Fortinet FortiGate 1U User manual
FortiOS 5.0.4 | 1U Models
The FortiGate Cookbook 5.0.4
Recipes for Success with your FortiGate
October 30, 2013
01-505-218081-20131030
Copyright© 2013 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®,
are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be
trademarks of Fortinet. All other product or company names may be trademarks of their
respective owners. Performance metrics contained herein were attained in internal lab tests
under ideal conditions, and performance may vary. Network variables, different network
environments and other conditions may affect performance results. Nothing herein represents
any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express
or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s
perform according to the performance metrics herein. For absolute clarity, any such warranty
will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests.
Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify,
transfer, or otherwise revise this publication without notice, and the most current version of the
publication shall be applicable.
2
3
QUICKSTART GUIDE
FortiGate 1U
QuickStart Guide
4
Register for Support
Information
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート•新機能の追加•新しい脅威
への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特
点信息、最新威胁防护
5
QUICKSTART GUIDE
FortiGate Setup Options
OS X
AB
C
A
Web Browser with Ethernet cable
6
Windows/OS X with USB
B
7
QUICKSTART GUIDE
C
Terminal Emulation with Console Cable
>
_
8
iPhone/iPad/iPod Touch with Apple USB cable
9
QUICKSTART GUIDE
Installation
The
10
SFP Transceivers
caps
11
QUICKSTART GUIDE
cap
The FortiGate Cookbook
Recipes for Success with your FortiGate
THE FORTIGATE COOKBOOK
Contents iii
Contents
Introduction .................................................................................................................. 1
Tips for using the FortiGate Cookbook......................................................................... 2
Installing & Setup ......................................................................................................... 5
Connecting a private network to the Internet using NAT/Route mode .............................. 6
Extra help: NAT/Route mode............................................................................................10
Adding a FortiGate unit without changing the network conguration.............................. 13
Extra help: Transparent mode ..........................................................................................17
Verifying and updating the FortiGate unit’s rmware .......................................................21
Setting up FortiGuard services.........................................................................................24
Extra help: FortiGuard ......................................................................................................26
Logging network trafc to gather information.................................................................. 27
Extra help: Logging ..........................................................................................................31
Using FortiCloud to record log messages........................................................................ 32
Using SNMP to monitor the FortiGate unit ...................................................................... 36
Setting up an explicit proxy for users on a private network.............................................42
Adding packet capture to help troubleshooting...............................................................46
Protecting a web server on the DMZ network..................................................................49
Using port pairing to simplify transparent mode..............................................................53
Using two ISPs for redundant Internet connections ........................................................58
Adding a backup FortiGate unit to improve reliability ......................................................63
THE FORTIGATE COOKBOOK
iv The FortiGate Cookbook 5.0.4
Security Policies & Firewall Objects ........................................................................... 69
Ordering security policies to allow different access levels...............................................70
Controlling when BYOD users can access the Internet ...................................................74
Using port forwarding on a FortiGate unit........................................................................ 77
Using AirPlay with iOS, AppleTV, FortiAP, and a FortiGate unit .......................................82
Using AirPrint with iOS and OS X and a FortiGate unit.................................................... 90
Security Features ....................................................................................................... 99
Monitoring your network using client reputation............................................................100
Controlling network access using application control ................................................... 103
Protecting a web server from external attacks............................................................... 109
Blocking outgoing trafc containing sensitive data........................................................113
Blocking large les from entering the network...............................................................118
Blocking access to specic websites ............................................................................121
Extra help: Web ltering ................................................................................................. 124
Blocking HTTPS trafc with web ltering.......................................................................125
Using web lter overrides to control website access..................................................... 130
Wireless Networking................................................................................................. 139
Setting up a temporary guest WiFi user......................................................................... 140
Setting up a network using a FortiGate unit and a FortiAP unit.....................................147
Providing remote users access to the corporate network and Internet ......................... 152
Authentication .......................................................................................................... 159
Providing Single Sign-On for a Windows AD network with a FortiGate......................... 160
Providing Single Sign-On in advanced mode for a Windows AD network.....................166
Contents v
Providing Single Sign-On for Windows AD with LDAP ..................................................169
Preventing security certicate warnings when using SSL inspection............................ 173
Extra help: Certicates ...................................................................................................177
SSL and IPsec VPN ................................................................................................... 179
Using IPsec VPN to provide communication between ofces....................................... 180
Providing remote users with access using SSL VPN ..................................................... 188
Providing secure remote access to a network for an iOS device ..................................196
Using redundant OSPF routing over IPsec VPN ............................................................ 203
THE FORTIGATE COOKBOOK
Table of contents
Other Fortinet Firewall manuals
Fortinet
Fortinet FortiGate 5001A-DW User manual
Fortinet
Fortinet FortiGate FortiGate-ADM-XB2 User manual
Fortinet
Fortinet FortiGate-200A User manual
Fortinet
Fortinet FortiManager-100 User manual
Fortinet
Fortinet FortiGate FortiGate-4000 User manual
Fortinet
Fortinet FortiGate-200A User manual
Fortinet
Fortinet FortiGate 50A User manual
Fortinet
Fortinet FortiGate 60M User manual
Fortinet
Fortinet FortiGate-7000E Series Parts list manual
Fortinet
Fortinet FortiGate FortiGate-3810A User manual
Fortinet
Fortinet FortiGate FortiGate-100A User manual
Fortinet
Fortinet FortiGate FortiGate-500 User manual
Fortinet
Fortinet FortiGate FortiGate-400 User manual
Fortinet
Fortinet FortiGate-400A User manual
Fortinet
Fortinet FortiGate-400A User manual
Fortinet
Fortinet FortiGate FortiGate-4000 Instruction Manual
Fortinet
Fortinet FortiGate FortiGate-60M User manual
Fortinet
Fortinet FortiManager-3000B User manual
Fortinet
Fortinet FortiGate FortiGate-5001 User manual
Fortinet
Fortinet FortiGate FortiGate-400 Instruction Manual
Popular Firewall manuals by other brands
PaloAlto Networks
PaloAlto Networks PA-220 Hardware reference
Nortel
Nortel 5109 Hardware installation guide
H3C
H3C SecPath T9000 IPS Series Installation, quick start
Cisco
Cisco Small Business RV215W quick start guide
Arxceo
Arxceo ALLY IP1000 user guide
PaloAlto Networks
PaloAlto Networks PA-5410 quick start guide
