English dropdown-ico

Fortinet 50A/50B manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Fortinet 50A/50B, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Fortinet 50A/50B one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Fortinet 50A/50B. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Fortinet 50A/50B should contain:
- informations concerning technical data of Fortinet 50A/50B
- name of the manufacturer and a year of construction of the Fortinet 50A/50B item
- rules of operation, control and maintenance of the Fortinet 50A/50B item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Fortinet 50A/50B alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Fortinet 50A/50B, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Fortinet service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Fortinet 50A/50B.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Fortinet 50A/50B item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    www.fortinet.com For tiGate-50A/ 50B, For tiWiF i-50B and FortiG at e -1 00 FortiO S 3 .0 MR 4 INST ALL GUIDE[...]

  • Page 2

    FortiGate-50A/50B, FortiW iFi-50B and FortiGate-100 Inst all Guide FortiOS 3.0 MR4 31 August 2007 01-30004-02 65-20070831 © Copyright 2007 Fortine t, Inc. All rights reserved. No p art of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mec[...]

  • Page 3

    Contents FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 3 Content s Contents...................................................................... .............. .......... 3 Introduction ............... ................................. .............................. .......... 7 About th[...]

  • Page 4

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 4 01-30004-0265-200708 31 Contents Connecting to the FortiGate unit ............................... ................ ................... . 21 Web-based manager ................. ................ ................... ................ .............. 21 Command line inter[...]

  • Page 5

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 5 01-30004-0265-200708 31 Contents Next steps ................... ................. ................ ............. ................ ................ ....... 46 Set the date and ti me ....... ................ ............. ................ ................ ............[...]

  • Page 6

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 6 01-30004-0265-200708 31 Contents Reverting to a previous firmware version ....... .................... ................ .......... 67 Reverting to a pr evious firmware ve rsion using the web-based manager .. 67 Reverting to a previous firmware vers ion using the CLI[...]

  • Page 7

    Introduction About the FortiGate unit FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 7 Introduction Welcome an d thank you for selecting Fortinet product s for your real-time network protection. FortiGate™ Unified Threat Management System improves n etwork security , reduces network misu[...]

  • Page 8

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 8 01-30004-0265-200708 31 About the FortiGate unit Introduction FortiGate-50B The FortiGate-50B is designed for te lecommuters and small remote offices with 10 to 50 employees. The FortiGate-50B unit includes two WAN ports for a redundant connection to the Interne t. [...]

  • Page 9

    Introduction Fortinet Family Products FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 9 Fortinet Family Product s Fortinet of fers a family of products that includes both sof tware and hardware appliances for a complete networ k secu rity solution including mail, logging, reporting, netwo r[...]

  • Page 10

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 10 01-30004-0265-200708 31 About this document Introduction FortiAnalyzer FortiAnalyze r™ provides ne twork admin istrators with t he information they need to enable the be st protection an d security for their networks and moni tor against attacks and vulnerabiliti[...]

  • Page 11

    Introduction About this document FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 11 This document contain s the following chapters: • Installing the FortiGate unit – Describes unp acking, setting up, and powering on a FortiGate unit. • Factory defaults – Provides the factory default[...]

  • Page 12

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 12 01-30004-0265-200708 31 Fortinet documentation Introduction Fortinet document ation The most up-to-da te publications and previous releases of Fortinet product documenta tion are available from the Fort inet T echnical Docu mentation web site at http://docs.fortic [...]

  • Page 13

    Introduction Customer service a nd technical su pport FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 13 • FortiGate High Availability Us er Guide Contains in-depth informat ion about the FortiGate hi gh availability feature and the FortiGate clustering prot ocol. • FortiGate IPS User G[...]

  • Page 14

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 14 01-30004-0265-200708 31 Customer service and technical support Introduction[...]

  • Page 15

    Installing the FortiGate unit Package Contents FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 15 Inst alling the FortiGate unit This section provides inform ation on installing and sett ing up the FortiGate unit on your network. This chapter inclu des the following sections: • Package Co[...]

  • Page 16

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 16 01-30004-0265-200708 31 Package Contents Insta lling the FortiGat e unit T able 1: T echnical Specifications FortiGate-50B The FortiGate-50B package con tains the following items: • FortiGate -50B Unified Threat Ma nagement Syst em • one gray straight-th rough [...]

  • Page 17

    Installing the FortiGate unit Package Contents FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 17 FortiWiFi-50B The FortiWiFi-50B p ackage conta ins the following items: • FortiWiFi-50B Unified Threat Manage ment System • one gray straight-thr ough Ethernet ca ble (Fortinet part nu mber[...]

  • Page 18

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 18 01-30004-0265-200708 31 Package Contents Insta lling the FortiGat e unit Figure 4: FortiGate-10 0 p ackage con tents T able 4: T echnical Specifications Warnings This device complies with part 15 of the FCC Rules. Operation is subject to the following two condition[...]

  • Page 19

    Installing the FortiGate unit Mounting FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 19 Mounting Adhere the rubber fee t included in the package to the under side of the FortiWiFi unit, near the corners of the device. Place the FortiGate unit on a ny flat, stable surface. En sure the unit[...]

  • Page 20

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 20 01-30004-0265-200708 31 Powering on the FortiGate unit Insta lling the FortiGat e unit T able 5: FortiGate-50A and F ortiGate-100 LED indicators T able 6: FortiGate-50B and FortiWiFi-50B LED indicators Power over Ethernet Power over Ethernet (P oE) is a meth od of [...]

  • Page 21

    Installing the FortiGate unit Powering off the FortiGate unit FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 21 Powering off the FortiGate unit Always shut down the FortiGate operatin g system properly bef ore turning off the power switch to avoid po te ntial hardware problems. T o power [...]

  • Page 22

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 22 01-30004-0265-200708 31 Connecting to the FortiGate unit Insta lling the FortiGat e unit T o connect to the web-based manage r 1 Set the IP address of the computer with an Ethernet con nection to the static IP address 192.168.1.2 with a n etmask of 255.255.255.0. 2[...]

  • Page 23

    Installing the FortiGate unit Connecting to the FortiGate unit FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 23 Command line interface Y ou can access the FortiGate comma nd line interface (CLI) by connecting a management compute r serial port to the FortiGate serial console connector . [...]

  • Page 24

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 24 01-30004-0265-200708 31 Quick inst allation using factory defaults Insta lling the FortiGate u nit Quick inst allation using factory default s The following procedure d escribes how to configure your internal networ k and the FortiGate unit to use the FortiGate def[...]

  • Page 25

    Installing the FortiGate unit Quick installation using factory defaults FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 25 6 Go to System > Network > Options . 7 Select one of the following DNS settings • Obtain DNS se rver address automatica lly: select to get the DNS addresses fr[...]

  • Page 26

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 26 01-30004-0265-200708 31 Quick inst allation using factory defaults Insta lling the FortiGate u nit[...]

  • Page 27

    Factory defaults FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 27 Factory default s The FortiGate unit ships with a factor y default configuration. The de fault configuration enab les you to connect to and use the FortiGate web-base d manager to configure the Fo rtiGate unit onto the netw[...]

  • Page 28

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 28 01-30004-0265-200708 31 Factory defaults Factory default DHCP server configuration T able 7: FortiGate DHCP Serv er default configurat ion Factory default NAT/Route mode network configuration When the FortiGate unit is first powered on , it is running in NA T/Route[...]

  • Page 29

    Factory defaults FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 29 Factory default Transparent mode network configuration In T ranspar ent mode, the FortiGate unit has the de fault network configuration listed in Ta b l e 9 . Factory default firewall configuration FortiGate firewall polici[...]

  • Page 30

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 30 01-30004-0265-200708 31 Factory defaults T able 10: Factory default firewall confi guration The factory default firewall configurati on is the sa me in NA T/Route mode and T ransparent mode. Factory default protection profiles Use protection profiles to apply dif f[...]

  • Page 31

    Factory defaults Re storing the default settings FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 31 Restoring the default settings Y ou can re vert to the factory default se ttings if you change a network setting and are unable to recover fr om it. Restoring the default settings using the w[...]

  • Page 32

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 32 01-30004-0265-200708 31 Restorin g the default setti ngs Factory defaults[...]

  • Page 33

    Configuring the FortiGat e unit Planning the FortiGate configu ration FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 33 Configuring the FortiGate unit This section provides an overview of t he operating modes of the FortiGate unit. Before beginning to configure the FortiGa te unit, you nee[...]

  • Page 34

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 34 01-30004-0265-200708 31 Planning the Forti Gate configuration Configuring the FortiGa te unit Y ou typically use NA T/Route mode when the FortiGate unit is operating as a gateway between private and public n etworks. In this configuration, you create NA T mode fire[...]

  • Page 35

    Configuring the Fo rt iGate unit Preventing the public interf a ce from responding to ping requests FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 35 Transparent mode In T ranspar ent mode, the FortiGate unit is invisible to the network. Similar to a network brid ge, all FortiG ate interf[...]

  • Page 36

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 36 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit T o disable ping administrative acce ss from the web-based manager 1 Log into the FortiGate web-b ased manager . 2 Go to System > Network > Interface . 3 Choose the ex terna[...]

  • Page 37

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 37 DHCP or PPPoE configuration Y ou can config ure any FortiGate interface to acquire its IP address fro m a DHCP or PPPoE server . Y our Interne t Service Provider (ISP) may provide[...]

  • Page 38

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 38 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit T o add/change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select the Change Password icon for the ad min administrator . 3 Enter the new passwor[...]

  • Page 39

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 39 4 Set Destination IP to 0. 0.0.0. 5 Set Mask to 0.0.0.0. 6 Set Gateway to the default gatewa y IP address. 7 Set Device to the interface con nected to the external network. 8 Sele[...]

  • Page 40

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 40 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit config system interface edit <interface> set mode static set ip <address_ip> <netmask> end Example config system interface edit internal set mode static set ip 1[...]

  • Page 41

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 41 config system dns set primary <address_ip> set secondary <address_ip> end Example config system dns set primary 293.44.75.21 set secondary 293.44.75.22 end Adding a de[...]

  • Page 42

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 42 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit Connecting the FortiGate unit to the network(s) When you have completed the initial config uration, you can connect the For tiGate unit between yo ur internal network and the Inte[...]

  • Page 43

    Configuring the Fo rtiGate unit T ransparent mode installati on FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 43 T ransp arent mode inst allation This section describes how to inst all th e FortiGate unit in NA T/Route mode. This section includes the following topics: • Prepar ing to co[...]

  • Page 44

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 44 01-30004-0265-200708 31 T ransparent mode installation Configu ring the FortiGat e unit Y ou do not have to recon nec t to the web-based m anager at this time. On ce you select Apply , the cha nges are immedi ate, and you can go to the system dashboard to verify th[...]

  • Page 45

    Configuring the Fo rtiGate unit T ransparent mode installati on FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 45 T o configure DNS serv er settings Set the primary and secondary DNS server IP addresses. Enter: config system dns set primary <address_ip> set secondary <address_ip&g[...]

  • Page 46

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 46 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit Figure 1 1: FortiGate-50B T ransparent mode connections Next step s Use the following information to configure FortiGate system time, and to conf igure antivirus and attack definition updates. Refe[...]

  • Page 47

    Configuring the Fo rtiGate unit Next steps FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 47 5 S p ecify how often the FortiGate unit shou ld synchronize its time with the NTP server . 6 Select OK. Updating antivirus and IPS signatures Configure the FortiGate unit to connec t to the FortiG[...]

  • Page 48

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 48 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit Updating the IPS signa tures from the CLI Y ou can update I PS signatures us ing the CLI. Use the followin g procedu re to update IPS signatures. T o up date IPS signatures using the CLI 1 Log into[...]

  • Page 49

    Configuring the Fo rtiGate unit Next steps FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 49 Example config system autoupdate schedule set update every Sunday set frequency weekly set status enable set time 16:45 end Adding an override server If you cannot con nect to the FDN, or if your o[...]

  • Page 50

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 50 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit[...]

  • Page 51

    Configuring the modem interface Conn ecting a modem to the FortiGate- 50A FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 51 Configuring the modem interface The following sections will cover how to configure the Fo rtiGate-50A modem using the CLI. The FortiGate-50A suppo rts a redundant o r[...]

  • Page 52

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 52 01-30004-0265-200708 31 Selecting a modem mode Configuring the modem in terface Figure 12: Example modem interface network conne ction Selecting a modem mode The modem interface can work in one of two modes: • redundant mo de • stand a lone mode Redundant mode [...]

  • Page 53

    Configuring the modem interface Config uring the modem for the FortiGate- 50A FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 53 In stand alon e mode the modem interface replaces the external Ethernet interface. Y ou must also configure fire wall policies for connections between the modem i[...]

  • Page 54

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 54 01-30004-0265-200708 31 Configuring the modem for th e FortiGat e-50A Configuring the modem in terface T able 15: CL I commands for the FortiGate-50A passwd2 <password_str> Enter the password used to access the specified dialup account. No default. passwd3 &l[...]

  • Page 55

    Configuring the modem interface Adding a Ping Server FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 55 Example config system modem set action dial set status enable set holddown-time 5 set interface wan1 set passwd1 acct1passwd set phone1 1234567891 set redial 10 set username1 acct1user en[...]

  • Page 56

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 56 01-30004-0265-200708 31 Adding firewall policies for modem conn ections Configuring the modem in terface Adding firewall policies for modem connections The modem interface requir es firewall addresses and policies. Y ou can add one or more addresses to the modem in[...]

  • Page 57

    Using a wireless network Setting up a wire less network FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 57 Using a wireless network In a wired network, computers are connec ted through a series of cables that transfer inf ormation. I n a wireless n etwork, inform ation is tran sferred ov er[...]

  • Page 58

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 58 01-30004-0265-200708 31 Setting up a wireless network Using a wireless network Figure 13: FortiWiFi-50B as an Access Poin t Positioning an Access Point When placing the FortiWiFi-50B AP , your main concern is providing a strong signal to all users. A strong signal [...]

  • Page 59

    Using a wireless network Setting up a wire less network FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 59 T o avoid RF interference: • Remove these devices from the immediate area where users are working . Something as simple as a Bluetooth enabled mouse may cause transmission interrupt[...]

  • Page 60

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 60 01-30004-0265-200708 31 Wireless Security Using a wireless network Wireless Security Radio waves transmitted between a wireless device and access points provide th e weakest link between the wireless device and network servers. Wireless networking can be risky beca[...]

  • Page 61

    Using a wireless network FortiWiFi-50B operation mo des FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 61 Additional security measures The FortiWiFi-50B include s other security measures you can use to block unwanted users from accessing yo ur wireless network. By setting a few extra optio[...]

  • Page 62

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 62 01-30004-0265-200708 31 FortiWiFi-50B operation modes Using a wireless network Figure 15: FortiWiFi in Access Point mode Client mode When using the FortiWiFi-50B in C lient mode, the device is set to receive transmissions from ano ther access point. This enables yo[...]

  • Page 63

    Using a wireless network Setting up the FortiWiFi-50B as an Access Point FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 63 Changing the operating mode T o change the wireless op erating mode 1 Go to System > Wireless > Settin gs . 2 For the Operation mode , select Change 3 Select the[...]

  • Page 64

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 64 01-30004-0265-200708 31 Setting up the FortiWiFi-50B as an Access Point Using a wireless network Set the security options T o ensure proper security and protection of your network and its information, set the security options for the FortiWiFi-50B unit. T o set the[...]

  • Page 65

    FortiGate Firmware Upgra ding to a new firmwar e version FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 65 FortiGate Firmware Fortinet periodically u pdates the FortiGate firmware to include enhancement s and address issues. Af ter you have registered yo ur FortiGate unit, FortiGat e firmw[...]

  • Page 66

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 66 01-30004-0265-200708 31 Upgrading to a new firmware version FortiGate Firmware 5 T ype the path and filename of the firmware image file, or select Browse a nd locate the file. 6 Select OK. The FortiGate unit uploads the fi rmware image file, upgrades to the new fir[...]

  • Page 67

    FortiGate Firmware Reverting to a previous firmware version FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 67 The FortiGate unit uploads the firmwa re image file, upgrades to the new firmwar e version, and restarts. This process takes a few minutes. 7 Reconnect to the CLI. 8 T o confirm th[...]

  • Page 68

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 68 01-30004-0265-200708 31 Reverting to a previous firmware version FortiGate Firmwar e 6 Select OK. The FortiGate unit uploads the firmware im age file, reverts to th e old firmware version, reset s the configuration, restar ts , and displays the FortiGate login. Thi[...]

  • Page 69

    FortiGate Firmware Reverting to a previous firmware version FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 69 4 Make sure the FortiGate uni t c an connect to the TFTP server . Y ou can use the following command to ping the computer running the TFTP server . For example, if the TFTP se rver[...]

  • Page 70

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 70 01-30004-0265-200708 31 Installing firmware images from a system reboot using the CLI FortiGate Firmware Inst alling firmware images from a system reboot using the CLI This procedure inst alls a specified firmwar e ima ge and resets the FortiGate unit to default se[...]

  • Page 71

    FortiGate Firmware Installing firmware im ages from a system reb oot using the CLI FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 71 6 Enter the following co mmand to restart the FortiGate unit: execute reboot The FortiGate unit responds with the following mess age: This operation will reb[...]

  • Page 72

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 72 01-30004-0265-200708 31 Installing firmware images from a system reboot using the CLI FortiGate Firmware 11 Enter the firmware image filename an d press Enter . The TFTP server uploads the firmwar e im age file to the FortiG ate unit an d messages similar to the fo[...]

  • Page 73

    FortiGate Firmware The FortiUSB key FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 73 The FortiUSB key The FortiUSB key provides flex ibility an d control when you ar e backing up and restoring configuration files. The For tiUSB key also enables you to have a single, secure location for st[...]

  • Page 74

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 74 01-30004-0265-200708 31 The FortiUSB key FortiGate Firmware exec backup config usb <filename> 3 Enter the following command to verify t he configuration files are on the key: exec usb-disk list T o restore configurat ion using the CLI 1 Log into the CLI. 2 En[...]

  • Page 75

    FortiGate Firmware T esting a new firmware image before installing it FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 75 config system auto-install set default-config-file <filename> set auto-install-config <enable/disable> set default-image-file <filename> set auto-instal[...]

  • Page 76

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 76 01-30004-0265-200708 31 T esting a new firmware image before installing it FortiGate Firmware 4 Make sure t he internal interface is c onnected to the same n etwork as th e TFTP server . Y ou can use the f ollowing comm and to ping the comput er running th e TFTP s[...]

  • Page 77

    FortiGate Firmware Installing and using a backu p firmware image FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 77 10 T ype an IP address that can be used by th e FortiGate unit to connect to the FTP server . The IP address can be any IP address that is valid for the network the interface [...]

  • Page 78

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 78 01-30004-0265-200708 31 Installing and using a backup firmware image FortiGate Firmware • Access the CLI by connecting to the Fo rtiGate consol e port using a RJ-45 to DB-9 serial cable or null -modem cable. • Install a TFTP serve r that you can connec t to fro[...]

  • Page 79

    FortiGate Firmware Installing and using a backu p firmware image FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 79 9 T ype an IP address that can be used by th e FortiGate unit to connect to the FTP server . The IP address can be any IP address that is valid for the network the interface i[...]

  • Page 80

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 80 01-30004-0265-200708 31 Installing and using a backup firmware image FortiGate Firmware[...]

  • Page 81

    Index FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 81 Index A adding a defa ult route 38, 41 C CAT5 20 certificate, security 22 CLI additional CLI commands, FortiUSB 75 connecting 23 upgrading the firmware 6 6, 68 comments, documentation 13 configuring redundant mode 52 standalone mode 5[...]

  • Page 82

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 82 01-30004-0265-200708 31 Index mounting 19 N NAT/Route mode settings 36 using the CLI 39 using the web-base d manager 3 7 NTP server 46 NTP server synchronize 46 P ping requests, preventin g public FortiGate interfac e from responding to 35 ping server 55 PoE 20 Pow[...]

  • Page 83

    www.fortinet.com[...]

  • Page 84

    www.fortinet.com[...]