Fortinet FortiGate FortiGate-1000 User manual

www.fortinet.com
FortiGate-200,
FortiGate-300,
FortiGate-400,
FortiGate-500, and
FortiGate-1000
FortiOS 3.0 MR4
INSTALL GUIDE

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and
FortiGate-1000
FortiOS 3.0 MR4
15 February 2007
01-30004-0267-20070215
© Copyright 2007 Fortinet, Inc. All rights reserved. No part of this
publication including text, examples, diagrams or illustrations may be
reproduced, transmitted, or translated in any form or by any means,
electronic, mechanical, manual, optical or otherwise, for any purpose,
without prior written permission of Fortinet, Inc.
Trademarks
Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC,
FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat
Management System, FortiGuard, FortiGuard-Antispam, FortiGuard-
Antivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer,
FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter,
FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of
Fortinet, Inc. in the United States and/or other countries. The names of
actual companies and products mentioned herein may be the trademarks
of their respective owners.
Regulatory compliance
FCC Class A Part 15 CSA/CUS
!
Caution: Risk of Explosion if Battery is replaced by an Incorrect Type.
Dispose of Used Batteries According to the Instructions.

Contents
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 3
Contents
Contents.............................................................................................. 3
Introduction ........................................................................................ 7
About the FortiGate units ................................................................................. 7
FortiGate-200 ................................................................................................ 7
FortiGate-300 ................................................................................................ 8
FortiGate-400 ................................................................................................ 8
FortiGate-500 ................................................................................................ 8
FortiGate-1000 .............................................................................................. 8
Register your FortiGate unit .......................................................................... 8
Fortinet Family Products .................................................................................. 9
FortiGuard Subscription Services ................................................................. 9
FortiClient...................................................................................................... 9
FortiMail ........................................................................................................ 9
FortiAnalyzer ............................................................................................... 10
FortiReporter ............................................................................................... 10
FortiBridge................................................................................................... 10
FortiManager............................................................................................... 10
About this document....................................................................................... 10
Document conventions................................................................................ 11
Typographic conventions...................................................................... 11
Fortinet documentation .................................................................................. 11
Fortinet Tools and Documentation CD........................................................ 13
Fortinet Knowledge Center ........................................................................ 13
Comments on Fortinet technical documentation ........................................ 13
Customer service and technical support ...................................................... 13
Installing the FortiGate unit ............................................................ 15
Package Contents............................................................................................ 15
FortiGate-200 .............................................................................................. 15
Mounting ............................................................................................... 16
FortiGate-300 .............................................................................................. 16
Mounting ............................................................................................... 17
FortiGate-400 .............................................................................................. 17
Mounting ............................................................................................... 18
FortiGate-500 .............................................................................................. 18
Mounting ............................................................................................... 18
FortiGate-1000 ............................................................................................ 19
Mounting ............................................................................................... 19
Air Flow ....................................................................................................... 20
Mechanical loading ..................................................................................... 20

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
401-30004-0267-20070215
Contents
Powering on the FortiGate unit ...................................................................... 20
Powering off the FortiGate unit ................................................................... 21
Connecting the FortiGate unit........................................................................ 22
Web-based manager .................................................................................. 22
Front control buttons and LCD.................................................................... 22
Command line interface .............................................................................. 22
Connecting to the web-based manager ...................................................... 22
System Dashboard ............................................................................... 23
Command line interface .............................................................................. 23
Connecting to the CLI ................................................................................. 23
LCD front control buttons............................................................................... 24
Using the front control buttons and LCD..................................................... 25
Factory defaults ............................................................................... 27
Factory default NAT/Route mode network configuration ............................ 27
Factory default Transparent mode network configuration........................... 28
Factory default firewall configuration .......................................................... 28
Factory default protection profiles............................................................... 29
Restoring the default settings........................................................................ 30
Restoring the default settings using the web-based manager .................... 30
Restoring the default settings using the CLI ............................................... 30
Configuring the FortiGate unit........................................................ 31
Planning the FortiGate configuration ............................................................ 31
NAT/Route mode ........................................................................................ 31
NAT/Route mode with multiple external network connections .................... 32
Transparent mode....................................................................................... 33
Preventing the public interface from responding to ping requests ........... 34
NAT/Route mode installation ......................................................................... 35
Preparing to configure the FortiGate unit in NAT/Route mode ................... 35
DHCP or PPPoE configuration ................................................................... 36
Using the web-based manager ................................................................... 36
Adding a default route .......................................................................... 37
Verifying the web-based manager configuration .................................. 37
Verify the connection ............................................................................ 37
Using the front control buttons and LCD..................................................... 38
Verifying the front control buttons and LCD configuration .................... 39
Verify the connection ............................................................................ 39
Using the command line interface............................................................... 39
Configuring the FortiGate unit to operate in NAT/Route mode............. 39
Adding a default route .......................................................................... 41
Connecting the FortiGate unit to the network(s) ......................................... 41
Configuring the networks ............................................................................ 42

Contents
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 5
Transparent mode installation ....................................................................... 43
Preparing to configure Transparent mode .................................................. 43
Using the web-based manager ................................................................... 43
Using the front control buttons and LCD ..................................................... 44
Verifying the front control buttons and LCD configuration .................... 44
Verify the connection ............................................................................ 45
Using the command line interface............................................................... 45
Reconnecting to the web-based manager ............................................ 46
Connecting the FortiGate unit to your network............................................ 46
Verify the connection ............................................................................ 46
Next steps......................................................................................................... 47
Set the date and time .................................................................................. 47
Updating antivirus and IPS signatures ........................................................ 48
Updating antivirus and IPS signatures from the web-based manager.. 48
Updating the IPS signatures from the CLI ............................................ 49
Scheduling antivirus and IPS updates .................................................. 49
Adding an override server..................................................................... 50
FortiGate Firmware .......................................................................... 53
Upgrading to a new firmware version............................................................ 53
Upgrading the firmware using the web-based manager ............................. 53
Upgrading the firmware using the CLI......................................................... 54
Reverting to a previous firmware version ..................................................... 55
Reverting to a previous firmware version using the web-based manager .. 55
Reverting to a previous firmware version using the CLI.............................. 56
Installing firmware images from a system reboot using the CLI ................ 57
Restoring the previous configuration........................................................... 60
Testing a new firmware image before installing it........................................ 60
Index.................................................................................................. 63

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
601-30004-0267-20070215
Contents

Introduction About the FortiGate units
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 7
Introduction
Welcome and thank you for selecting Fortinet products for your real-time network
protection.
The FortiGate™ Unified Threat Management System improves network security,
reduces network misuse and abuse, and helps you use communications
resources more efficiently without compromising the performance of your
network. FortiGate Unified Threat Management Systems are ICSA-certified for
firewall, IPSec, and antivirus services.
The FortiGate Unified Threat Management System is a dedicated, easily
managed security device that delivers a full suite of capabilities, which include:
• application-level services such as virus protection and content filtering
• network-level services such as firewall, intrusion detection, VPN and traffic
shaping
The FortiGate Unified Threat Management System uses Fortinet’s Dynamic
Threat Prevention System (DTPS™) technology, which leverages breakthroughs
in chip design, networking, security and content analysis. The unique ASIC-based
architecture analyzes content and behavior in real-time, enabling key applications
to be deployed right at the network edge where they are most effective at
protecting your networks.
About the FortiGate units
The FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500, and
FortiGate-1000 appliances deliver the same enterprise-class, network-based
antivirus, content filtering, firewall, VPN, and network-based intrusion
detection/prevention featured in all FortiGate models. The FortiGate-200 is
designed for SOHO and SMB businesses while the FortiGate-300, FortiGate-400,
FortiGate-500, and FortiGate-1000 are designed for larger businesses.
FortiGate-200
The FortiGate-200 unit is designed for
small businesses, home offices or even
branch office applications. The
FortiGate-200 unit is an easy-to-deploy
and easy-to-administer solution. The
FortiGate-200 also supports high availabilty (HA).
DMZ
CONSOLE INTERNAL EXTERNAL
INTERNALPOWER STATUS EXTERNAL DMZ

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
801-30004-0267-20070215
About the FortiGate units Introduction
FortiGate-300
The FortiGate-300 unit is designed for
larger enterprises. The FortiGate-300
unit features high availability (HA),
which includes automatic failover with
no session loss. This feature makes the
FortiGate-300 the choice for mission-critical applications.
FortiGate-400
The FortiGate-400 unit is designed for
larger enterprises. The FortiGate-400
unit is capable of throughput up to
500Mbps and supports high availability
(HA), which includes automatic failover
with no session loss.
FortiGate-500
The FortiGate-500 unit is designed for
larger enterprises. The flexibility,
reliability, and easy management
makes the FortiGate-500 a natural
choice for managed service offerings.
The FortiGate-500 supports high availability (HA).
FortiGate-1000
The FortiGate-1000
unit is designed for
larger enterprises. The
FortiGate-1000 meets
the needs of the most
demanding applications, using multiple CPUs and FortiASIC chips to deliver a
throughput of 2Gps. The FortiGate-1000 unit includes support for redundant
power supplies to minimize single-port failures, load-balanced operation, and
redundant failover with no interruption in service.
Register your FortiGate unit
Register your FortiGate unit by visiting http://support.fortinet.com and select
Product Registration.
To register, enter your contact information and the serial numbers of the FortiGate
units that you or your organization have purchased. You can register multiple
FortiGate units in a single session without re-entering your contact information.
By registering your FortiGate unit, you will receive updates to threat detection and
prevention databases (Antivirus, Intrusion Detection, etc.) and will also ensure
your access to technical support.
Esc Enter
4 / HA3
CONSOLE 12
Esc Enter
Esc Enter
HADMZ
INTERNAL EXTERNAL 1 2 3 4 5 6 7 8
Esc Enter INTERNAL EXTERNAL
1 2 3 4 / HA

Introduction Fortinet Family Products
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 9
Fortinet Family Products
Fortinet offers a family of products that includes both software and hardware
appliances, for a complete network security solution including mail, logging,
reporting, network management, and security along with FortiGate Unified Threat
Management Systems. For more information on the Fortinet product family, go to
www.fortinet.com/products.
FortiGuard Subscription Services
FortiGuard Subscription Services are security services created, updated and
managed by a global team of Fortinet security professionals. They ensure the
latest attacks are detected and blocked before harming your corporate resources
or infecting your end-user computing devices. These services are created with the
latest security technology and designed to operate with the lowest possible
operational costs.
FortiGuard Subscription Services includes:
• FortiGuard Antivirus Service
• FortiGuard Intrusion Prevention subscription services (IPS)
• FortiGuard Web Filtering
• FortiGuard Antispam Service
• FortiGuard Premier Service
An online virus scanner and virus encyclopedia is also available for your
reference.
FortiClient
FortiClient™ Host Security software provides a secure computing environment for
both desktop and laptop users running the most popular Microsoft Windows
operating systems. FortiClient offers many features including:
• creating VPN connections to remote networks
• configuring real-time protection against viruses
• guarding against modification of the Windows registry
• virus scanning
FortiClient also offers a silent installation feature, enabling an administrator to
efficiently distribute FortiClient to several users’ computers with preconfigured
settings.
FortiMail
FortiMail™ Secure Messaging Platform provides powerful, flexible heuristic
scanning and reporting capabilities to incoming and outgoing email traffic. The
FortiMail unit has reliable, high performance features for detecting and blocking
malicious attachments such as Distributed Checksum Clearinghouse (DCC)
scanning and Bayesian scanning. Built on Fortinet’s award winning FortiOS and
FortiASIC technology, FortiMail antivirus technology extends full content
inspection capabilities to detect the most advanced email threats.

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
10 01-30004-0267-20070215
About this document Introduction
FortiAnalyzer
FortiAnalyzer™ provides network administrators with the information they need to
enable the best protection and security for their networks against attacks and
vulnerabilities. The FortiAnalyzer unit features include:
• collects logs from FortiGate devices and syslog devices
• creates hundreds of reports using collected log data
• scans and reports vulnerabilities
• stores files quarantined from a FortiGate unit
The FortiAnalyzer unit can also be configured as a network analyzer to capture
real-time traffic on areas of your network where firewalls are not employed. You
can also use the unit as a storage device where users can access and share files,
including the reports and logs that are saved on the FortiAnalyzer hard disk.
FortiReporter
FortiReporter™ Security Analyzer software generates easy-to-understand reports
and can collect logs from any FortiGate unit, as well as over 30 network and
security devices from third-party vendors. FortiReporter reveals network abuse,
manages bandwidth requirements, monitors web usage, and ensures employees
are using the office network appropriately. FortiReporter allows IT administrators
to identify and respond to attacks, including identifying ways to proactively secure
their networks before security threats arise.
FortiBridge
FortiBridge™ products are designed to provide enterprise organizations with
continuous network traffic flow in the event of a power outage or a FortiGate
system failure. The FortiBridge unit bypasses the FortiGate unit to make sure that
the network can continue processing traffic. FortiBridge products are easy to use
and deploy, and you can customize the actions a FortiBridge unit takes when a
power failure or a FortiGate system failure occurs.
FortiManager
The FortiManager™ system is designed to meet the needs of large enterprises
(including managed security service providers) responsible for establishing and
maintaining security policies across many dispersed FortiGate installations. With
this system, you can configure multiple FortiGate devices and monitor their status.
You can also view real-time and historical logs for the FortiGate devices, including
updating firmware images of managed FortiGate devices. The FortiManager
System emphasizes ease of use, including easy integration with third party
systems.
About this document
This document explains how to install and configure your FortiGate unit onto your
network. This document also includes how to install and upgrade new firmware
versions on your FortiGate unit.
This document contains the following chapters:

Introduction Fortinet documentation
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 11
•Installing the FortiGate unit – Describes setting up and powering on a
FortiGate unit.
•Factory defaults – Provides the factory default settings for the FortiGate unit.
•Configuring the FortiGate unit – Provides an overview of the operating modes
of the FortiGate unit and how to integrate the FortiGate unit into your network.
•FortiGate Firmware – Describes how to install, update, restore and test
firmware for the FortiGate device.
Document conventions
The following document conventions are used in this guide:
• In the examples, private IP addresses are used for both private and public IP
addresses.
• Notes and Cautions are used to provide important information:
Typographic conventions
FortiGate documentation uses the following typographical conventions:
Fortinet documentation
The most up-to-date publications and previous releases of Fortinet product
documentation are available from the Fortinet Technical Documentation web site
at http://docs.forticare.com.
The following FortiGate product documentation is available:
Note: Highlights useful additional information.
!
Caution: Warns you about commands or procedures that could have unexpected or
undesirable results including loss of data or damage to equipment.
Convention Example
Keyboard input In the Gateway Name field, type a name for the remote VPN
peer or client (for example, Central_Office_1).
Code examples config sys global
set ips-open enable
end
CLI command syntax config firewall policy
edit id_integer
set http_retry_count <retry_integer>
set natip <address_ipv4mask>
end
Document names FortiGate Administration Guide
Menu commands Go to VPN > IPSEC > Phase 1 and select Create New.
Program output Welcome!
Variables <address_ipv4>

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
12 01-30004-0267-20070215
Fortinet documentation Introduction
• FortiGate QuickStart Guide
Provides basic information about connecting and installing a FortiGate unit.
• FortiGate Install Guide
Describes how to install a FortiGate unit. Includes a hardware reference,
default configuration information, installation procedures, connection
procedures, and basic configuration procedures. Choose the guide for your
product model number.
• FortiGate Administration Guide
Provides basic information about how to configure a FortiGate unit, including
how to define FortiGate protection profiles and firewall policies; how to apply
intrusion prevention, antivirus protection, web content filtering, and spam
filtering; and how to configure a VPN.
• FortiGate online help
Provides a context-sensitive and searchable version of the Administration
Guide in HTML format. You can access online help from the web-based
manager as you work.
• FortiGate CLI Reference
Describes how to use the FortiGate CLI and contains a reference to all
FortiGate CLI commands.
•FortiGate Log Message Reference
Available exclusively from the Fortinet Knowledge Center, the FortiGate Log
Message Reference describes the structure of FortiGate log messages and
provides information about the log messages that are generated by FortiGate
units.
• FortiGate High Availability User Guide
Contains in-depth information about the FortiGate high availability feature and
the FortiGate clustering protocol.
• FortiGate IPS User Guide
Describes how to configure the FortiGate Intrusion Prevention System settings
and how the FortiGate IPS deals with some common attacks.
• FortiGate IPSec VPN User Guide
Provides step-by-step instructions for configuring IPSec VPNs using the web-
based manager.
• FortiGate SSL VPN User Guide
Compares FortiGate IPSec VPN and FortiGate SSL VPN technology, and
describes how to configure web-only mode and tunnel-mode SSL VPN access
for remote users through the web-based manager.
• FortiGate PPTP VPN User Guide
Explains how to configure a PPTP VPN using the web-based manager.
• FortiGate Certificate Management User Guide
Contains procedures for managing digital certificates including generating
certificate requests, installing signed certificates, importing CA root certificates
and certificate revocation lists, and backing up and restoring installed
certificates and private keys.
• FortiGate VLANs and VDOMs User Guide
Describes how to configure VLANs and VDOMS in both NAT/Route and
Transparent mode. Includes detailed examples.

Introduction Customer service and technical support
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 13
Fortinet Tools and Documentation CD
All Fortinet documentation is available from the Fortinet Tools and Documentation
CD shipped with your Fortinet product. The documents on this CD are current at
shipping time. For up-to-date versions of Fortinet documentation see the Fortinet
Technical Documentation web site at http://docs.forticare.com.
Fortinet Knowledge Center
Additional Fortinet technical documentation is available from the Fortinet
Knowledge Center. The knowledge center contains troubleshooting and how-to
articles, FAQs, technical notes, and more. Visit the Fortinet Knowledge Center at
http://kc.forticare.com.
Comments on Fortinet technical documentation
Please send information about any errors or omissions in this document, or any
Fortinet technical documentation, to [e-mail].
Customer service and technical support
Fortinet Technical Support provides services designed to make sure that your
Fortinet systems install quickly, configure easily, and operate reliably in your
network.
Please visit the Fortinet Technical Support web site at http://support.fortinet.com
to learn about the technical support services that Fortinet provides.

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
14 01-30004-0267-20070215
Customer service and technical support Introduction

Installing the FortiGate unit Package Contents
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 15
Installing the FortiGate unit
This section provides information on installing and setting up the FortiGate unit on
your network. This section includes the following topics:
•Package Contents
•Air Flow
•Mechanical loading
•Powering on the FortiGate unit
•Connecting the FortiGate unit
Package Contents
Review the contents of your FortiGate package to ensure all components were
included.
FortiGate-200
The FortiGate-200 package contains the following items:
• FortiGate-200 Unified Threat Management System
• one orange crossover Ethernet cable (Fortinet part number CC300248)
• one grey straight-through Ethernet cable (Fortinet part number CC300249)
• one null-modem cable (Fortinet part number CC300247)
• one power cable
• two 19-inch rack mount brackets
• FortiGate-200 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 1: FortiGate-200 package contents
Front
Back
DMZ
CONSOLE INTERNAL EXTERNAL
INTERNALPOWER STATUS EXTERNAL DMZ
DMZ
Interface
External
Interface
Internal
Interface
Status
LED
Internal, External,
DMZ Interface LEDs
Power
LED
RS-232 Serial
Connection
Removable
Hard Drive
Power
Connection
Power
Switch
Power Cable
Rack-Mount Brackets
Null-Modem Cable
(RS-232)
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Documentation
FortiGate-200
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
QuickStart Guide
DMZ
CONSOLE INTERNAL EXTERNAL
INTERNALPOWER STATUS EXTERNAL DMZ

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
16 01-30004-0267-20070215
Package Contents Installing the FortiGate unit
Mounting
The FortiGate-200 unit can be installed on any stable surface. The FortiGate-200
can also be mounted on a standard 19-inch rack. It requires 1 U of vertical space
in the rack.
Table 1: Technical Specifications
FortiGate-300
The FortiGate-300 package contains the following items:
• FortiGate-300 Unified Threat Management System
• one orange crossover Ethernet cable (Fortinet part number CC300248)
• one gray straight-through Ethernet cable (Fortinet part number CC300249)
• one null-modem cable (Fortinet part number CC300247)
• one power cable
• two 19-inch rack mount brackets
• FortiGate-300 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 2: FortiGate-300 package contents
Dimensions 16.8 x 10 x 1.75 in. (42.7 x 25.4 x 4.5 cm)
Weight 7.3 lb. (3.3 kg)
Power
Requirements
Power dissapation: 50W (max.)
AC input voltage: 100 to 240VAC
AC input current: 1.6A
Frequency: 50 to 60Hz
Environmental
Specifications
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing
Front
Back
Esc Enter
LCD Control
Buttons
DMZ/HA
Interface
External
Interface
Internal
Interface
Power
Light
RS-232 Serial
Connection
Removable
Hard Drive
Power
Connection
Power
Switch
Power Cable
Rack-Mount Brackets
Null-Modem Cable
(RS-232)
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
FortiGate-300
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
QuickStart Guide
Esc Enter
Documentation

Installing the FortiGate unit Package Contents
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 17
Mounting
The FortiGate-300 unit can be installed on any stable surface. The FortiGate-300
can also be mounted on a standard 19-inch rack. It requires 1U of vertical space
in the rack.
Table 2: Technical specifications
FortiGate-400
The FortiGate-400 package contains the following items:
• FortiGate-400 Antivirus Firewall
• one orange crossover Ethernet cable (Fortinet part number CC300248)
• one gray straight-through Ethernet cable (Fortinet part number CC300249)
• one null modem cable (Fortinet part number CC300247)
• one power cable
• two 19-inch rack mount brackets
• FortiGate-400 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 3: FortiGate-400 package contents
Dimensions 16.75 x 11 x 1.75 in. (42.7 x 27.8 x 4.5 cm)
Weight 7.3lb (3.3kg)
Power
requirements
Power dissipation: 100W (max.)
AC input voltage: 100 to 250 VAC
AC input current: 1.5A
Frequency: 47 to 63Hz
Environmental
Specifications
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing
Removable
Hard Drive
Power
Connection
Power
Switch
Front
Back
4 / HA3
CONSOLE 12
Esc Enter
LCD Control
Buttons
Interface
1, 2, 3, 4/HA
Power
Light
RS-232 Serial
Connection Power Cable
Rack-Mount Brackets
Null-Modem Cable
(RS-232)
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Documentation
FortiGate-400
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
QuickStart Guide
4/HA3
CONSOLE 12
Esc Enter

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
18 01-30004-0267-20070215
Package Contents Installing the FortiGate unit
Mounting
The FortiGate-400 unit can be installed on any stable surface. The FortiGate-400
unit can also be mounted on a standard 19-inch rack. It requires 1 U of vertical
space in the rack.
Table 3: Technical specifications
FortiGate-500
The FortiGate-500 package contains the following items:
• FortiGate-500 Unified Threat Management System
• one orange crossover Ethernet cable (Fortinet part number CC300248)
• one gray straight-through Ethernet cable (Fortinet part number CC300249)
• one null-modem cable (Fortinet part number CC300247)
• one power cable
• two 19-inch rack mount brackets
• FortiGate-500 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 4: FortiGate-500 package contents
Mounting
The FortiGate-500 unit can be installed on any stable surface. The FortiGate-500
unit can also be mounted on a standard 19-inch rack. It requires 1 U of vertical
space in the rack.
Dimensions 16.75 x 12 x 1.75 in. (42.7 x 30.5 x 4.5 cm)
Weight 11 lb. (5 kg)
Power
requirements
Power dissipation: 180W (max.)
AC input voltage: 100 to 240VAC
AC input current: 4A
Frequency: 47 to 63Hz
Environmental
Specifications
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing
Front
Back
Esc Enter
HADMZ
INTERNAL EXTERNAL 1 2 3 4 5 6 7 8
1 to 8
Interface
LCD Control
Buttons
Internal,External,DMZ
HA Interface
Power
Light
RS-232
Serial
Connection
Removable
Hard Drive
Power
Connection
Power
Switch
Power Cable
Rack-Mount Brackets
Null-Modem Cable
(RS-232)
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
FortiGate-500
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
QuickStart Guide
Documentation
Esc Enter
HADMZ
INTERNAL EXTERNAL 1 2 3 4 5 6 7 8

Installing the FortiGate unit Package Contents
FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215 19
Table 4: Technical specifications
FortiGate-1000
The FortiGate-1000 package contains the following items:
• FortiGate-1000 Unified Threat Management System
• two orange crossover Ethernet cables (Fortinet part number CC300248)
• two gray straight-through Ethernet cables (Fortinet part number CC300249)
• one null-modem cable (Fortinet part number CC300247)
• one power cable
• two 19-inch rack mount brackets
• FortiGate-1000 QuickStart Guide
• Fortinet Tools and Documentation CD
Figure 5: FortiGate-1000 package contents
Mounting
The FortiGate-1000 unit can be installed on any stable surface. The
FortiGate-1000 unit can also be mounted on a standard 19-inch rack. It requires
2 U of vertical space in the rack.
Dimensions 16.75 x 12 x 1.75 in. (42.7 x 30.5 x 4.5 cm)
Weight 11 lb. (5 kg)
Power
requirements
Power dissipation: 180W (max.)
AC input voltage: 100 to 240VAC
AC input current: 4A
Frequency: 47 to 63Hz
Environmental
Specifications
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing
Back View
Front View
RS-232 Serial
Connection
Power
Connection
Power
Switch
Esc Enter
LCD Control
Buttons
Internal
Interface
INTERNAL EXTERNAL
1 2 3 4 / HA
1, 2, 3, 4/HA
Interface
External
Interface
Power
Light Power Cable
Rack-Mount Brackets
Null-Modem Cable
(RS-232)
Ethernet Cables:
Orange - Crossover x 2
Grey - Straight-through x 2
FortiGate-1000
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
QuickStart Guide
Documentation
Esc Enter
INTERNAL EXTERNAL
1234/HA

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
20 01-30004-0267-20070215
Powering on the FortiGate unit Installing the FortiGate unit
Table 5: Technical specifications
Air Flow
• For rack installation, make sure the amount of air flow required for safe
operation of the FortiGate unit is not compromised
• For free-standing installation, make sure the FortiGate unit has at least 1.5 in.
(3.75 cm) of clearance on each side to allow for adequate air flow and cooling.
• If you install the FortiGate unit in a closed or multi-unit rack assembly, the
operating ambient temperature of the rack environment may be greater than
room ambient. Make sure the operating ambient temperature does not exceed
the manufacturer’s maximum rated ambient temperature.
Mechanical loading
For rack installation, make sure the mechanical loading of the FortiGate unit is
evenly distributed to avoid a hazardous condition.
Powering on the FortiGate unit
The FortiGate unit has an on/off switch.
To power on the FortiGate unit
1Make sure the power switch on the back of the FortiGate unit is turned off.
2Connect the power cable to the power connection on the back of the FortiGate
unit.
3Connect the power cable to a power outlet.
4Turn on the power switch.
Dimensions 16.75 x 12 x 1.75 in. (42.7 x 30.5 x 4.5 cm)
Weight 17.5 lb. (8 kg)
Power
requirements
Power dissipation: 285W (max.)
AC input voltage: 100 to 240VAC
AC input current: 6A
Frequency: 50 to 60Hz
•The FortiGate-1000 unit may overload your supply circuit and impact
your overcurrent protection and supply wiring. Use appropriate
equipment nameplate ratings to address this concern.
•Make sure the FortiGate-1000 unit has reliable grounding. Fortinet
recommends direct connection to the branch circuit.
Environmental
specifications
Operating temperature: 32 to 104 F (0 to 40 C)
Storage temperature: -13 to 158 F (-25 to 70 C)
Humidity: 5 to 95% non-condensing