Fortinet FortiAI 3500F User manual

FortiAI 3500F
QuickStart Guide

Product Registration
Thank you for purchasing a FortiAI. To access:
http://support.fortinet.com
▪ Cloud Management ▪FortiGuard Updates ▪Firmware Upgrades
▪Technical Support ▪Warranty Coverage
Please register your FortiAI:
Vous devez enregistrer le produir:
Debe registrar el producto:
登録のお願い:
请马上注册:
February 25, 2020
Copyright© 2019 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks
of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All
other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal
lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions
may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or
implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that
the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics
expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance
in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or
development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants,
representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this
publication without notice, and the most current version of the publication shall be applicable.

5
Box Includes
2x Power Cables
1x Ethernet Cable1x Sliding Rail Kit
(Components and Install Guide)
1x Console Cable
(DB9 to DB9)
4
QuickStart Guide
1x Bezel Plate
FortiAI 3500F
Front Panel - System
4
2
36
5
1
1 2 3
System Status LED indicators
System Health and System ID LED indicators
Hard Drive Off: Operating normally
Solid Blue: System is on and healthy. Press to switch to System ID mode.
iDRAC Quick Sync 2 module: Not in use.
Solid Amber: System is in fail-safe mode.
Temperature Off: Operating normally
Electrical Off: Operating normally
Memory Off: Operating normally
PCIe Indicator: Not in use
Hard Drive Amber: Hard drive error
Temperature Amber:Fan failure or ambient temperature out of range
Electrical Amber: PSU failure or voltage out of range
Memory Amber:Memory error occured
Blinking Blue:System ID mode is active. Press to switch to system health mode.
Blinking Amber:System is experiencing a fault.
12

76
Front Panel - Control
43 6
5
1
1 2
2
Hard Drive Power LED indicators
Green: Operating normally
Hard Drive activity: Activity dependent on drive carrier
Flashes Green for 2 secs: Identifying drive preparing for removal
Off: Drive ready for removal
Flashes Green, Amber, and then turns off: Predicted Drive Failure
Flashes Amber four times: Drive failed
Solid Green:Drive online
Flashes Green for 3 secs, Amber for 3 secs, and turns off after 6 secs:
Drive rebuild stopped
Off: Hard drive off
Rear Panel
ID Button & LED press to identify a system in a rack
CLI Console Port (DB9) optional connection to the management computer.
VGA Port (DB15) connect to a display
USB (x2 USB 3.0) for future use
Port 1 (default management port) 10Gigabit Ethernet connection, IP 192.168.1.88
Port 2 (default sniffer port) 10Gigabit Ethernet connection
Ports 3 & 4 (1Gbps) 2x 1Gigabit Ethernet connection
Redundant Power Supplies (2x) 120 - 240V AC, 11.5A, 50/60Hz
IPMI Port not in use. Vist http://cookbook.fortinet.com/changing-ipmi-password, to
change the default password
4
367 8
5
1
1
2
2
3
4
5
6
7
8
Off: ID function is off
Blue:ID function is on
Green:Connected at 1Gbps
Amber:Connected at 100/10 Mbps
Off: Not connected
Green:The power supply is operating normally
Flashing Amber: Power supply failure
Off: No power connected
Green: Connected at 10Gbps
Amber:Connected at 1000/100/10 Mbps
Off: Not connected
Flashing Green: Transmitting & receiving data
Off: Not in use
Flashing Green: Transmitting & receiving data
Off: Not in use
Link
LED
Link
LED
Act
LED
Act
LED
4
3
5
6
Off: Power is off
Green:Power is on
USB (2x USB 3.0) for future use
Micro USB not in use
VGA Port (DB15) connect to a display
Power Button LED turns the device on/off

98
Basic Connections Deployment Options
Plug in your device to a power outlet using the provided power adapter & cable
Power Outlet
or UPS
Power Outlet
or UPS
Power Connection
Power Connection
Supplied Power Cable
Supplied Power Cable
Note: We recommend connecting your FortiAI to an uninterruptible power supply
(UPS) in case of a power outage
FortiAI support standalone sniffer, integrated mode, or both simultaneously.

10 11
Setup Options
Set up your device locally using the GUI or CLI. Choose an option to
complete your setup, then configure your device.
Local Setup
Command Line Interface (CLI)
An alternate configuration tool from the web-based manager that
uses a terminal emulation application to type commands or upload
batches of commands from a text file or configuration script.
GUI
Local Setup
An easy-to-use GUI, compatible with most web browsers.
To minimize scrolling, the screen resolution should be at least
1280 x 1024 pixels.
A
BEthernet Cable
1. Connect Port 1 to the Management Computer using the supplied Ethernet cable
2. Enable DHCP or set the Management Computer’s IP and subnet to:
Static IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
3. Visit 192.168.1.88 in a web browser
4. Log in with username admin and no password
5. You can now configure your FortiAI
Management Computer
Port 1
Browse to 192.168.1.88
Username: admin
No Password
GUI
A

1312
CLI
B
1. Connect the Console Port with a console cable to the Serial Port on the
Management Computer
2. Start a terminal program on the Management Computer and select an available
COM Port using the following default settings:
Baud rate: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None
3. Log in using username admin and no password
4. You can now configure your FortiAI
Console Port Serial Port
Console Cable
Cautions and Warnings
Environmental Specifications
Ambient operating temperature: 0°C to 40°C
Rack Mount Instructions - The following or similar rack-mount instructions are included with the installation instructions:
Instructions de montage en rack - Les instructions de montage en rack suivantes ou similaires sont incluses avec les instructions d’installation:
Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may
be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum
ambient temperature (Tma) specified by the manufacturer.
Température ambiante élevée – S’il est installé dans un rack fermé ou à unités multiples, la température ambiante de fonctionnement de
l’environnement du rack peut être supérieure à la température ambiante de la pièce. Par conséquent, il est important d’installer le matériel dans un
environnement respectant la température ambiante maximale (Tma) stipulée par le fabricant.
Reduced Air Flow - Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is
not compromised.
Ventilation réduite – Installation de l’équipement dans un rack doit être telle que la quantité de flux d’air nécessaire au bon fonctionnement de
l’équipement n’est pas compromise.
Mechanical Loading - Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical
loading.
Chargement Mécanique – Montage de l’équipement dans le rack doit être telle qu’une situation dangereuse n’est pas lié à un chargement
mécanique inégal.
Circuit Overloading - Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the
circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when
addressing this concern.
Surtension – Il convient de prendre l’ensemble des précautions nécessaires lors du branchement de l’équipement au circuit d’alimentation et être
particulièrement attentif aux effets de la suralimentation sur le dispositif assurant une protection contre les courts-circuits et le câblage. Ainsi, il est
recommandé de tenir compte du numéro d’identification de l’équipement.
Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections
other than direct connections to the branch circuit (e.g. use of power strips).
Fiabilité de la mise à la terre – Fiabilité de la mise à la terre de l’équipement monté en rack doit être maintenue. Une attention particulière devrait
être accordée aux connexions d’alimentation autres que les connexions directes au circuit de dérivation (par exemple de l’utilisation de bandes de
puissance).
Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude)
Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales (Température de fonctionnement, température de stockage,
humidité et l’altitude).
Safety
Moving parts — Hazardous moving parts. Keep away from moving fan blades.
Pièces mobiles – Pièces mobiles dangereuses. Se tenir éloigné des lames mobiles du ventilateur.
Warning: Equipment intended for installation in Restricted Access Location.
Avertissement: Le matériel est conçu pour être installé dans un endroit où l’accès est restreint.
Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries in a re. They may explode. Dispose of
used batteries according to your local regulations. IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries.
Batterie – Risque d’explosion si la batterie est remplacée par un type incorrect. Ne jetez pas les batteries au feu. Ils peuvent exploser. Jetez les
piles usagées conformément aux réglementations locales. IMPORTANT: Suisse: l’annexe 4.10 de SR814.013 s’appliquent aux batteries.
警告
本電池如果更換不正確會有爆炸的危險
請依製造商說明書處理用過之電池
CAUTION:
There is a danger of explosion if a battery is incorrect replaced. Replace only with the same or equivalent type.
Dispose batteries of according to the manufacturer’s instructions.
Disposing a battery into re, a hot oven, mechanically crushing, or cutting it can result in an explosion.
Leaving a battery in an extremely hot environment can result in leakage of ammable liquid, gas, or an
explosion.
If a battery is subjected to extremely low air pressure, it may result in leakage of ammable liquid, gas, or an
explosion.
WARNUNG:
Lithium-Batterie Achtung: Explosionsgefahr bei fehlerhafter Batteriewechsel. Ersetzen Sie nur den gleichen oder gleichwertigen Typ. Batterien
gemäß den Anweisungen des Herstellers entsorgen.
Beseitigung einer BATTERIE in Feuer oder einen heißen Ofen oder mechanisches Zerkleinern oder Schneiden einer BATTERIE, die zu einer
EXPLOSION führen kann
Verlassen einer BATTERIE in einer extrem hohen Umgebungstemperatur, die zu einer EXPLOSION oder zum Austreten von brennbarer Flüssigkeit
oder Gas führen kann
Eine BATTERIE, die einem extrem niedrigen Luftdruck ausgesetzt ist, der zu einer EXPLOSION oder zum Austreten von brennbarer Flüssigkeit
oder Gas führen kann.
CAUTION: Shock Hazard. Disconnect all power sources.
ATTENTION: Risque d’électrocution. Débranchez toutes les sources d’alimentation.
Caution: Slide/rail mounted equipment is not to be used as a shelf or a work space.
Attention: Un équipement monté sur bâti ne doit pas être utilisé sur une étagère ou dans un espace de travail.

1514
Regulatory Compliance
Federal Communication Commission (FCC) – USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are
designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be
required to correct the interference at his own expense.
WARNING: Any changes or modifications to this product not expressly approved by the party responsible for compliance could void the user’s authority to
operate the equipment
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada
CAN ICES-3 (A) / NMB-3 (A)
This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regula¬tions of the
Canadian Department of Communications.
Cet appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe A prescrites dans le
Règlement sur le brouillage radioélectrique édicte par le ministère des Communications du Canada.
European Conformity (CE) - EU
This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate
measures.
Voluntary Control Council for Interference (VCCI) – Japan
この装置は、クラスＡ機器です。この装置を住宅環境で使用すると電波妨害を引き起こすことがあります。この場合には
使用者が適切な対策を講ずるよう要求されることがあります。
ＶＣＣＩ－Ａ
Product Safety Electrical Appliance & Material (PSE) – Japan
日本では電気用品安全法(PSE)の規定により、同梱している電源コードは本製品の専用電源コードとして利用し、他の製品に使用しないでください。
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan
The presence conditions of the restricted substance (BSMI RoHS table) are available at the link below:
限用物質含有情況表 (RoHS Table) 請到以下 網址下載：
https://www.fortinet.com/bsmi
此為甲類資訊技術設備，於居住環境中使用時，可能會造成射頻擾動，在此種情況下，使用者會被要求採取某些適當的對策。
英屬蓋曼群島商防特網股份有限公司台灣分公司
地址：台北市內湖區行愛路176號2樓
電話：[phone]
China
此为A级产品，在生活环境中，该产品可能会造成无线电干扰。这种情况下，可能需要用户对其采取切实可行的措施。

Fortinet.com
Fortinet Customer Service & Support
Create a support account, register and manage your products,
download updates, firmware images and release notes, and
create technical support tickets.
https://support.fortinet.com
Fortinet Document Library
Up-to-date versions of Fortinet publications for the entire family
of Fortinet products.
https://docs.fortinet.com
Training Services
Course descriptions, availability, schedules, and location of
training programs in your area.
https://www.fortinet.com/support-and-training/training.html
Technical Discussion Forums
Communicate with other customers and Fortinet partners about
Fortinet products, services, and configuration issues.
https://support.fortinet.com/forum
FortiGuard Threat Research and Response
Up-to-date information on vulnerabilities and threats, includes a
virus scanner, IP signature look-up, and web filtering tools.
https://fortiguard.com