Fortinet FortiManager-400A User manual

© Copyright 2007 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trade-
marks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
27 April 2007
Checking the Package Contents
Connecting
Planning the Configuration
Esc Enter
CONSOLE 10/100 10/100/1000USB
1 2 3 4 5 6
Rack-Mount Brackets
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Power
Connection
Power
Switch
RJ-45 to
DB-9 Console Cable
Power Cable
Back
Esc Enter
CONSOLE 10/100 10/100/1000USB
1 2 3 4 5 6
Front
LCD Control
Buttons
Power
LED USB
Serial
Console Port 5,6
(Future use)
-
Port1
Port 2,3,4
HA
Documentation
FortiManager 400A
Copyright 2006 FortinetIncorporated. All rights reserved.
Trademarks
Products mentioned inthis document are trademarks.
QuickStart Guide
Esc Enter
CONSOLE 10/100 10/100/1000USB
1 2 3 4 5 6
Straight-through Ethernet cable connects
to hub or switch on the network Ethernet for high
availability connections
Power cable connects to power outlet
Esc Enter
CONSOLE 10/100 10/100/1000USB
1 2 3 4 5 6
(Future use)
-
Connector Type Speed Protocol Description
Port 1 RJ-45 10/100 Base-T Ethernet Connection to the network
Ports 2,3,4 RJ-45 10/100 Base-T Ethernet For future use.
Ports 5 and 6 RJ-45 10/100/1000 Base-T Ethernet For future use.
CONSOLE RJ-45 9600 bps RS-232 serial Optional connection to the management computer.
Provides access to the command line interface (CLI).
Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
Alternatively, Mount the unit in a standard 19-inch rack. The FortiManager 400 system
requires 1 U of vertical space in the rack.
Connect the network cable to interface 1.
•
•
•
Connect the FortiManager System to a power outlet and to the internal and external networks.
FortiManager 400A
02-30003-0243-20070427
FortiManager Server LED Indicators
LED State Description
Power
Green The FortiManager Server unit is powered on.
Off The FortiManager Server unit is powered off.
All Ports
Amber (Left LED) The correct cable is in use and the connected equipment
has power.
Flashing Amber
(Left LED)
Network activity at this interface.
Off (Right LED) The interface is connected at 10 Mbps.
Green (Right LED) The interface is connected at 100 Mbps.
Red (Right LED) Ports 5 and 6 are connected at 1000 Mbps.
To power up the FortiManager Server, connect the power cables to the power outlets.
After a few seconds, SYSTEM STARTING appears on the LCD. The menu selections appear
when the unit is up and running.
If you connect only one power source, an audible alarm sounds to indicate a failed power
supply. To stop this alarm, press the red alarm cancel button on the rear panel next to the
power supply inputs.
The FortiManager System is an integrated management and monitoring tool that consists of
one or more FortiManager Servers and managed FortiGate and FortiAnalyzer devices.
The FortiManager Server manages communication between FortiGate devices, and a
FortiAnalyzer device. The FortiManager Server stores and manages all FortiGate device
congurations. It can also act as an on-site FDN server for the FortiGate devices to down-
load virus and attack signatures, and to use the web ltering and antispam service. The
FortiManager Server can also connect to a FortiAnalyzer unit for managing and monitoring
logs and reports for all managed FortiGate devices.
Factory Defaults
Administrator Account User name: admin
Password: (none)
Port 1
IP: 192.168.1.99
Netmask: 255.255.255.0
Management Access: ping, https, http, ssh
Port 2
IP: 0.0.0.0
Netmask: 0.0.0.0
Management Access:
Port 3
IP: 0.0.0.0
Netmask: 0.0.0.0
Management Access:
Port 4
IP: 0.0.0.0
Netmask: 0.0.0.0
Management Access:

Completing the Configuration
Congratulations!
You have nished conguring the basic settings. You are now ready to add and manage
FortiGate devices. To explore the full range of conguration options, see the online help or
the Tools and Documentation CD-ROM.
Visit these links for more information and documentation for your Fortinet product.
Technical Documentation - http://docs.forticare.com
Fortinet Knowledge Center - http://kc.forticare.com
Fortinet Technical Support - http://support.fortinet.com
•
•
•
Configuring the FortiManager Server unit
Web-based Manager
Connect the FortiManager System interface to a management computer Ethernet in-
terface. Use a cross-over Ethernet cable to connect the devices directly. Use straight-
through Ethernet cables to connect the devices through a hub or switch.
Congure the management computer to be on the same subnet as the internal inter-
face of the FortiManager System. To do this, change the IP address of the manage-
ment computer to 192.168.1.2 and the netmask to 255.255.255.0.
To access the FortiManager System web-based manager, start Internet Explorer and
browse to https://192.168.1.99 (remember to include the “s” in https://).
Type admin in the Name eld and select Login (no password required).
Changing an Administrator Password
To change the administrator password
On the main toolbar, select System Settings.
Go to Administraion > Administrators.
Select Edit.
Select Change Password.
Enter and conrm the password.
Select OK.
Conguring the IP Address and Netmask
To congure the IP address
On the main toolbar, select System Settings.
Go to Network > Interface.
Select Edit.
Enter the IP address and netmask.
Select OK.
Conguring the Default Gateway
To congure the default gateway
On the main toolbar, select System Settings.
Go to Network > Routing Table.
Enter the gateway IP address and netmask.
Enter the Destination IP and select the Interface.
Select OK.
Adding a FortiGate unit
Before you can manage a FortiGate unit, you must add it to the Device Manager. Adding an
existing operational device will not result in an immediate connection to the device. Device
connection only happens when you successfully resync the device.
To add a FortiGate device
In the Device Manager, select Device > Add Device from the main toolbar.
Enter the following information and select Discover.
IP Address Enter the IP Address of the device to add.
Discover via Select a method used to nd the device. Currently, only CLI (via
SSH) is supported. By using the CLI (via SSH) Method, Device
Manager is able to record each device being added.
Admin user Select Default (admin) if the device uses the default “admin” as its
admin user.
Select Other and enter the admin user name if the device uses a
different user name other than the default “admin”.
Password Enter the password for the admin user.
The discovery process starts. When it completes, the Add New Device page appears.
Verify the information and add a Description if desired.
Select Add.
Congure the FortiGate unit to be managed through a FortiManager server. Communica-
tion between the FortiGate unit and the FortiManager server is via an IPSec VPN that is
invisibly pre-congured on the FortiGate unit.
To congure the FortiGate unit
Log in to the FortiGate unit.
Go to System > Admin > FortiManager.
Complete the conguration and select OK.
1.
2.
3.
4.
1.
2.
3.
4.
5.
6.
1.
2.
3.
4.
5.
1.
2.
3.
4.
5.
1.
2.
3.
4.
1.
2.
3.
Command Line Interface
Use the RJ-45 to DB-9 serial cable to connect the FortiManager System Console port to
the management computer serial port.
Start a terminal emulation program (HyperTerminal) on the management computer. Use
these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
At the Login: prompt, type admin and press Enter twice (no password required).
Changing an Administrator Password
To change the administrator password, enter the following commands
cong fmsystem admin user
edit admin
set password <password>
end
Conguring the IP Address and Netmask
To congure the IP address and netmask, enter the following commands
cong fmsystem interface
edit port1
set ip <intf_ip>/<netmask_ip>
end
Conguring the Default Gateway
To congure the default gateway, enter the following commands
cong fmsystem route
edit <route_number>
set device {port1 | port2}
set dst <ip_address>/<netmask_ip>
set gateway <ip_address>
end
Control Buttons and LCD
Use the front control buttons and LCD on the FortiManager Server unit to congure IP ad-
dresses, default gateways and console settings without having to go to the command line
interface or the web-based manager.
To congure the FortiManager Server using the control buttons and LCD
Press Enter to access the Main Menu, to select menu items, to move right when enter-
ing IP addresses, and to conrm changes.
Press move up and down to navigate the Main Menu, and to change IP address num-
bers and console baud rate settings.
Press Esc to return to the Main Menu, and to move left when entering IP addresses.
Congure the FortiManager Server IP address and netmask. If the FortiManager Server
connects to a router to reach the Internet, add a default gateway.
Note: When you enter an IP address, the LCD display always shows three digits for each
part of the IP address. For example, the IP address 192.168.100.1 appears on the LCD
display as 192.168.100.001.
1.
2.
3.
4.
•
•
•
•
Choosing a Configuration Tool
Web-based manager
The FortiManager web-based manager is an easy to use management tool.
Use it to congure the administrator password, the interface and default gateway addresses.
Requirements:
An Ethernet connection between the FortiManager Server and management computer.
Internet Explorer 6.0 or higher on the management computer.
Control Buttons and LCD
The control buttons and LCD provide an easy method of setting the interface addresses and
default gateway addresses directly from the front of the FortiManager System without using a
management computer.
•
•
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to congure the administrator password,
the interface addresses, the default gateway addresses. To congure advanced settings, see
the Tools and Documentation CD-ROM.
Requirements:
The RJ-45 to DB-9 serial connection between the FortiManager Server and manage-
ment computer.
A terminal emulation application (HyperTerminal for Windows) on the management
computer.
•
•