FortiGate-50B The FortiGate-50B package con tains the following items: • FortiGate -50B Unified Threat Ma nagement Syst em • one gray straight-th rough [...]

  • Page 17

    Installing the FortiGate unit Package Contents FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 17 FortiWiFi-50B The FortiWiFi-50B p ackage conta ins the following items: • FortiWiFi-50B Unified Threat Manage ment System • one gray straight-thr ough Ethernet ca ble (Fortinet part nu mber[...]

  • Page 18

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 18 01-30004-0265-200708 31 Package Contents Insta lling the FortiGat e unit Figure 4: FortiGate-10 0 p ackage con tents T able 4: T echnical Specifications Warnings This device complies with part 15 of the FCC Rules. Operation is subject to the following two condition[...]

  • Page 19

    Installing the FortiGate unit Mounting FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 19 Mounting Adhere the rubber fee t included in the package to the under side of the FortiWiFi unit, near the corners of the device. Place the FortiGate unit on a ny flat, stable surface. En sure the unit[...]

  • Page 20

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 20 01-30004-0265-200708 31 Powering on the FortiGate unit Insta lling the FortiGat e unit T able 5: FortiGate-50A and F ortiGate-100 LED indicators T able 6: FortiGate-50B and FortiWiFi-50B LED indicators Power over Ethernet Power over Ethernet (P oE) is a meth od of [...]

  • Page 21

    Installing the FortiGate unit Powering off the FortiGate unit FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 21 Powering off the FortiGate unit Always shut down the FortiGate operatin g system properly bef ore turning off the power switch to avoid po te ntial hardware problems. T o power [...]

  • Page 22

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 22 01-30004-0265-200708 31 Connecting to the FortiGate unit Insta lling the FortiGat e unit T o connect to the web-based manage r 1 Set the IP address of the computer with an Ethernet con nection to the static IP address 192.168.1.2 with a n etmask of 255.255.255.0. 2[...]

  • Page 23

    Installing the FortiGate unit Connecting to the FortiGate unit FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 23 Command line interface Y ou can access the FortiGate comma nd line interface (CLI) by connecting a management compute r serial port to the FortiGate serial console connector . [...]

  • Page 24

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 24 01-30004-0265-200708 31 Quick inst allation using factory defaults Insta lling the FortiGate u nit Quick inst allation using factory default s The following procedure d escribes how to configure your internal networ k and the FortiGate unit to use the FortiGate def[...]

  • Page 25

    Installing the FortiGate unit Quick installation using factory defaults FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 25 6 Go to System > Network > Options . 7 Select one of the following DNS settings • Obtain DNS se rver address automatica lly: select to get the DNS addresses fr[...]

  • Page 26

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 26 01-30004-0265-200708 31 Quick inst allation using factory defaults Insta lling the FortiGate u nit[...]

  • Page 27

    Factory defaults FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 27 Factory default s The FortiGate unit ships with a factor y default configuration. The de fault configuration enab les you to connect to and use the FortiGate web-base d manager to configure the Fo rtiGate unit onto the netw[...]

  • Page 28

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 28 01-30004-0265-200708 31 Factory defaults Factory default DHCP server configuration T able 7: FortiGate DHCP Serv er default configurat ion Factory default NAT/Route mode network configuration When the FortiGate unit is first powered on , it is running in NA T/Route[...]

  • Page 29

    Factory defaults FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 29 Factory default Transparent mode network configuration In T ranspar ent mode, the FortiGate unit has the de fault network configuration listed in Ta b l e 9 . Factory default firewall configuration FortiGate firewall polici[...]

  • Page 30

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 30 01-30004-0265-200708 31 Factory defaults T able 10: Factory default firewall confi guration The factory default firewall configurati on is the sa me in NA T/Route mode and T ransparent mode. Factory default protection profiles Use protection profiles to apply dif f[...]

  • Page 31

    Factory defaults Re storing the default settings FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 31 Restoring the default settings Y ou can re vert to the factory default se ttings if you change a network setting and are unable to recover fr om it. Restoring the default settings using the w[...]

  • Page 32

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 32 01-30004-0265-200708 31 Restorin g the default setti ngs Factory defaults[...]

  • Page 33

    Configuring the FortiGat e unit Planning the FortiGate configu ration FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 33 Configuring the FortiGate unit This section provides an overview of t he operating modes of the FortiGate unit. Before beginning to configure the FortiGa te unit, you nee[...]

  • Page 34

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 34 01-30004-0265-200708 31 Planning the Forti Gate configuration Configuring the FortiGa te unit Y ou typically use NA T/Route mode when the FortiGate unit is operating as a gateway between private and public n etworks. In this configuration, you create NA T mode fire[...]

  • Page 35

    Configuring the Fo rt iGate unit Preventing the public interf a ce from responding to ping requests FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 35 Transparent mode In T ranspar ent mode, the FortiGate unit is invisible to the network. Similar to a network brid ge, all FortiG ate interf[...]

  • Page 36

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 36 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit T o disable ping administrative acce ss from the web-based manager 1 Log into the FortiGate web-b ased manager . 2 Go to System > Network > Interface . 3 Choose the ex terna[...]

  • Page 37

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 37 DHCP or PPPoE configuration Y ou can config ure any FortiGate interface to acquire its IP address fro m a DHCP or PPPoE server . Y our Interne t Service Provider (ISP) may provide[...]

  • Page 38

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 38 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit T o add/change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select the Change Password icon for the ad min administrator . 3 Enter the new passwor[...]

  • Page 39

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 39 4 Set Destination IP to 0. 0.0.0. 5 Set Mask to 0.0.0.0. 6 Set Gateway to the default gatewa y IP address. 7 Set Device to the interface con nected to the external network. 8 Sele[...]

  • Page 40

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 40 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit config system interface edit <interface> set mode static set ip <address_ip> <netmask> end Example config system interface edit internal set mode static set ip 1[...]

  • Page 41

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 41 config system dns set primary <address_ip> set secondary <address_ip> end Example config system dns set primary 293.44.75.21 set secondary 293.44.75.22 end Adding a de[...]

  • Page 42

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 42 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit Connecting the FortiGate unit to the network(s) When you have completed the initial config uration, you can connect the For tiGate unit between yo ur internal network and the Inte[...]

  • Page 43

    Configuring the Fo rtiGate unit T ransparent mode installati on FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 43 T ransp arent mode inst allation This section describes how to inst all th e FortiGate unit in NA T/Route mode. This section includes the following topics: • Prepar ing to co[...]

  • Page 44

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 44 01-30004-0265-200708 31 T ransparent mode installation Configu ring the FortiGat e unit Y ou do not have to recon nec t to the web-based m anager at this time. On ce you select Apply , the cha nges are immedi ate, and you can go to the system dashboard to verify th[...]

  • Page 45

    Configuring the Fo rtiGate unit T ransparent mode installati on FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 45 T o configure DNS serv er settings Set the primary and secondary DNS server IP addresses. Enter: config system dns set primary <address_ip> set secondary <address_ip&g[...]

  • Page 46

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 46 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit Figure 1 1: FortiGate-50B T ransparent mode connections Next step s Use the following information to configure FortiGate system time, and to conf igure antivirus and attack definition updates. Refe[...]

  • Page 47

    Configuring the Fo rtiGate unit Next steps FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 47 5 S p ecify how often the FortiGate unit shou ld synchronize its time with the NTP server . 6 Select OK. Updating antivirus and IPS signatures Configure the FortiGate unit to connec t to the FortiG[...]

  • Page 48

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 48 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit Updating the IPS signa tures from the CLI Y ou can update I PS signatures us ing the CLI. Use the followin g procedu re to update IPS signatures. T o up date IPS signatures using the CLI 1 Log into[...]

  • Page 49

    Configuring the Fo rtiGate unit Next steps FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 49 Example config system autoupdate schedule set update every Sunday set frequency weekly set status enable set time 16:45 end Adding an override server If you cannot con nect to the FDN, or if your o[...]

  • Page 50

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 50 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit[...]

  • Page 51

    Configuring the modem interface Conn ecting a modem to the FortiGate- 50A FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 51 Configuring the modem interface The following sections will cover how to configure the Fo rtiGate-50A modem using the CLI. The FortiGate-50A suppo rts a redundant o r[...]

  • Page 52

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 52 01-30004-0265-200708 31 Selecting a modem mode Configuring the modem in terface Figure 12: Example modem interface network conne ction Selecting a modem mode The modem interface can work in one of two modes: • redundant mo de • stand a lone mode Redundant mode [...]

  • Page 53

    Configuring the modem interface Config uring the modem for the FortiGate- 50A FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 53 In stand alon e mode the modem interface replaces the external Ethernet interface. Y ou must also configure fire wall policies for connections between the modem i[...]

  • Page 54

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 54 01-30004-0265-200708 31 Configuring the modem for th e FortiGat e-50A Configuring the modem in terface T able 15: CL I commands for the FortiGate-50A passwd2 <password_str> Enter the password used to access the specified dialup account. No default. passwd3 &l[...]

  • Page 55

    Configuring the modem interface Adding a Ping Server FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 55 Example config system modem set action dial set status enable set holddown-time 5 set interface wan1 set passwd1 acct1passwd set phone1 1234567891 set redial 10 set username1 acct1user en[...]

  • Page 56

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 56 01-30004-0265-200708 31 Adding firewall policies for modem conn ections Configuring the modem in terface Adding firewall policies for modem connections The modem interface requir es firewall addresses and policies. Y ou can add one or more addresses to the modem in[...]

  • Page 57

    Using a wireless network Setting up a wire less network FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 57 Using a wireless network In a wired network, computers are connec ted through a series of cables that transfer inf ormation. I n a wireless n etwork, inform ation is tran sferred ov er[...]

  • Page 58

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 58 01-30004-0265-200708 31 Setting up a wireless network Using a wireless network Figure 13: FortiWiFi-50B as an Access Poin t Positioning an Access Point When placing the FortiWiFi-50B AP , your main concern is providing a strong signal to all users. A strong signal [...]

  • Page 59

    Using a wireless network Setting up a wire less network FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 59 T o avoid RF interference: • Remove these devices from the immediate area where users are working . Something as simple as a Bluetooth enabled mouse may cause transmission interrupt[...]

  • Page 60

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 60 01-30004-0265-200708 31 Wireless Security Using a wireless network Wireless Security Radio waves transmitted between a wireless device and access points provide th e weakest link between the wireless device and network servers. Wireless networking can be risky beca[...]

  • Page 61

    Using a wireless network FortiWiFi-50B operation mo des FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 61 Additional security measures The FortiWiFi-50B include s other security measures you can use to block unwanted users from accessing yo ur wireless network. By setting a few extra optio[...]

  • Page 62

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 62 01-30004-0265-200708 31 FortiWiFi-50B operation modes Using a wireless network Figure 15: FortiWiFi in Access Point mode Client mode When using the FortiWiFi-50B in C lient mode, the device is set to receive transmissions from ano ther access point. This enables yo[...]

  • Page 63

    Using a wireless network Setting up the FortiWiFi-50B as an Access Point FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 63 Changing the operating mode T o change the wireless op erating mode 1 Go to System > Wireless > Settin gs . 2 For the Operation mode , select Change 3 Select the[...]

  • Page 64

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 64 01-30004-0265-200708 31 Setting up the FortiWiFi-50B as an Access Point Using a wireless network Set the security options T o ensure proper security and protection of your network and its information, set the security options for the FortiWiFi-50B unit. T o set the[...]

  • Page 65

    FortiGate Firmware Upgra ding to a new firmwar e version FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 65 FortiGate Firmware Fortinet periodically u pdates the FortiGate firmware to include enhancement s and address issues. Af ter you have registered yo ur FortiGate unit, FortiGat e firmw[...]

  • Page 66

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 66 01-30004-0265-200708 31 Upgrading to a new firmware version FortiGate Firmware 5 T ype the path and filename of the firmware image file, or select Browse a nd locate the file. 6 Select OK. The FortiGate unit uploads the fi rmware image file, upgrades to the new fir[...]

  • Page 67

    FortiGate Firmware Reverting to a previous firmware version FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 67 The FortiGate unit uploads the firmwa re image file, upgrades to the new firmwar e version, and restarts. This process takes a few minutes. 7 Reconnect to the CLI. 8 T o confirm th[...]

  • Page 68

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 68 01-30004-0265-200708 31 Reverting to a previous firmware version FortiGate Firmwar e 6 Select OK. The FortiGate unit uploads the firmware im age file, reverts to th e old firmware version, reset s the configuration, restar ts , and displays the FortiGate login. Thi[...]

  • Page 69

    FortiGate Firmware Reverting to a previous firmware version FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 69 4 Make sure the FortiGate uni t c an connect to the TFTP server . Y ou can use the following command to ping the computer running the TFTP server . For example, if the TFTP se rver[...]

  • Page 70

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 70 01-30004-0265-200708 31 Installing firmware images from a system reboot using the CLI FortiGate Firmware Inst alling firmware images from a system reboot using the CLI This procedure inst alls a specified firmwar e ima ge and resets the FortiGate unit to default se[...]

  • Page 71

    FortiGate Firmware Installing firmware im ages from a system reb oot using the CLI FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 71 6 Enter the following co mmand to restart the FortiGate unit: execute reboot The FortiGate unit responds with the following mess age: This operation will reb[...]

  • Page 72

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 72 01-30004-0265-200708 31 Installing firmware images from a system reboot using the CLI FortiGate Firmware 11 Enter the firmware image filename an d press Enter . The TFTP server uploads the firmwar e im age file to the FortiG ate unit an d messages similar to the fo[...]

  • Page 73

    FortiGate Firmware The FortiUSB key FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 73 The FortiUSB key The FortiUSB key provides flex ibility an d control when you ar e backing up and restoring configuration files. The For tiUSB key also enables you to have a single, secure location for st[...]

  • Page 74

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 74 01-30004-0265-200708 31 The FortiUSB key FortiGate Firmware exec backup config usb <filename> 3 Enter the following command to verify t he configuration files are on the key: exec usb-disk list T o restore configurat ion using the CLI 1 Log into the CLI. 2 En[...]

  • Page 75

    FortiGate Firmware T esting a new firmware image before installing it FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 75 config system auto-install set default-config-file <filename> set auto-install-config <enable/disable> set default-image-file <filename> set auto-instal[...]

  • Page 76

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 76 01-30004-0265-200708 31 T esting a new firmware image before installing it FortiGate Firmware 4 Make sure t he internal interface is c onnected to the same n etwork as th e TFTP server . Y ou can use the f ollowing comm and to ping the comput er running th e TFTP s[...]

  • Page 77

    FortiGate Firmware Installing and using a backu p firmware image FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 77 10 T ype an IP address that can be used by th e FortiGate unit to connect to the FTP server . The IP address can be any IP address that is valid for the network the interface [...]

  • Page 78

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 78 01-30004-0265-200708 31 Installing and using a backup firmware image FortiGate Firmware • Access the CLI by connecting to the Fo rtiGate consol e port using a RJ-45 to DB-9 serial cable or null -modem cable. • Install a TFTP serve r that you can connec t to fro[...]

  • Page 79

    FortiGate Firmware Installing and using a backu p firmware image FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 79 9 T ype an IP address that can be used by th e FortiGate unit to connect to the FTP server . The IP address can be any IP address that is valid for the network the interface i[...]

  • Page 80

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 80 01-30004-0265-200708 31 Installing and using a backup firmware image FortiGate Firmware[...]

  • Page 81

    Index FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 81 Index A adding a defa ult route 38, 41 C CAT5 20 certificate, security 22 CLI additional CLI commands, FortiUSB 75 connecting 23 upgrading the firmware 6 6, 68 comments, documentation 13 configuring redundant mode 52 standalone mode 5[...]

  • Page 82

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 82 01-30004-0265-200708 31 Index mounting 19 N NAT/Route mode settings 36 using the CLI 39 using the web-base d manager 3 7 NTP server 46 NTP server synchronize 46 P ping requests, preventin g public FortiGate interfac e from responding to 35 ping server 55 PoE 20 Pow[...]

  • Page 83

    www.fortinet.com[...]

  • Page 84

    www.fortinet.com[...]