Fortinet FortiGate-3016B User manual

www.fortinet.com
FortiGate-3016B, FortiGate-3600A
and FortiGate-3810A
FortiOS 3.0 MR5
INSTALL GUIDE

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A Install Guide
FortiOS 3.0 MR5
13 November 2007
01-30005-0343-20071113
© Copyright 2007 Fortinet, Inc. All rights reserved. No part of this
publication including text, examples, diagrams or illustrations may be
reproduced, transmitted, or translated in any form or by any means,
electronic, mechanical, manual, optical or otherwise, for any purpose,
without prior written permission of Fortinet, Inc.
Trademarks
Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC,
FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat
Management System, FortiGuard, FortiGuard-Antispam, FortiGuard-
Antivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer,
FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter,
FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of
Fortinet, Inc. in the United States and/or other countries. The names of
actual companies and products mentioned herein may be the trademarks
of their respective owners.
Regulatory compliance
FCC Class A Part 15 CSA/CUS
!
Caution: Risk of Explosion if Battery is replaced by an Incorrect Type.
Dispose of Used Batteries According to the Instructions.

Contents
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 3
Contents
Contents.............................................................................................. 3
Introduction ........................................................................................ 7
Register your FortiGate unit ............................................................................. 7
About the FortiGate unit ................................................................................... 8
FortiGate-3016B............................................................................................ 8
FortiGate-3600A............................................................................................ 8
FortiGate-3810A............................................................................................ 8
Fortinet Family Products .................................................................................. 9
FortiGuard Subscription Services ................................................................. 9
FortiClient...................................................................................................... 9
FortiMail ........................................................................................................ 9
FortiAnalyzer ............................................................................................... 10
FortiReporter ............................................................................................... 10
FortiBridge................................................................................................... 10
FortiManager............................................................................................... 10
About this document....................................................................................... 10
Document conventions................................................................................ 11
Typographic conventions...................................................................... 11
FortiGate documentation ................................................................................ 11
Fortinet Knowledge Center ......................................................................... 13
Comments on Fortinet technical documentation......................................... 13
Customer service and technical support ...................................................... 13
Installing the FortiGate unit ............................................................ 15
Environmental specifications......................................................................... 15
Installing AMC fillers on the FortiGate-3810A ............................................. 15
Rack mount instructions.............................................................................. 16
Powering on the FortiGate unit ...................................................................... 16
Powering off the FortiGate unit ...................................................................... 18
Connecting the FortiGate unit ........................................................................ 18
Web-based manager................................................................................... 18
Front control buttons and LCD .................................................................... 18
Command line interface .............................................................................. 18
Connecting to the web-based manager......................................................... 19
System Dashboard ............................................................................... 20
Connecting to the CLI ..................................................................................... 20
LCD front control buttons............................................................................... 21
Using the front control buttons and LCD ..................................................... 22

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
401-30005-0343-20071113
Contents
Factory defaults ............................................................................... 25
NAT/Route mode default network configuration.......................................... 25
Transparent mode default network configuration........................................ 26
Default protection profiles.............................................................................. 27
Restoring the default settings........................................................................ 27
Restoring the default settings using the web-based manager .................... 28
Restoring the default settings using the CLI ............................................... 28
Configuring....................................................................................... 29
Planning the FortiGate configuration ............................................................ 29
NAT/Route mode ........................................................................................ 29
NAT/Route mode with multiple external network connections .................... 30
Transparent mode....................................................................................... 31
Preventing the public interface from responding to ping requests ........... 31
NAT/Route mode installation ......................................................................... 32
Preparing to configure the FortiGate unit in NAT/Route mode ................... 32
DHCP or PPPoPE configuration ................................................................. 34
Using the web-based manager ................................................................... 34
Configuring basic settings .................................................................... 34
Adding a default route .......................................................................... 35
Verifying the web-based manager configuration .................................. 36
Verify the connection ............................................................................ 36
Using the command line interface............................................................... 36
Configuring the FortiGate unit for NAT/Route mode ............................ 36
Adding a default route .......................................................................... 38
Verify the connection ............................................................................ 38
Using the front control buttons and LCD..................................................... 39
Adding a default gateway using the LCD ............................................. 39
Verify the connection ............................................................................ 39
Connecting the FortiGate unit to the network(s) ......................................... 40
Configuring the networks ............................................................................ 40
Transparent mode installation ....................................................................... 41
Preparing to configure Transparent mode .................................................. 41
Using the web-based manager ................................................................... 41
Using the command line interface............................................................... 42
Using the front LCD .................................................................................... 43
Adding a default gateway using the LCD ............................................. 43
Verifying the front control buttons and LCD.......................................... 44
Verify the connection ............................................................................ 44
Connecting the FortiGate unit to your network ........................................... 44
Verify the connection ............................................................................ 45

Contents
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 5
Next Steps ........................................................................................................ 45
firewall policy configuration ......................................................................... 45
Set the date and time .................................................................................. 46
Updating antivirus and IPS signatures ........................................................ 47
Updating from the web-based manager ............................................... 47
Updating from the CLI........................................................................... 48
Scheduling antivirus and IPS updates from the CLI ............................. 48
Adding an override server..................................................................... 49
FortiGate Firmware .......................................................................... 51
Upgrading to a new firmware version............................................................ 51
Using the web-based manager ................................................................... 51
Using the CLI .............................................................................................. 52
Reverting to a previous firmware version ..................................................... 52
Using the web-based manager ................................................................... 53
Using the CLI .............................................................................................. 54
Installing firmware from a system reboot using the CLI.............................. 55
Restoring the previous configuration........................................................... 57
Using a USB key .............................................................................................. 57
Backup and Restore from a USB key ......................................................... 57
Using the USB Auto-Install feature ............................................................. 58
Additional CLI Commands for a USB key ................................................... 59
Testing a new firmware image before installing it........................................ 60
Index.................................................................................................. 63

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
601-30005-0343-20071113
Contents

Introduction Register your FortiGate unit
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 7
Introduction
Welcome and thank you for selecting Fortinet products for your real-time network
protection.
The FortiGate™ Unified Threat Management System improves network security,
reduces network misuse and abuse, and helps you use communications
resources more efficiently without compromising the performance of your
network. FortiGate Unified Threat Management Systems are ICSA-certified for
firewall, IPSec, and antivirus services.
The FortiGate Unified Threat Management Systemis a dedicated, easily managed
security device that delivers a full suite of capabilities, which include:
• application-level services such as virus protection and content filtering
• network-level services such as firewall, intrusion detection, VPN and traffic
shaping
The FortiGate Unified Threat Management System uses Fortinet’s Dynamic
Threat Prevention System (DTPS™) technology, which leverages breakthroughs
in chip design, networking, security and content analysis. The unique ASIC-based
architecture analyzes content and behavior in real-time, enabling key applications
to be deployed right at the network edge where they are most effective at
protecting your networks.
Register your FortiGate unit
Register the FortiGate unit by visiting http://support.fortinet.com and select
Product Registration.
To register, enter your contact information and the serial numbers of the FortiGate
units that you or your organization have purchased. You can register multiple
FortiGate units in a single session without re-entering your contact information.
By registering your FortiGate unit, you will receive updates to threat detection and
prevention databases (Antivirus, Intrusion Detection, etc.) and will also ensure
your access to technical support.
For more information, see the Fortinet Knowledge Centre article “Registration
Frequently Asked Questions” (http://kc.forticare.com/default.asp?id=2071).

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
801-30005-0343-20071113
About the FortiGate unit Introduction
About the FortiGate unit
FortiGate-3016B
The FortiGate-3016B
provides the
carrier-class levels of
performance and
reliability demanded by
large enterprises and
service providers. The unit uses a 64-bit, dual core processor and FortiASIC chips
to deliver a throughput meeting the needs of the most demanding applications.
The FortiGate-3016B includes redundant power supplies to minimize single-point
failures, including load-balanced operation and redundant failover with no
interruption in service. The high capacity, reliability, and easy management of the
FortiGate-3016B makes it a natural choice for managed service offerings. The
FortiGate-3016B includes 16 SFP ports using FortiAccel technology. The
FortiGate-3016B also provides expandability options with an additional single-
width AMC card slot.
FortiGate-3600A
The FortiGate-3600A
provides the carrier-class
levels of performance
and reliability demanded
by large enterprises and
service providers. The
unit uses multiple CPUs and FortiASIC chips to deliver a throughput meeting the
needs of the most demanding applications. The FortiGate-3600A includes
redundant power supplies to minimize single-point failures, including load-
balanced operation and redundant failover with no interruption in service. The
high capacity, reliability, and easy management of the FortiGate-3600A makes it a
natural choice for managed service offerings. The FortiGate-3600A includes two
SFP ports using FortiAccel technology. The FortiGate-3600A provides
expandability options with an additional single-width AMC card slot.
FortiGate-3810A
The FortiGate-3810A
provides the carrier-class
levels of performance
and reliability demanded
by large enterprises and
service providers. The
unit uses two dual core CPUs and FortiASIC chips to deliver a throughput meeting
the needs of the most demanding applications. The unit includes redundant power
supplies to minimize single-point failures, including load-balanced operation and
redundant failover with no interruption in service. FortiGate-3810A supports high
throughput, high flexibility and expandability options with four AMC card slots; two
single-width and two double-width.
POWER
STATUS
Esc Enter
MODEM
CONSOLE 1
2
3 5 7 9 11 13 15 17
46 8 10 12 14 16 18
FG-AMC-SW
PWR
Hi-Temp
Esc Enter
USB
MODEM
CONSOLE
7
8
5
6
3
4
1
2
9
10
POWER
STATUS
Esc Enter
USB
CONSOLE
AMC-SW2
AMC-SW1 AMC-DW1
AMC-DW2
AUX 12345678
910
-E4

Introduction Fortinet Family Products
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 9
Fortinet Family Products
Fortinet offers a family of products that includes both software and hardware
appliances, for a complete network security solution including mail, logging,
reporting, network management, and security along with FortiGate Unified Threat
Management Systems. For more information on the Fortinet product family, visit
the Fortinet web site at www.fortinet.com/products.
FortiGuard Subscription Services
FortiGuard Subscription Services are security services created, updated and
managed by a global team of Fortinet security professionals. They ensure the
latest attacks are detected and blocked before harming your corporate resources
or infecting your end-user computing devices. These services are created with the
latest security technology and designed to operate with the lowest possible
operational costs.
FortiGuard Subscription Services includes:
• FortiGuard Antivirus Service
• FortiGuard Intrusion Prevention subscription services (IPS)
• FortiGuard Web Filtering
• FortiGuard Antispam Service
• FortiGuard Premier Service
An online virus scanner and virus encyclopedia is also available for your
reference.
FortiClient
FortiClient™ Host Security software provides a secure computing environment for
both desktop and laptop users running the most popular Microsoft Windows
operating systems. FortiClient offers many features including:
• creating VPN connections to remote networks
• configuring real-time protection against viruses
• guarding against modification of the Windows registry
• virus scanning
FortiClient also offers a silent installation feature, enabling an administrator to
efficiently distribute FortiClient to several users’ computers with preconfigured
settings.
FortiMail
FortiMail™ Secure Messaging Platform provides powerful, flexible heuristic
scanning and reporting capabilities to incoming and outgoing email traffic. The
FortiMail unit has reliable, high performance features for detecting and blocking
malicious attachments such as Distributed Checksum Clearinghouse (DCC)
scanning and Bayesian scanning. Built on Fortinet’s award winning FortiOS and
FortiASIC technology, FortiMail antivirus technology extends full content
inspection capabilities to detect the most advanced email threats.

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
10 01-30005-0343-20071113
About this document Introduction
FortiAnalyzer
FortiAnalyzer™ provides network administrators with the information they need to
enable the best protection and security for their networks against attacks and
vulnerabilities. The FortiAnalyzer unit features include:
• collects logs from FortiGate devices and syslog devices
• generates hundreds of reports using collected log data
• scans and reports vulnerabilities
• stores files quarantined from a FortiGate unit
The FortiAnalyzer unit can also be configured as a network analyzer to capture
real-time traffic on areas of your network where firewalls are not employed. You
can also use the unit as a storage device where users can access and share files,
including the reports and logs that are saved on the FortiAnalyzer hard disk.
FortiReporter
FortiReporter™ Security Analyzer software generates easy-to-understand reports
and can collect logs from any FortiGate unit, as well as over 30 network and
security devices from third-party vendors. FortiReporter reveals network abuse,
manages bandwidth requirements, monitors web usage, and ensures employees
are using the office network appropriately. FortiReporter allows IT administrators
to identify and respond to attacks, including identifying ways to proactively secure
their networks before security threats arise.
FortiBridge
FortiBridge™ products are designed to provide enterprise organizations with
continuous network traffic flow in the event of a power outage or a FortiGate
system failure. The FortiBridge unit bypasses the FortiGate unit to make sure that
the network can continue processing traffic. FortiBridge products are easy to use
and deploy, and you can customize the actions a FortiBridge unit takes when a
power failure or a FortiGate system failure occurs.
FortiManager
The FortiManager™ system is designed to meet the needs of large enterprises
(including managed security service providers) responsible for establishing and
maintaining security policies across many dispersed FortiGate installations. With
this system, you can configure multiple FortiGate devices and monitor their status.
You can also view real-time and historical logs for the FortiGate devices, including
updating firmware images of managed FortiGate devices. The FortiManager
System emphasizes ease of use, including easy integration with third party
systems.
About this document
This document explains how to install and configure your FortiGate unit onto your
network. This document also includes how to install and upgrade new firmware
versions on your FortiGate unit.

Introduction FortiGate documentation
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 11
This document contains the following chapters:
•Installing the FortiGate unit – Describes setting up and powering on a
FortiGate unit.
•Factory defaults – Provides the factory default settings for the FortiGate unit.
•Configuring – Provides an overview of the operating modes of the FortiGate
unit and how to integrate the FortiGate unit into your network.
•FortiGate Firmware – Describes how to install, update, restore and test
firmware for the FortiGate device.
Document conventions
The following document conventions are used in this guide:
• In the examples, private IP addresses are used for both private and public IP
addresses.
• Notes and Cautions are used to provide important information:
Typographic conventions
FortiGate documentation uses the following typographical conventions:
FortiGate documentation
The most up-to-date publications and previous releases of Fortinet product
documentation are available from the Fortinet Technical Documentation web site
at http://docs.forticare.com.
The following FortiGate product documentation is available:
Note: Highlights useful additional information.
!
Caution: Warns you about commands or procedures that could have unexpected or
undesirable results including loss of data or damage to equipment.
Convention Example
Keyboard input In the Gateway Name field, type a name for the remote VPN
peer or client (for example, Central_Office_1).
Code examples config sys global
set ips-open enable
end
CLI command syntax config firewall policy
edit id_integer
set http_retry_count <retry_integer>
set natip <address_ipv4mask>
end
Document names FortiGate Administration Guide
Menu commands Go to VPN > IPSEC > Phase 1 and select Create New.
Program output Welcome!
Variables <address_ipv4>

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
12 01-30005-0343-20071113
FortiGate documentation Introduction
• FortiGate QuickStart Guide
Provides basic information about connecting and installing a FortiGate unit.
• FortiGate Install Guide
Describes how to install a FortiGate unit. Includes a hardware reference,
default configuration information, installation procedures, connection
procedures, and basic configuration procedures. Choose the guide for your
product model number.
• FortiGate Administration Guide
Provides basic information about how to configure a FortiGate unit, including
how to define FortiGate protection profiles and firewall policies; how to apply
intrusion prevention, antivirus protection, web content filtering, and spam
filtering; and how to configure a VPN.
• FortiGate online help
Provides a context-sensitive and searchable version of the Administration
Guide in HTML format. You can access online help from the web-based
manager as you work.
• FortiGate CLI Reference
Describes how to use the FortiGate CLI and contains a reference to all
FortiGate CLI commands.
•FortiGate Log Message Reference
Available exclusively from the Fortinet Knowledge Center, the FortiGate Log
Message Reference describes the structure of FortiGate log messages and
provides information about the log messages that are generated by FortiGate
units.
• FortiGate High Availability User Guide
Contains in-depth information about the FortiGate high availability feature and
the FortiGate clustering protocol.
• FortiGate IPS User Guide
Describes how to configure the FortiGate Intrusion Prevention System settings
and how the FortiGate IPS deals with some common attacks.
• FortiGate IPSec VPN User Guide
Provides step-by-step instructions for configuring IPSec VPNs using the web-
based manager.
• FortiGate SSL VPN User Guide
Compares FortiGate IPSec VPN and FortiGate SSL VPN technology, and
describes how to configure web-only mode and tunnel-mode SSL VPN access
for remote users through the web-based manager.
• FortiGate PPTP VPN User Guide
Explains how to configure a PPTP VPN using the web-based manager.
• FortiGate Certificate Management User Guide
Contains procedures for managing digital certificates including generating
certificate requests, installing signed certificates, importing CA root certificates
and certificate revocation lists, and backing up and restoring installed
certificates and private keys.
• FortiGate VLANs and VDOMs User Guide
•Describes how to configure VLANs and VDOMS in both NAT/Route and
Transparent mode. Includes detailed examples.

Introduction Customer service and technical support
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 13
Fortinet Knowledge Center
The knowledge center contains troubleshooting and how-to articles, FAQs,
technical notes, and more. Visit the Fortinet Knowledge Center at
http://kc.forticare.com.
Comments on Fortinet technical documentation
Please send information about any errors or omissions in this document, or any
Fortinet technical documentation, to techdo[email protected].
Customer service and technical support
Fortinet Technical Support provides services designed to make sure that your
Fortinet systems install quickly, configure easily, and operate reliably in your
network.
Please visit the Fortinet Technical Support web site at http://support.fortinet.com
to learn about the technical support services that Fortinet provides.

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
14 01-30005-0343-20071113
Customer service and technical support Introduction

Installing the FortiGate unit Environmental specifications
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 15
Installing the FortiGate unit
This section provides information on installing and setting up the FortiGate unit on
your network. This section includes the following topics:
•Environmental specifications
•Powering on the FortiGate unit
•Powering off the FortiGate unit
•Connecting the FortiGate unit
•Connecting to the web-based manager
•Connecting to the CLI
•LCD front control buttons
Environmental specifications
• Operating temperature: 41 to 95°F (5 to 35°C)
If you install the FortiGate unit in a closed or multi-unit rack assembly, the
operating ambient temperature of the rack environment may be greater than
room ambient temperature. Therefore, make sure to install the equipment in
an environment compatible with the manufacturer's maximum rated ambient
temperature.
• Storage temperature: -4 to 176°F (-20 to 80°C)
• Humidity: 10 to 90% non-condensing
• Air flow - For rack installation, make sure that the amount of air flow required
for safe operation of the equipment is not compromised.
• For free-standing installation, make sure that the appliance has at least 1.5 in.
(3.75 cm) of clearance on each side to allow for adequate air flow and cooling.
Installing AMC fillers on the FortiGate-3810A
The FortiGate-3810A includes four AMC fillers modules. Install the fillers on any
AMC slots you do not have an AMC card installed.
!
Caution: Ensure the FortiGate unit is connected and properly grounded to a lightning and
surge protector to a terminal within the building. The equipment is to be connected only
without routing to the outside plant.
Do not connect or disconnect cables during lightning activity to avoid damage to the
FortiGate unit or personal injury.
Note: AMC modules are not hot swappable. Always ensure you properly shut down the
FortiGate unit before installing or removing a module.
Note: The FortiGate-3810A supports only one FortiGate-ASM-S08 hard disk module.

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
16 01-30005-0343-20071113
Powering on the FortiGate unit Installing the FortiGate unit
To install the filler module
1Pull the latch on the filler module to the extended position.
2Insert the module by applying moderate force to the front faceplate to slide the
module into the slot.
The filler module should glide smoothly into the chassis. If you encounter any
resistance while sliding the module in, the module could be aligned incorrectly.
Pull the module back out and try inserting it again.
3Press the hot swap latch to lock in the module.
Rack mount instructions
Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly,
the operating ambient temperature of the rack environment may be greater than
room ambient. Therefore, consideration should be given to installing the
equipment in an environment compatible with the maximum ambient temperature
(Tma) specified by the manufacturer.
Reduced Air Flow - Installation of the equipment in a rack should be such that the
amount of air flow required for safe operation of the equipment is not
compromised.
Mechanical Loading - Mounting of the equipment in the rack should be such that
a hazardous condition is not achieved due to uneven mechanical loading.
Circuit Overloading - Consideration should be given to the connection of the
equipment to the supply circuit and the effect that overloading of the circuits might
have on overcurrent protection and supply wiring. Appropriate consideration of
equipment nameplate ratings should be used when addressing this concern.
Reliable Earthing - Reliable earthing of rack-mounted equipment should be
maintained.
Particular attention should be given to supply connections other than direct
connections to the branch circuit (e.g. use of power strips).
If required to fit into a rack unit, remove the rubber feet from the bottom of the
FortiGate unit.
Powering on the FortiGate unit
The FortiGate unit does not have an on/off switch.
To power on the FortiGate unit
1Connect the power cables to the power connections on the back of the FortiGate
unit.
2Connect the power cables to power outlets.
Each power cable should be connected to a different power source. If one power
source fails, the other may still be operative.
After a few seconds, SYSTEM STARTING appears on the LCD. The main menu
setting appears on the LCD when the system is running.

Installing the FortiGate unit Powering on the FortiGate unit
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 17
The FortiGate unit starts and the Power and Status LEDs light up. The Status
LEDs flash while the FortiGate unit starts up, and remain lit when the system is
running.
Table 1: LED indicators for the FortiGate-3600A and FortiGate-3810A
Table 2: LED indicators for the FortiGate-3016A
Note: If only one power supply is connected, an audible alarm sounds to indicate a failed
power supply. Press the red alarm cancel button on the rear panel next to the power supply
to stop the alarm.
LED State Description
Power Green The FortiGate unit is powered on.
Off The FortiGate unit is powered off.
Staus Green The FortiGate unit is on and running normally.
Flashing The FortiGate unit is starting up
Hi-Temp
FortiGate-3600A
Green The internal temperature has reached abnormally high
temperatures.
Off Normal internal temperature range.
Interface LEDs Green The correct cable is in use and the connected
equipment has power.
Ports 1 to 8 connect at 10/100/1000 Mb.
Ports 9 and 10 connect at up to 1000 Mb.
Flashing
Green
Network activity at this interface.
Off No link established.
LED State Description
Power Green The FortiGate unit is powered on.
Off The FortiGate unit is powered off.
Staus Green The FortiGate unit is on and running normally.
Flashing The FortiGate unit is powered off.
Port 1 and 2
(Right)
Green The correct cable is in use and the connected
equipment has power.
Flashing
Green
Network activity at this interface.
Port 1 and 2
(Left)
Green Connection at 1000 Mb.
Amber Connection at 100 Mb
Off Connection at 10 Mb.
Port 3 to 18 Green The correct cable is in use and the connected
equipment has power.
Flashing
Green
Network activity at this interface.

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
18 01-30005-0343-20071113
Powering off the FortiGate unit Installing the FortiGate unit
Powering off the FortiGate unit
Always shut down the FortiGate operating system properly before turning off the
power switch to avoid potential hardware problems.
To power off the FortiGate unit
1From the web-based manager, go to System > Status.
2In the Unit Operation display, select Shutdown, or from the CLI enter:
execute shutdown
3Disconnect the power cables from the power supply.
Connecting the FortiGate unit
There are three methods of connecting and configuring the basic FortiGate
settings:
• the web-based manager
• the front control buttons and LCD
• the command line interface (CLI)
Web-based manager
You can configure and manage the FortiGate unit using HTTP or a secure HTTPS
connection from any computer running Microsoft Internet Explorer 6.0 or recent
browser. The web-based manager supports multiple languages.
You can use the web-based manager to configure most FortiGate settings, and
monitor the status of the FortiGate unit.
Front control buttons and LCD
You can use the front control buttons and LCD on the FortiGate unit to configure
IP addresses, default gateways and switch operating modes. The LCD shows you
what mode you are in without having to go to the command line interface or the
web-based manager. For more information on the front control buttons and LCD,
see “LCD front control buttons” on page 21.
Command line interface
You can access the FortiGate command line interface (CLI) by connecting a
management computer serial port to the FortiGate serial console connector. You
can also use Telnet or an SSH connection to connect to the CLI from any network
that is connected to the FortiGate unit, including the Internet.

Installing the FortiGate unit Connecting to the web-based manager
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
01-30005-0343-20071113 19
Connecting to the web-based manager
Configuration changes made with the web-based manager are effective
immediately, without resetting the firewall or interrupting service.
To connect to the web-based manager, you require:
• a computer with an Ethernet connection
• Microsoft Internet Explorer version 6.0 or higher or any recent version of the
most popular web browser
• a crossover Ethernet cable or an Ethernet hub and two Ethernet cables
To connect to the web-based manager
1Set the IP address of the computer with an Ethernet connection to the static IP
address 192.168.1.2 with a netmask of 255.255.255.0.
2Connect Port 1, of the FortiGate unit to your network.
3Connect the interface of the computer to the same network.
4Start Internet Explorer and browse to the address https://192.168.1.99 (remember
to include the “s” in https://)
To support a secure HTTPS authentication method, the FortiGate unit ships with a
self-signed security certificate, and is offered to remote clients whenever they
initiate a HTTPS connection to the FortiGate unit. When you connect, the
FortiGate unit displays two security warnings in the browser.
The first warning prompts you to accept and optionally install the FortiGate unit’s
self-signed security certificate. If you do not accept the certificate, the FortiGate
unit refuses the connection. If you accept the certificate, the FortiGate login page
appears. The credentials entered are encrypted before they are sent to the
FortiGate unit. If you choose to accept the certificate permanently, the warning is
not displayed again.
Just before the FortiGate login page is displayed, a second warning informs you
that the FortiGate certificate distinguished name differs from the original request.
This warning occurs because the FortiGate unit redirects the connection. This is
an informational message. Select OK to continue logging in.
Note: Before starting Internet Explorer, (or any recent version of the most popular web
browser), ping to your FortiGate unit to see if the connection between the computer and the
FortiGate unit is working properly.

FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
20 01-30005-0343-20071113
Connecting to the CLI Installing the FortiGate unit
Figure 1: FortiGate login
5Type admin in the Name field and select Login.
System Dashboard
After logging into the web-based manager, the web browser displays the system
dashboard. The dashboard provides you with all system status information in one
location. For details on the information displayed on the dashboard, see the
FortiGate Administration Guide.
Connecting to the CLI
As an alternative to the web-based manager, you can install and configure the
FortiGate unit using the CLI. Configuration changes made with the CLI are
effective immediately, without resetting the firewall or interrupting service.
To connect to the FortiGate CLI you require:
• a computer with an available communications port
• the RJ-45 to DB9 cable included in your FortiGate package
• terminal emulation software such as HyperTerminal for Microsoft Windows
To connect to the CLI
1Connect the null-modem cable to the communications port of your computer and
to the FortiGate console port.
2Start HyperTerminal, enter a name for the connection, and select OK.
3Configure HyperTerminal to connect directly to the communications port on your
computer and select OK.
Note: The following procedure uses Microsoft Windows HyperTerminal software. You can
apply these steps to any terminal emulation program.