Fortinet 110C инструкция обслуживания

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

Идти на страницу of

Хорошее руководство по эксплуатации

Законодательство обязывает продавца передать покупателю, вместе с товаром, руководство по эксплуатации Fortinet 110C. Отсутствие инструкции либо неправильная информация, переданная потребителю, составляют основание для рекламации в связи с несоответствием устройства с договором. В законодательстве допускается предоставлении руководства в другой, чем бумажная форме, что, в последнее время, часто используется, предоставляя графическую или электронную форму инструкции Fortinet 110C или обучающее видео для пользователей. Условием остается четкая и понятная форма.

Что такое руководство?

Слово происходит от латинского "instructio", тоесть привести в порядок. Следовательно в инструкции Fortinet 110C можно найти описание этапов поведения. Цель инструкции заключается в облегчении запуска, использования оборудования либо выполнения определенной деятельности. Инструкция является набором информации о предмете/услуге, подсказкой.

К сожалению немного пользователей находит время для чтения инструкций Fortinet 110C, и хорошая инструкция позволяет не только узнать ряд дополнительных функций приобретенного устройства, но и позволяет избежать возникновения большинства поломок.

Из чего должно состоять идеальное руководство по эксплуатации?

Прежде всего в инструкции Fortinet 110C должна находится:
- информация относительно технических данных устройства Fortinet 110C
- название производителя и год производства оборудования Fortinet 110C
- правила обслуживания, настройки и ухода за оборудованием Fortinet 110C
- знаки безопасности и сертификаты, подтверждающие соответствие стандартам

Почему мы не читаем инструкций?

Как правило из-за нехватки времени и уверенности в отдельных функциональностях приобретенных устройств. К сожалению само подсоединение и запуск Fortinet 110C это слишком мало. Инструкция заключает ряд отдельных указаний, касающихся функциональности, принципов безопасности, способов ухода (даже то, какие средства стоит использовать), возможных поломок Fortinet 110C и способов решения проблем, возникающих во время использования. И наконец то, в инструкции можно найти адресные данные сайта Fortinet, в случае отсутствия эффективности предлагаемых решений. Сейчас очень большой популярностью пользуются инструкции в форме интересных анимаций или видео материалов, которое лучше, чем брошюра воспринимаются пользователем. Такой вид инструкции позволяет пользователю просмотреть весь фильм, не пропуская спецификацию и сложные технические описания Fortinet 110C, как это часто бывает в случае бумажной версии.

Почему стоит читать инструкции?

Прежде всего здесь мы найдем ответы касательно конструкции, возможностей устройства Fortinet 110C, использования отдельных аксессуаров и ряд информации, позволяющей вполне использовать все функции и упрощения.

После удачной покупки оборудования/устройства стоит посвятить несколько минут для ознакомления с каждой частью инструкции Fortinet 110C. Сейчас их старательно готовят или переводят, чтобы они были не только понятными для пользователя, но и чтобы выполняли свою основную информационно-поддерживающую функцию.

Содержание руководства

  • Страница 1

    www.fortinet.com FortiG at e -1 1 0C FortiO S 3 .0 MR 6 INST ALL GUIDE[...]

  • Страница 2

    FortiGate- 1 10C Install Guide FortiOS 3.0 MR6 28 July 2008 01-30006-04 81-20080728 © Copyright 2008 Fortine t, Inc. All rights reserved. No p art of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mechanical, manual, op tical or otherwise[...]

  • Страница 3

    Contents FortiGate-1 1 0C FortiOS 3.0 MR6 Install Guide 01-30006-0481-2008072 8 1 Content s Contents...................................................................... .............. .......... 1 Introduction ............... ................................. .............................. .......... 5 Register your FortiGate unit ...............[...]

  • Страница 4

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 2 01-30006-0481-200807 28 Contents Configure a DNS server ................ ................ ................ ................ ....... 22 Adding a default route and gateway . ......... ................. ............ .............. 22 Adding firewall policies ..................... ...... ............. ...[...]

  • Страница 5

    Contents FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 3 Installing firmware from a system reboot using the CLI...... ................ ........ 42 Restoring the previous configuration ............................. ................ .............. 44 Backup and Restore from a USB key .... ............. ............. ..........[...]

  • Страница 6

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 4 01-30006-0481-200807 28 Contents[...]

  • Страница 7

    Introduction Register your FortiGate unit FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 5 Introduction Welcome an d thank you for selecting Fortinet product s for your real-time network protection. The FortiGate Unified Threat Man agement System improves network security , reduces network misuse and abuse, and help s you use[...]

  • Страница 8

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 6 01-30006-0481-200807 28 About the FortiGate-1 10C Introduction About the FortiGate-1 10C The FortiGate-1 10C is an ideal solutio n for SMB and and Medium to large-sized Enterprises with distribu ted branch office s. Th e FortiGate-1 10C features dual W AN 10/100/1000 link support for red undant intern[...]

  • Страница 9

    Introduction Further Reading FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 7 Typographic conventions FortiGate document ation uses the fo llowing typographical conven tions: Further Reading The most up-to-date publication s and pr evious rele ases of F ortinet produ ct documentation are available from the Fortinet T echnical[...]

  • Страница 10

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 8 01-30006-0481-200807 28 Customer service and technical support Introduction • FortiGate IPS User Guide Describes how to configure the FortiGat e Intrusion Preven tion System settings and how the FortiGate IPS deals with some commo n attacks. • FortiGate IPSec VPN User Guide Provides step-by-step i[...]

  • Страница 11

    Installing Environmental specifications FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 9 Inst alling This chapter describes in stalling your FortiGate unit in yo ur server room, environmental specifications and how to mount the FortiGate in a rack if applicable. This chapter contains the follow ing topics: • Environmenta l [...]

  • Страница 12

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 10 01-30006-0481-200807 28 Cautions and warnings Installing • Connect the equipment into an outlet on a circuit different fro m that to which the receiver is connecte d. • Consult the dealer or an experien ced radio/TV technician for help. The equipm ent compliance with FCC radiation expo sure limit[...]

  • Страница 13

    Installing Cautions and warni ngs FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 11 When placing the For tiGate unit on any flat , sta ble surface, ensure the unit has at least 1.5 inches (3.75 cm) of clearance on each side to ensure adequate airflow for cooling. For rack mounting, use the moun ting brackets and screws includ[...]

  • Страница 14

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 12 01-30006-0481-200807 28 Plugging in the FortiGa te Installing Figure 3: Mounting in a rack Plugging in the FortiGate Use the following steps to conne ct the power supply to the FortiGate unit. T o power on the FortiGate unit 1 Ensure the power switch, located at the ba ck of the FortiGate unit is in [...]

  • Страница 15

    Installing T urning off the FortiGate unit FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 13 T urning off the FortiGate unit Always shut down the FortiGate operatin g system properly bef ore turning off the power switch to avoid po te ntial hardware problems. T o power off the FortiGate unit 1 From the web-ba sed manage r , g[...]

  • Страница 16

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 14 01-30006-0481-200807 28 T urning off the FortiGat e unit Installing[...]

  • Страница 17

    Configuring NA T vs. T r ansparent mode FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 15 Configuring This section provides an overview of t he operating modes of the FortiGate unit, NA T/Route and Tr ansparent, and how to co nfigure the FortiGate unit for each mode. There are two ways you can configure the FortiGa te unit, u[...]

  • Страница 18

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 16 01-30006-0481-200807 28 Connecting to the FortiGate unit Configuring Transparent mode In T ransparen t mode, th e FortiGate unit is invisi ble to the ne twork. Simila r to a network bridge, all FortiGate interfaces must be on the same subnet. Y ou only have to configure a mana gement IP address to ma[...]

  • Страница 19

    Configuring Connecting to the FortiGate unit FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 17 T o support a secure HTTPS authentication method, the For tiGate unit ships with a self-signed security certific ate, which is offered to remote clients whenever they initiate a HTTPS connecti on to the FortiGate unit. When you conn[...]

  • Страница 20

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 18 01-30006-0481-200807 28 Configuring NA T mode Configuring Configuring NA T mode Configuring NA T mode involves defining interface add resses and default routes, and simple firewall policies. Y ou can use the web-based m anager or the CLI to configure the FortiGate unit in NA T/Route mode. Using the w[...]

  • Страница 21

    Configuring Configuring NA T mode FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 19 4 Select OK. 5 Repeat this procedure for each interf ace as required. Configure a DNS server A DNS server is a service that conver ts symbolic node names to IP addresses. A domain name server (DNS server) im plements the pr otocol. In sim ple [...]

  • Страница 22

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 20 01-30006-0481-200807 28 Configuring NA T mode Configuring For an initial configuration, you must edit the factor y configured static defau lt route to specify a different defau lt gateway for the FortiGat e unit. This will enable the flow of data th rough the FortiGate unit. For details on add ing ad[...]

  • Страница 23

    Configuring Configuring NA T mode FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 21 3 Set the following and select OK. Firewall policy configurati on is the same in NA T/Route mode and T ransparent mode. Note that these policies allo w all traffic throug h. No protection profiles have been applied. Ensure you create additiona[...]

  • Страница 24

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 22 01-30006-0481-200807 28 Configuring NA T mode Configuring T o set an interface to use PPPoE addressing config system interface edit external set mode pppoe set username <name_str> set password <psswrd> set ipunnumbered <ip_address> set disc-retry-timeout <integer_seconds> set [...]

  • Страница 25

    Configuring Configuring T ransparent mode FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 23 For an initial configuration, you must edit th e factory configured st atic default route to specify a different default gateway for the FortiGate unit. This will enable the flow of data through the FortiGate unit. For details on ad di[...]

  • Страница 26

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 24 01-30006-0481-200807 28 Configuring T ransparent mode Configuring Using the web-based manager After conn ecting to the web-based manager , you can use the following procedures to complete the ba sic configur ation of the FortiGate unit. Ensure you read the section “Connectin g to the web-based mana[...]

  • Страница 27

    Configuring Configuring T ransparent mode FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 25 T o add an outgoing traffi c firewall policy 1 Go to Firewall > Polic y . 2 Select Create New . 3 Set the following and select OK. T o add an incoming traffi c firewall policy 1 Go to Firewall > Polic y . 2 Select Create New . 3 [...]

  • Страница 28

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 26 01-30006-0481-200807 28 Configuring T ransparent mode Configuring Configure a DNS server A DNS server is a service that convert s symbolic node names to IP addresses. A domain name server (DNS server ) implemen ts the protocol. In simple te rms, it acts as a phone book for the Internet. A DNS server [...]

  • Страница 29

    Configuring V erify the co nfiguration FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 27 V erify the configuration Y our FortiGate unit is now configured and connected to the network. T o verify the FortiGate unit is connected and configure d correctly , use your web browser to browse a web site, or use your ema il client to [...]

  • Страница 30

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 28 01-30006-0481-200807 28 Restoring a configuration Configuring Restoring a configuration Should you need to restore the config uration file, use the following steps. T o restore the FortiGate configurat ion 1 Go to System > Maintenance > Backup & Restore . 2 Select to uplo ad the restor e f [...]

  • Страница 31

    Configuring Addition al configurat ion FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 29 T o change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select Change Password and enter a new p assword. 3 Select OK. Alternatively , you can also add new admin i strator users by select ing Create New , [...]

  • Страница 32

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 30 01-30006-0481-200807 28 Additional confi guration Configuring[...]

  • Страница 33

    Advanced configuration Protection profiles FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 31 Advanced configuration The FortiGate unit and the FortiOS o perating system provide a wide range of features that enable you to control netwo rk and internet traffic and pr otect your network. This chapter describes some of these opti[...]

  • Страница 34

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 32 01-30006-0481-200807 28 Firewall p olicies Advanced configuration The best way to begin creating your own protection pr ofile is to open a predefined profile. This way you can see how a profile is set up, and th en modify it suit your requirement s. Y ou access Protecti on profile options by going to[...]

  • Страница 35

    Advanced configuration Antivirus options FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 33 Configuring firewall policies T o add or edit a firewall policy go to Firewall > Policy and select Edit on an existing policy , or select Create New to add a policy . The source and des tination Interface/Zone match the firewall poli[...]

  • Страница 36

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 34 01-30006-0481-200807 28 AntiSpam options Advanced configuration • Graywar e - These are unsolicite d commerc ial software progr ams that a re installed on computer s, often without the user's consent or knowledge. Grayware progr ams are generally consider ed an annoyance, but the se programs c[...]

  • Страница 37

    Advanced configuration Web fi ltering FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 35 Banned word lists are specific wor ds that may be typically found in email. The FortiGate u nit searche s for words or patterns in ema il messages. If matches are found, values assigned to the words are to ta lled. If the defined threshold[...]

  • Страница 38

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 36 01-30006-0481-200807 28 Logging Advanced configuration T o configure content blocking, go to W eb Filter > Content Block . URL filter enables you to control additional web sites that you can block or allow . This enables you greater con trol over ce rtain URLs or sub-URLs. The Fo rtiGate unit allo[...]

  • Страница 39

    FortiGate Firmware Downloading firmware FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 37 FortiGate Firmware Fortinet periodically updates the For tiGat e firmware to include new feat ures and address issues. After yo u have registered your FortiGate unit, you can download FortiGate firmware updates is available for download [...]

  • Страница 40

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 38 01-30006-0481-200807 28 Using the web-based manage r FortiGate Firmware T o download firmware 1 Log into the site using your user n ame and password. 2 Go to Firmware Images > FortiGate . 3 Select the most recent FortiOS version, and MR release and p atch release. 4 Locate the firmware for your Fo[...]

  • Страница 41

    FortiGate Firmware Using the web-based manager FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 39 T o revert to a previous firmware version 1 Copy the firmware image file to the managem ent computer . 2 Log into the FortiGate web- based manager . 3 Go to System > St atus . 4 Under System Information > Firmware V ersion ,[...]

  • Страница 42

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 40 01-30006-0481-200807 28 Using the CLI FortiGate Firmware T o configure the USB Auto-Inst all 1 Go to System > Maintenance > Backup and Restore . 2 Select the blue arrow to expa nd the Advanced options. 3 Select the following: • On system restart, auto matically update FortiGate configuration [...]

  • Страница 43

    FortiGate Firmware Using the CLI FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 41 5 Enter the fo llowing command to copy the firmware image from the TFTP server to the FortiGate unit: execute restore image <name_str> <tftp_ip4> Where <name_str> is the nam e of the firmware image file and <tftp_ip4> is[...]

  • Страница 44

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 42 01-30006-0481-200807 28 Installing firmware from a system reboot using the CLI FortiGate Firmware 4 Make sure the FortiGate unit can connect to th e TFTP server . Y ou can use the followin g command to ping the computer running the TFTP server . For example, if the TFTP serv er’s IP address is 192.[...]

  • Страница 45

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 43 If you are revert ing to a previou s FortiOS vers ion, you might not be able to rest ore the previous configuration from the backup configuration file . T o inst all firmware from a system reboot 1 Conne[...]

  • Страница 46

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 44 01-30006-0481-200807 28 Installing firmware from a system reboot using the CLI FortiGate Firmware 9 T ype the address of the TFTP server and press Enter: The following message appears: Enter Local Address [192.168.1.188]: 10 T ype an IP addre ss the FortiGate unit can use to connect to the TFTP serve[...]

  • Страница 47

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 45 T o restore configuration using the CLI 1 Log into the CLI. 2 Enter the following command to re store the configuration files: exec restore image usb <filename> The FortiGate unit responds with the[...]

  • Страница 48

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 46 01-30006-0481-200807 28 T esting new firmware befo re installing FortiGate Firmware T esting new firmware before inst alling Y ou can test a new fi rmware image by installing the firmw are image from a system reboot and saving it to system memory . Afte r completing this procedure, the FortiGate unit[...]

  • Страница 49

    FortiGate Firmware T esting new firmware b efore installing FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 01-30006-0481-20080 728 47 8 T ype G to get t he new firm ware image from the T FTP serv er . The following m essage appears: Enter TFTP server address [192.168.1.168]: 9 T ype th e address of the TFTP server and pr ess Enter: The following m e[...]

  • Страница 50

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 48 01-30006-0481-200807 28 T esting new firmware befo re installing FortiGate Firmware[...]

  • Страница 51

    Index FortiGate-1 1 0C FortiOS 3.0 MR6 Install Guide 01-30006-0481-2008072 8 59 Index A adding a defa ult route 19 , 22 additional resources 7 admin password 28 air flow 9 ambient te mperature 9 antispam options 34 antivirus options 33 auto-install 39 auto-install from CLI 45 B backing up 27 C certificate, security 17 CLI 17 upgrading the firmware [...]

  • Страница 52

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 60 01-30006-0481-200807 28 Index P PADT timeout 19 password, changing 28 power off 13 PPPoE 22 protection profiles 31 R registering 5 restore 28 restoring previous firmware configuration 44 reverting firmware 38 S security certificate 17 shielded twisted pair 10 shut down 13 signatures, update 29 static[...]

  • Страница 53

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 61 01-30006-0481-200807 28 Index[...]

  • Страница 54

    FortiGate-1 10C FortiOS 3.0 MR6 Install Guide 62 01-30006-0481-200807 28 Index[...]

  • Страница 55

    www.fortinet.com[...]

  • Страница 56

    www.fortinet.com[...]