Fortinet FortiManager-100 User manual

© Copyright 2007 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trade-
marks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
24 January 2007
Checking the Package Contents
About the FortiManager System
Installing and Powering Up
POWER
STATUS
4321
LINK / ACT
10/100
POWER
STATUS
4321
LINK / ACT
10/100
Back
Internal Interface,
switch connectors
1,2,3,4
Power
Connection
USB
(future)
1234
DC+12V
USB
RS-232 Serial
Connection
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Documentation
Copyright 2006 Fortinet Incorporated.All rights reserved.
Trademarks
Products mentioned in thisdocument are trademarks.
Null-Modem Cable
(RS-232)
Front
Power Cable Power Supply
Power LED
Status LED Interface
status LEDs
FortiManager-100
QuickStart Guide
POWER
STATUS
4321
LINK/ACT
10/100
Straight-through Ethernet cable connects
to hub or switch on the network.
Power cable connects
to power supply.
1234
DC+12V
USB
Optional null modem cable connects to
serial port on management computer.
Connector Type Speed Protocol Description
Port 1 RJ-45 10/100 Base-T Ethernet Connection to the network
Ports 2,3,4 RJ-45 10/100 Base-T Ethernet For future use.
CONSOLE DB-9 9600 bps RS-232 serial Optional connection to the management computer.
Provides access to the command line interface (CLI).
Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
Connect the network cable to interface 1.
•
•
Connect the FortiManager System to a power outlet and to the internal and external networks.
FortiManager 100
02-30002-0356-20070124
FortiManager Server LED Indicators
LED State Description
Power
Green The FortiManager Server unit is powered on.
Off The FortiManager Server unit is powered off.
All Ports
Amber The correct cable is in use and the connected equip-
ment has power.
Flashing Network activity at this interface.
Green The interface is connected at 100 Mbps.
Off No link established.
To power up the FortiManager Server, connect the power cable to the power outlet.
The FortiManager System is an integrated management and monitoring tool that consists of
one or more FortiManager Servers and managed FortiGate and FortiAnalyzer devices.
The FortiManager Server manages communication between FortiGate devices, and a
FortiAnalyzer device. The FortiManager Server stores and manages all FortiGate device
congurations. It can also act as an on-site FDN server for the FortiGate devices to down-
load virus and attack signatures, and to use the web ltering and antispam service. The
FortiManager Server can also connect to a FortiAnalyzer unit for managing and monitoring
logs and reports for all managed FortiGate devices.
Factory Defaults
Administrator Account User name: admin
Password: (none)
Port 1
IP: 192.168.1.99
Netmask: 255.255.255.0
Management Access: ping, https, http, ssh
Port 2
IP: 0.0.0.0
Netmask: 0.0.0.0
Management Access:
Port 3
IP: 0.0.0.0
Netmask: 0.0.0.0
Management Access:
Port 4
IP: 0.0.0.0
Netmask: 0.0.0.0
Management Access:

Completing the Configuration
Congratulations!
You have nished conguring the basic settings. You are now ready to add and manage
FortiGate devices. To explore the full range of conguration options, see the online help or
the Documentation CD-ROM.
Visit these links for more information and documentation for your Fortinet product.
Technical Documentation - http://docs.forticare.com
Fortinet Knowledge Center - http://kc.forticare.com
Fortinet Technical Support - http://support.fortinet.com
•
•
•
Configuring the FortiManager Server unit
Web-based Manager
Connect the FortiManager System interface to a management computer Ethernet in-
terface. Use a cross-over Ethernet cable to connect the devices directly. Use straight-
through Ethernet cables to connect the devices through a hub or switch.
Congure the management computer to be on the same subnet as the internal inter-
face of the FortiManager System. To do this, change the IP address of the manage-
ment computer to 192.168.1.2 and the netmask to 255.255.255.0.
To access the FortiManager System web-based manager, start Internet Explorer and
browse to https://192.168.1.99 (remember to include the “s” in https://).
Type admin in the Name eld and select Login (no password required).
Changing an Administrator Password
To change the administrator password
On the main toolbar, select System Settings.
Go to Administration > Administrators.
Select Edit.
Select Change Password.
Enter and conrm the password.
Select OK.
Conguring the IP Address and Netmask
To congure the IP address
On the main toolbar, select System Settings.
Go to Network > Interface.
Select Edit.
Enter the IP address and netmask.
Select OK.
Conguring the Default Gateway
To congure the default gateway
On the main toolbar, select System Settings.
Go to Network > Routing Table.
Enter the gateway IP address and netmask.
Enter the Destination IP and select the Interface.
Select OK.
Adding a FortiGate unit
Before you can manage a FortiGate unit, you must add it to the Device Manager. Adding an
existing operational device will not result in an immediate connection to the device. Device
connection only happens when you successfully resync the device.
To add a FortiGate device
Select Device > Add Device from the main toolbar.
Enter the following information and select Discover.
IP Address Enter the IP Address of the device to add.
Discover via Select a method used to nd the device. Currently, only CLI (via
SSH) is supported. By using the CLI (via SSH) Method, Device
Manager is able to record each device being added.
Admin user Select Default (admin) if the device uses the default “admin” as its
admin user.
Select Other and enter the admin user name if the device uses a
different user name other than the default “admin”.
Password Enter the password for the admin user.
The discovery process starts. When it completes, the Add New Device page appears.
Verify the information and add a Description if desired.
Select Add.
Congure the FortiGate unit to be managed through a FortiManager server. Communica-
tion between the FortiGate unit and the FortiManager server is via an IPSec VPN that is
invisibly pre-congured on the FortiGate unit.
To congure the FortiGate unit
Log in to the FortiGate unit.
Go to System > Admin > FortiManager.
Complete the conguration and select OK.
1.
2.
3.
4.
1.
2.
3.
4.
5.
6.
1.
2.
3.
4.
5.
1.
2.
3.
4.
5.
1.
2.
3.
4.
1.
2.
3.
Command Line Interface
Use the DB-9 serial cable to connect the FortiManager System Console port to the
management computer serial port.
Start a terminal emulation program (HyperTerminal) on the management computer. Use
these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
At the Login: prompt, type admin and press Enter twice (no password required).
Changing an Administrator Password
To change the administrator password, enter the following commands
config fmsystem admin user
edit admin
set password <password>
end
Conguring the IP Address and Netmask
To congure the IP address and netmask, enter the following commands
config fmsystem interface
edit port1
set ip <intf_ip>/<netmask_ip>
end
Conguring the Default Gateway
To congure the default gateway, enter the following commands
config fmsystem route
edit <route_number>
set device {port1 | port2}
set dst <ip_address>/<netmask_ip>
set gateway <ip_address>
end
1.
2.
3.
4.
Choosing a Configuration Tool
Web-based manager
The FortiManager web-based manager is an easy to use management tool.
Use it to congure the administrator password, the interface and default gateway addresses.
Requirements:
An Ethernet connection between the FortiManager Server and management computer.
Internet Explorer 6.0 or higher on the management computer.
•
•
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to congure the administrator password,
the interface addresses, the default gateway addresses. To congure advanced settings, see
the Documentation CD-ROM.
Requirements:
The DB-9 serial connection between the FortiManager Server and management com-
puter.
A terminal emulation application (HyperTerminal for Windows) on the management
computer.
•
•