Fortinet FortiGate 40F Series User manual

QuickStart Guide
FortiGate 40F & 60F Series

Product Registration
Thank you for purchasing a FortiGate. To access:
http://support.fortinet.com
▪ Cloud Management ▪FortiGuard Updates ▪Firmware Upgrades
▪Technical Support ▪Warranty Coverage
Please register your FortiGate:
Vous devez enregistrer le produir:
Debe registrar el producto:
登録のお願い:
请马上注册:
3
April 13, 2020
Copyright© 2019 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks
of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All
other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal
lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions
may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or
implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that
the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics
expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance
in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or
development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants,
representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this
publication without notice, and the most current version of the publication shall be applicable.
2

54
Table of Contents
Product Series
Installation
Licensing & Services
About Fortinet
Setup
FortiGate 40F Series..................................................................................... 6
3G4G Series........................................................ 10
FortiGate60F Series ................................................................................... 14
Basic Connections ..................................................................................... 17
Wall Mount Option...................................................................................... 18
Desktop Option .......................................................................................... 19
Rack/Rail Mount Option............................................................................. 20
Setup Options............................................................................................. 21
GUI .............................................................................................................. 22
FortiGate Cloud .......................................................................................... 24
FortiExplorer ............................................................................................... 25
Command Line Interface (CLI) ................................................................... 26
Resources................................................................................................... 27
Free Licences & Services........................................................................... 28
FortiCare Subscriptions ............................................................................. 30
Bundled Services with FortiCare ............................................................... 32
Fortinet Security Fabric.............................................................................. 34
FortiGate Security Fabric Integration ........................................................ 36
Solution Spotlight: Secure SD-WAN.......................................................... 38
Fortinet Security Processors ..................................................................... 40
Corporate Overview ................................................................................... 42
Regulatory Compliance Information.......................................................... 44

76
QuickStart Guide
A
40F
FortiGate 40F/ 41F Series
Package Contents - FG 40F
Ethernet Cable
Wall Mount Hardware
(Optional)
Wall Mount Kit
(Optional)
Back Panel - FG 40F
3
4
1
2
2
3
5
4
6
1
Ethernet Ports 1 to 3 (RJ-45) 1 Gbps Ethernet connections
Power 12V DC, 100-240V AC 50/60Hz adapter
Console (RJ-45) CLI management computer interface
WAN (RJ-45) 1 Gbps Ethernet interface
FortiLink Port A (RJ-45) 1 Gbps Ethernet interface (FortiLink interface)
56
USB (USB A) USB 3.0 server port
40F/41F40F/41F
DC Power AdapterAdapter Plugs

98
A
40F
2
3
6
5
4
1
FortiGate
Green: The device is on
Off: The device is off
Green: Power is on
Off: Power is off
: FortiLink interface
Green: Normal
Flashing Green: Booting up
LOGO
PWR
STATUS
HA
PORT
LINK/ACT
PORT
SPEED
FortiLink
4
Green: Operating in an HA cluster
Amber: HA failover
Off: Not in an HA cluster
Green: Connected at 1Gbps
Amber: Connected at 100Mbps
Off: Not connected or 10Mbps
Green: Connected
Flashing Green:Transmitting data
Off: No link established
1235 6
Front Panel - FG 40F
40F/41F

1110
Wall Mount Kit with Hardware
(Optional)
QuickStart Guide
A
40F-3G4G
3G/4G 3G/4G
SVC
3G/4G
FortiGate 40F/41F 3G4G Series
Package Contents - FG 40F-3G4G
Ethernet Cable
3x 3G4G Antennas
(40F 3G4G models only)
Back Panel- FG 40F-3G4G
40F/41F 3G4G
DC Power AdapterAdapter Plugs
3
4
1
2
2
3
5
4
6
1
Ethernet Ports 1 to 3 (RJ-45) 1 Gbps Ethernet connections
Power 12V DC, 100-240V AC 50/60Hz adapter
Console (RJ-45) CLI management computer interface
WAN (RJ-45) 1 Gbps Ethernet interface
FortiLink Port A (RJ-45) 1 Gbps Ethernet interface (FortiLink interface)
56
USB (USB A) USB 3.0 server port

1312
A
40F-3G4G
3G/4G 3G/4G
SVC
3G/4G
Antenna Connection (3x SMA) WWAN antenna connections
8
2
3
6
5
4
1
Green: Power is on
Off: Power is off
: FortiLink interface
Green: Normal
Flashing Green: Booting up
PWR
STATUS
HA
PORT
LINK/ACT
SVC
3G/4G
PORT
SPEED
FortiLink
4
Green: Operating in an HA cluster
Amber: HA failover
Off: Not in an HA cluster
Green: Connected at 1Gbps
Amber: Connected at 100Mbps
Off: Not connected or 10Mbps
Green: Connected
Flashing Green:Transmitting data
Off: No link established
Green: SVC is on
Flashing Green:SVC activity
Off: SVC is off
Green: 3G4G is on
Flashing Green:3G4G activity
Off: 3G4G is off
1237 85 6
7
Front Panel- FG 40F-3G4G SIM Card Installation
231
2 SIM 1
NOTE: For more information on Wireless WAN Configuration, please refer to the FortiOS
Handbook at docs.fortinet.com
Secondary(2) Primary(1)
40F/41F 3G4G

1514
QuickStart Guide
A B
60F
FortiGate 60F/61F Series
Package Contents - FG 60F
12V DC Power AdapterPower Cable
Ethernet Cable
Wall Mount HardwareWall Mount Kit
3
4
1
2
2
3
4
5
5
6
1
Ethernet Ports 1 to 5 (RJ-45) 1 Gbps Ethernet connections
Power 12V DC, 100-240V AC 50/60Hz adapter
Console (RJ-45) CLI management computer interface
DMZ (RJ-45) 1 Gbps Ethernet interface
WAN1 & WAN2 (RJ-45) 1 Gbps Ethernet interfaces
FortiLink Ports A & B (RJ-45) 1 Gbps Ethernet FortiLink auto-detect connections
7
6
USB (USB A) USB 3.0 server port
Back Panel - FG 60F
7
60F/61F

Installation
1716
A B
60F
2
3
6
5
4
1
FortiGate
Green: The device is on
Off: The device is off
Green: Power is on
Off: Power is off
: FortiLink interfaces
Green: Normal
Flashing Green: Booting up
LOGO
PWR
STATUS
HA
PORT
LINK/ACT
PORT
SPEED
FortiLink
4
Green: Operating in an HA cluster
Amber: HA failover
Off: Not in an HA cluster
Green: Connected at 1Gbps
Amber: Connected at 100Mbps
Off: Not connected or 10Mbps
Green: Connected
Flashing Green:Transmitting data
Off: No link established
12356
Front Panel - FG 60F Installation
Your FortiGate includes a wall mount kit and connection cables. Desktop
installation, rack mount and slide-rail kits are also available.
1. Plug in your device to a power outlet using the provided power cable
a. The 60F series uses a desktop power adapter and cable
b. The 40F series uses a wall mount adapter with US, EU or UK plugs
2. Connect a WAN port to the internet using the supplied Ethernet cable
Power Outlet
or UPS
Internet
Power Connection
Power Adapter & Cable
(60F Series)
Ethernet Cable
WAN port
Note: We recommend connecting your FortiGate to an uninterruptible power
supply (UPS) in case of a power outage
Basic Connections

Installation
1918
Wall Mount Option
1. Mark the location of the holes using the mounting bracket
2. Drill holes for the anchors
3. Insert the anchors and then screw in the screws with 2mm exposed
4. Fasten the mounting bracket
5. Position the device and slide into place
6. Plug the provided power cable into the rear of the unit and then into a grounded
electrical outlet or separate power source
Desktop Option
1. Place the unit on a flat, clean and stable surface
2. Ensure there is at least 1.5in of clearance for adequate airflow
3. Plug the provided power cable into the rear of the unit and then into a grounded
electrical outlet or separate power source
1.5in
1.5in
1.5in
1.5in

Setup
2120
Rack/Rail Mount Option
Fortinet carries a variety of standard and custom rack and rail mount
accessories, including a 40F/60F rack mount tray kit, SP-RACKTRAY-02.
Ordering: Contact Fortinet to order brackets, rail slide kits, rack mount kits and
other accessories, such as a console cable
SP-RACKTRAY-02
Setup Options
Set up your device locally or on the cloud. Choose one of the following
options to complete your setup, then configure your device.
Local Setup
FortiExplorer
Smartphone Setup
FortiExplorer for iOS is a user-friendly iOS application that helps you
configure, manage, and monitor appliances. FortiExplorer rapidly
provisions, deploys, and monitors Security Fabric components
such as FortiGate, FortiWiFi, and FortiAP devices.
FortiGate Cloud
Cloud Setup
FortiGate Cloud is a cloud-based infrastructure management
solution and log retention service. It provides centralized reporting,
traffic analysis, configuration management, and log retention
without the need for additional hardware and software.
Command Line Interface (CLI)
An alternate configuration tool from the web-based manager that
uses a terminal emulation application to type commands or upload
batches of commands from a text file or configuration script.
Requires a console cable (available for purchase).
GUI
Local Setup
An easy-to-use GUI, compatible with most web browsers.
To minimize scrolling, the screen resolution should be at least
1280 x 1024 pixels.
A
B
C
D

Setup
2322
Ethernet Cable
1. Connect port 1 to the Management Computer using the suplied Ethernet cable
2. Enable DHCP or set the Management Computer’s IP and subnet to:
Static IP Address: 192.168.1.1
Subnet Mask: 255.255.255.0
3. Visit 192.168.1.99 in a web browser
Management Computer
MGMT or MGMT1
or port 1
Browse to 192.168.1.99
Username: admin
No Password
GUI
A
4. Log in with username admin and no password
6. The FortiCare Support Status in the FortiOS License Information widget will
change to Registered
5. When prompted to register, enter your Fortinet credentials

Setup
2524
1. Log in to forticloud.com using your Fortinet credentials
2. Click Add FortiGate and enter the Cloud Key located on the sticker on your device
3. You can now manage your device from the cloud
Note: To get a Fortinet account, register at support.fortinet.com
FortiGate Cloud
forticloud.com
B
FortiExplorer
1. Download and launch the FortiExplorer iOS App
2. Tap Devices, then tap Add
3. Select FortiGate Cloud and log in using your Fortinet credentials
4. Scan the QR code on the Cloud Key
5. Log in to your device using username admin and no password
6. You can now configure your device
FortiExplorer App
USB Port
Cloud Key Setup
USB Setup
1. Download and launch the FortiExplorer iOS App
2. Connect your Apple Lightning to USB cable to the FortiGate/FortiWiFi USB port
3. Tap your device when it appears in FortiExplorer
4. Log in using username admin and no password
5. You can now configure your device
2
1
C

Setup
2726
Console Port
Console Cable
(available for purchase)
1. Connect the Console Port with a console cable to the Management Computer
2. Start a terminal program on the Management Computer and select an available
COM Port using the following default settings:
Baud rate: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None
3. Log in using username admin and no password
4. You can now configure your device
Management Computer
Speed (default): 9600
Data bits: 8
Stop bits: 1
Parity: None
Flow Control: None
Note: Type ?for a list of commands. Type a command with ?, such as config
?to list the options. For advanced options, visit support.fortinet.com
CLI
D
FortiGate Documentation Library
Up-to-date hardware and software guides
https://docs.fortinet.com/fortigate
Fortinet Customer Service & Support
Access knowledge bases, resource libraries and contact support
https://support.fortinet.com/
Fortinet Video Tutorials
FortiOS Tips, Web GUI tutorials, SD-WAN tricks and more
http://video.fortinet.com
FortiGuard Labs
Discover FortiGuard’s Zero-Day Research, Weekly Threat Briefs and Threat Lookups
https://fortiguard.com/
FortiGate Cloud
Analyze centralized reporting, traffic analysis, configuration management and logs
https://forticloud.com
Resources
Refer to the following resources to continue your FortiGate/FortiWiFi setup.

Simplify and leverage provisioning, management,
and analytics with FortiGate Cloud’s centralized
administration. Extend online logs and analysis to 1 full
year with a subscription.
FortiGate Cloud 7 Days of Data Retention
Register for Free Licenses & Services
28
Make remote access simple.
Use yourcompany.fortiddns.com instead of a hard-to-
remember IP address.
Fortinet DDNS Service
Licensing & Services
Enable two-factor authentication for remote
access using mobile devices. Available for
iOS and Android devices. Get extra tokens
from your Fortinet reseller.
2 FortiToken Mobile Licenses
29

30
Services with FortiCare Subscriptions
Use cellphone technology as backup Internet connection.
We are always adding support for new third party 3G/4G+
devices.
USB Modem Database Updates
Get the latest product security updates and features. Stay
with us and see the product evolve.
Firmware Updates
Global 24/7 support for your Fortinet hardware & software
.
Set up policies and track activities based on geography. Your
FortiGate will intelligently identify where an IP is originated or
destined.
Geo-IP Database Updates
Create policies to allow, deny, or restrict access to
applications or entire categories of applications. You can use
application control to keep malicious, risky, and unwanted
applications out of your network.
Application Control Database Updates
31
Identify device type and OS information. Great for
organizations who want to enforce device-based policies
so that employees can bring in their devices.
Device Signatures Database Updates
Internet service database objects consist of IP addresses,
port numbers, and protocols used by Internet services.
Simplify the management and control of cloud-based
applications.
Internet Service Database Updates
.
Licensing & Services

Fortinet Bundled Services with FortiCare
32 33
Fortinet Bundled Services 360
Protection
Enterprise
Protection UTM Threat Protection
FortiCare ASE 24x7 24x7 24x7
FortiGuard App Control Service ✓✓✓✓
FortiGuard IPS Service ✓✓✓✓
FortiGuard Advanced Malware Protection (AMP) ✓✓✓✓
FortiGuard Web Filtering Service ✓✓✓
FortiGuard Anti-Spam Service ✓✓✓
FortiGuard Security Rating Service ✓ ✓
FortiGuard Industrial Service ✓ ✓
FortiCASB SaaS-only Service ✓ ✓
FortiConverter Service ✓
SD-WAN Cloud Assisted Monitoring ✓
SD-WAN Overlay Controller VPN Service ✓
FortiAnalyzer Cloud ✓
FortiManager Cloud ✓
Licensing & Services

The Fortinet Security Fabric
Automated
Operations, orchestration and
response
Broad
Visibility of the entire digital attack
surface
Integrated
AI-driven breach prevention across all
devices, networks, and applications
34
Network
Security
Multi-Cloud
Security
Network
Operations
Security
Operations
Endpoint/Device
Protection
Fabric
Connectors
Fabric
APIs
Application
Security
Secure
Access
About Fortinet
35

FortiGate Security Fabric Integration
Other Fabric Solutions
¡ A large, growing, and open ecosystem
of partner integrations
¡ Fabric-Ready partners span a broad
range of technologies
¡ Fabric Connectors provide deep
integration into customers’ multi-vendor
ecosystems
¡ DevOps scripts automate security
provisioning & configuration.
36
About Fortinet
Multi-Cloud
Security
Application
Security
Security
Operations
Fabric
Connectors
Endpoint
Security
Secure
Access
Network
Operations
FortiGate
Virtual Firewall
FortiMail
FortiWeb FortiAP
FortiSwitch
FortiSandbox
FortiManager
FortiADC
FortiNAC
FortiToken
Fabric
APIs
FortiCASB
FortiClient FortiAnalyzer
FortiSIEM
37

38
..
IaaS
SaaS
Apps
Data Center
Branch
Solution Spotlight: Secure SD-WANSolution Spotlight: Secure SD-WAN
38 39
.
NGFW with built-in, best-of-breed SD-WAN capability enables digital transformation at the
enterprise branch.
RECOMMENDED
SOFTWARE DEFINED WIDE AREA NETWORK
FortiGate 61E v6.0.1 GA Build 5068
AUG
2018
FORTINET
SD-WAN FortiGate 61E
Products
¡ FortiGate NGFW (at FortiOS 5.6 & above)
¡ FortiManager
Key Features
¡ Application-aware steering
¡ Automated WAN path intelligence
¡ Single-pane-of-glass management with zero-
touch provisioning
¡ SD-WAN features include in base license
Benefits
¡ High application performance
¡ Reduced WAN OPEX
¡ Safe Internet access for branch sites
¡ Reduced complexity, easier management
39
About Fortinet