Fortinet FortiAP 112B User manual

FortiAP 112B
QuickStart Guide

September 14, 2012
20-430-177873-20120914
Copyright© 2012 Fortinet, Inc. All rights reserved. Fortinet®,
FortiGate®, and FortiGuard®, are registered trademarks of
Fortinet, Inc., and other Fortinet names herein may also be
trademarks of Fortinet. All other product or company names
may be trademarks of their respective owners. Performance
metrics contained herein were attained in internal lab tests under
ideal conditions, and performance may vary. Network variables,
different network environments and other conditions may affect
performance results. Nothing herein represents any binding
commitment by Fortinet, and Fortinet disclaims all warranties,
whether express or implied, except to the extent Fortinet enters
a binding written contract, signed by Fortinet’s General Counsel,
with a purchaser that expressly warrants that the identified
product will perform according to the performance metrics
herein. For absolute clarity, any such warranty will be limited to
performance in the same ideal conditions as in Fortinet’s internal
lab tests. Fortinet disclaims in full any guarantees. Fortinet
reserves the right to change, modify, transfer, or otherwise revise
this publication without notice, and the most current version of the
publication shall be applicable.

Table of Contents
Package Contents 1
Connecting Your FortiAP Unit 2
Access Point Configuration 3
Mesh Mode Configuration 5
Mounting Your FortiAP Unit 7
Technical Specifications 9
LED Specifications 10
Documentation and Links 11
Cautions and Warnings 12
Register Your Product 14
Product License Agreement 15

Package Contents
Page 1
Fortinet’s FortiAP wireless thin access points deliver secure,
identity-driven WiFi client access that creates a fortified
WLAN network that is centrally managed by a FortiGate or
FortiWiFi platform. The FortiAP 112B has built-in proprietary
PoE to support long-range network installation. It can be
setup either as an access point, or in mesh mode.
Your box contains the following:
FortiAP 112B
QuickStart Guide
Wall/Pole Mounting Hardware Kit
PoE Injector with Power Adapter
FortiAP 112B
QuickStart Guide
Quickstart
Guide
Wall/Pole Mounting
Hardware Kit
LAN
PoE
PoE Injector Power Adapter

Page 2
Connecting Your FortiAP Unit
The FortiAP 112B -PoE can be configured to function as an access
point, or to operate in mesh mode.
Adequate grounding must be provided to the FortiAP unit and the
PoE injector, in compliance with the local electrical code.
Note: The included PoE injector must be mounted indoors, as it is
not weatherproof.
Caution: Only use the provided PoE injector (EPE-1212) and power
adapter with this devices. Using a different PoE injector or power
adapter may cause damage to the device.
Note: The FortiAP 112B has a directional antenna located on the
front of the device. For a reliable wireless connection, the device
must be aimed towards its target to establish a connection. See
Mounting Your FortiAP Unit on page 7.
To connect the FortiAP unit:
1. Insert an Ethernet cable into the ETH (PoE) port of the FortiAP
unit and insert the other end of the cable into the PoE port on
the provided PoE injector.
2. Insert one end of the provided power adapter into the PoE
injector, and plug the other end into an electrical outlet.
The Status LED will light up.
3. Insert an Ethernet cable from the LAN port of the provided PoE
injector or the ETH port of the FortiAP unit, to a PC, FortiGate,
or FortiWifi device.
To configure the management computer:
1. Configure the management computer to be on the same subnet
as the internal interface of the FortiAP unit:
a. Browse to the Network and Sharing Center > Change
Adapter Settings > Local Area Connection Properties >
Internet Protocol Version 4 (TCP/IPv4) Properties.
b. Change the IP address of the management computer to
192.168.1.1 and the netmask to 255.255.255.0.
2. Connect from the LAN port of the PoE injector, or the ETH port
on the FortiAP unit, to the management computer using an
Ethernet cable.

Page 3
The FortiAP unit is designed to require no configuration in most
networks. Zero Configuration mode works if the unit is directly
connected (or through the PoE injector) to the FortiGate or FortiWifi
performing the Wireless LAN Controller (WLC) functions, or on the
same layer-2 network and subnet as the FortiGate or FortiWifi unit.
If the FortiAP wireless controller’s IP address cannot be determined
using Zero Configuration mode, or if the network uses static IP
addresses, it can be configured to use a static IP address.
To enable the FortiAP using Zero Configuration:
1. After connecting the FortiAP unit as described in the previous
chapter, the unit goes through its boot procedure and requests
an IP address from the DHCP server.
2. If the IP address is retrieved successfully, the FortiAP enters
discovery mode to locate a FortiGate or FortiWifi wireless
controller. The discovery modes are:
• Broadcast
• Multicast
• DHCP option 138
3. Verify that the FortiAP has successfully connected to the
controller.
In the FortiGate Web-based Manager, go to WiFi Controller >
Managed Access Points > Managed FortiAP. A successfully
discovered unit displays an orange circle with a question mark.
4. Select the access point and click Edit.
5. In the State field, select Authorize.
6. In the AP Profile field, select Change, then select a profile from
the list and click OK.
The configuration is downloaded from the wireless controller to
the FortiAP and the WiFi LED lights up.
To enable the FortiAP with a static IP address:
1. Connect the unit and configure the management computer as
described in the “Connecting Your FortiAP Unit” chapter.
2. Telnet to IP address 192.168.1.2.
3. Type admin in the Name field, leave the Password field blank,
and press Enter.
Access Point Configuration

4. Configure a static IP address for the FortiAP unit and netmask
& gateway information for your network, using the following
commands:
cfg -a ADDR_MODE=STATIC
cfg –a AP_IPADDR=xxx.xxx.xxx.xx
cfg –a AP_NETMASK=255.255.255.0
cfg –a IPGW=yyy.yyy.yyy.yyy
cfg –a AC_IPADDR_1=zzz.zzz.zzz.zzz
where xxx is the IP address of the FortiAP unit, yyy is the
Gateway IP address and zzz is the IP address of the FortiGate
Wireless Controller.
5. Save the configuration by typing the following command:
cfg –c
6. Unplug the FortiAP unit and plug it back in order for the
configuration to take effect.
7. Move the FortiAP to the intended deployment location and
connect the Ethernet cable as described in the Connecting
chapter.
8. Log in to the FortiGate controller Web-based Manager, and
go to WiFi Controller > Managed Access Points > Managed
FortiAP. A successfully discovered unit displays an orange circle
with a question mark in the Status column.
9. Select the access point and click Edit.
10. In the State field, select Authorize.
11. In the Edit FortiAP dialog box, select Enable Wireless Radio.
Leave the remaining settings at their default values. The
configuration is downloaded from the FortiGate unit to the
FortiAP device.
For more information, see the Deploying Wireless Networks
Guide, available on Fortinet’s technical documentation website,
http://docs.fortinet.com.
Page 4
LAN
PoE
LAN
Port
ETH
Port
ETH (PoE)
Port
PoE
Port

Mesh Mode Configuration
Page 5
The Mesh operation mode can be configured using either the
Web-based Manager, or the Command Line Interface (CLI).
Before starting, make note of the device’s MAC address and serial
number, then clearly mark the FortiAP unit to avoid confusion
during installation.
Mesh mode requires an upstream FortiAP or FotiWiFi device that
has mesh downlink enabled.
Mesh mode can only connect with the Mesh-Backhaul SSID from
a device. It cannot connect with the common SSID from a FortiAP,
FortiWiFi, or third party device.
Note: Mesh mode can only be used with a controller running
FortiOS v5.0 or later.
Using the Web-based Manager:
1. Connect the unit and configure the management computer as
described in the “Connecting Your FortiAP Unit” chapter.
2. Start a browser of your choice and browse to http://192.168.1.2.
3. Type admin in the Name field, leave the Password field blank,
and select Login.
4. Find the Uplink section on the System Information tab, set the
Operation Mode to Mesh, and setup the Mesh AP SSID and
Mesh AP Password.
The default SSID and password are fortinet.mesh.root.
It is recommended that you change both the default SSID and
password.
5. Optionally, select Ethernet Bridge to enable building to building
bridging.
6. Select Apply.
7. Disconnect the FortiAP device from the management computer.
8. Aim the front of the FortiAP unit towards the upstream mesh
node (usually another AP device) to complete the association.
Once the link is established, the Mesh signal intensity indicators
should change from flashing to red, yellow, or green. If red,
adjust the location of the unit and the direction it is facing until
the intensity indicators show yellow or green.
Using the CLI
1. Connect the unit and configure the management computer as
described in the “Connecting Your FortiAP Unit” chapter.

Page 6
2. Telnet to IP address 192.168.1.2.
3. Type admin in the Name field, leave the Password field blank,
and press Enter.
4. Enter the following to enable Mesh mode and set the SSID and
password:
cfg -a MESH_AP_TYPE=1
cfg -a MESH_AP_SSID=fortinet.mesh.root
cfg -a MESH_AP_PASSWD=fortinet.mest.root
It is recommended that you change both the default SSID and
password.
5. Optionally, enable the Ethernet bridge for building to building
bridging with the following command:
cfg -a MESH_ETH_BRIDGE=1
6. Check the values using the following command:
cfg -s
The output should be similar to the following:
MESH_AP_TYPE:=1
MESH_AP_SSID:=fortinet.mesh.root
MESH_AP_BSSID:=
MESH_AP_PASSWD:=*******
MESH_ETH_BRIDGE:=1
7. Save the configuration as follows:
cfg -c
8. Disconnect the FortiAP device.
9. Aim the front of the FortiAP unit towards the upstream mesh
node (usually another AP device) to complete the association.
Once the link is established, the Mesh signal intensity indicators
should change from flashing to red, yellow, or green. If red,
adjust the location of the unit and the direction it is facing until
the intensity indicators show yellow or green.
Note: The FortiAP 112B has a directional antenna located on the front
of the device. The device must be aimed towards a mesh node to
achieve a connection. See Mounting Your FortiAP Unit on page 7.
LAN
PoE
LAN
Port
ETH
Port
ETH (PoE)
Port
PoE
Port
LAN

Page 7
Mounting Your FortiAP Unit
Using the provided hardware, the FortiAP unit can be
attached to a wall or pole.
To attach the unit to a wall:
1. Setup the provided anchors and screws in the desired
wall.
2. Hang the FortiAP device on the screws.
To attach the unit to a pole:
1. Loop the wire belts through the slots on the rear of the
device and then around the pole.
2. Tighten the belts to ensure that the device is firmly in
place.

Antenna direction
The FortiAP 112B has a directional antenna located on the
front of the device. The strongest signal is achieved in the
60 degree range shown in the below image.
For a reliable wireless connection, the units to which you
would like to connect should be within this range.
FortiAP222B
802.11A/B/G/N DUAL CONCURRENT RADIO AP
FortiAP222B
802.11A/B/G/N DUAL CONCURRENT RADIO AP
Good Connection Area
Bad Connection Area
Bad Connection Area
Page 8

Page 9
Technical Specifications
123
# Interface Type Description
1 ETH (PoE) RJ-45 Fast Ethernet port with PoE support.
2 ETH RJ-45 Fast Ethernet port.
3 Reset Button Hold for 5 seconds to reset the
FortiAP unit to its factory defaults.
Hardware Specification Description
WiFi Radios Refer to the product datasheet.
Memory Refer to the product datasheet.
Flash Refer to the product datasheet.
Power Adapter Refer to the product datasheet.
Indoor/outdoor Deployment Indoor / Outdoor.
Note: The maximum distance between the PoE injector and
the unit is approximately 30m.

Page 10
LED Specifications
# LED State Description
1 STATUS
Off No power or the system is booting.
Flashing Green The unit is searching for a controller.
Green The unit has successfully connected
to the controller.
2ETH and
ETH (PoE)
Off No Ethernet link detected.
Green 100/10 Mbps Ethernet link detected,
but no activity.
Flashing Green 100/10 Mbps Ethernet link activity.
3 WiFi
Off Wireless link administratively
disabled/off.
Green Wireless interface is functioning
correctly, but no activity.
Flashing Green Transmitting and receiving.
4
Mesh
Signal
Intensity
Indicators
Off Mesh mode not enabled.
Cycling Searching for upstream mesh node.
All Flashing Mesh network error.
Green Link quality is good.
Yellow Link quality is average.
Red Link quality is poor.
ETH (PoE) WiFi
FAP-112B
802.11b/g/n
FORTI AP-1 1 2B
E238018
I C: 1 0 10 3 A- ENS 2 0 0
FCC A8 J- ENS 2 0 0
This Class B digital apparatus complies with Canadian ICES-003.
STATUS ETH
ETH ETH
1
2
3
4

Page 11
The following Fortinet web pages provide information and resources for
your Fortinet product:
1. Customer Service & Support: https://support.fortinet.com
On this page you can create a support account with Fortinet, register
and manage your products, download updates, firmware images and
release notes, and create technical support tickets.
2. Technical Documentation: http://docs.fortinet.com
This page provides the most up-to-date versions of Fortinet publications
for the entire family of Fortinet products. The following guides provide
more information on the installation and configuration of your FortiAP
unit:
• Deploying Wireless Networks: This guide describes how to
configure wireless networks with FortiWiFi, FortiGate, and FortiAP
units.
• Wireless Starter Kit: This guide provides example configurations
of FortiAP thin wireless access points.
• PoE Injector QuickStart Guide: This guide describes the Fortinet
Gigabit PoE Injector and provides basic installation instructions.
3. Knowledge Base: http://kb.fortinet.com
This page provides Fortinet technical documentation, such as
troubleshooting, how-to articles, example configurations , FAQs,
technical notes, and more.
4. Technical Discussion Forums: https://support.fortinet.com/forum
This page allows you to communicate with other customers and Fortinet
partners about Fortinet products, services, and configuration issues in a
forum environment.
5. Training Services: http://training.fortinet.com
This page provides course descriptions, availability, schedules, and
locations of training programs in your area.
6. FortiGuard Threat Research and Response:
http://www.fortiguard.com
This page provides up-to-date information on vulnerabilities and threats,
and includes a virus scanner, Internet Protocol (IP) signature look-up,
web filtering tools, and related information.
Tools and Documentation CD
The tools and documents on this CD are current as of shipping time.
Comments on Technical Documentation
Please send comments or information about any errors or omissions in this
or any Fortinet technical documents to [email protected].
Documentation and Links

Page 12
Cautions and Warnings
Please review the following cautions and warnings.
Environmental specications
Operating temperature: Refer to the product datasheet
If you install your Fortinet product in a closed or multi-unit rack assembly, the
operating ambient temperature of the rack environment may be greater than
room ambient temperature. Therefore, make sure to install the equipment in
an environment compatible with the manufacturer’s maximum rated ambient
temperature.
Storage temperature: Refer to the product datasheet
Humidity: Refer to the product datasheet
Air flow - For rack installation, make sure that the amount of air flow required for
safe operation of the equipment is not compromised.
For free-standing installation, make sure that the appliance has at least 1.5 in.
(3.75 cm) of clearance on each side to allow for adequate air flow and cooling.
FCC Compliance
The Fortinet product has been tested and found to comply with the limits for
a Class B digital device, pursuant to part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful interference
in a residential installation. This equipment generates, uses and can radiate
radio frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If
this equipment does cause harmful interference to radio or television reception,
which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following
measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: Any changes or modifications not expressly approved by the
party responsible for compliance could void the user’s authority to operate this
equipment.
For operation within 5.15 ~ 5.25GHz frequency range, this device is restricted to
indoor environments.
This device complies with Part 15 of the FCC Rules. Operation is subject to the
following two conditions: (1) This device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that
may cause undesired operation.
IMPORTANT NOTE: Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for
uncontrolled environments. This equipment should be installed and operated
with a minimum distance of 21cm between the radiator and your body. This
transmitter must not be co-located or operating in conjunction with any
other antenna or transmitter. The availability of some specific channels and/
or operational frequency bands are country dependent and are firmware
programmed at the factory to match the intended destination. The firmware
setting is not accessible by the end user.

Page 12 Page 13
Industry Canada Statement
This device complies with RSS-210 of the Industry Canada Rules. Operation is
subject to the following two conditions: (1) This device may not cause harmful
interference, and (2) this device must accept any interference received, including
interference that may cause undesired operation.
Règlement d’Industry Canada
Ce dispositif est conforme à la norme CNR-210 d’Industrie Canada applicable
aux appareils radio exempts de licence. Son fonctionnement est sujet aux
deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage
préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y compris un
brouillage susceptible de provoquer un fonctionnement indésirable.
Caution: The device for the band 5150-5250 MHz is only for
indoor usage to reduce potential for harmful interference to
co-channel mobile satellite systems. High-power radars are allocated as primary
users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and
that these radars could cause interference and/or damage to LE-LAN devices.
Avertissement: Les dispositifs fonctionnant dans la bande 5 150-5 250 MHz
sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les
risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant
les mêmes canaux. De plus, les utilisateurs devraient aussi être avisés que les
utilisateurs de radars de haute puissance sont désignés utilisateurs principaux
(c.-à-d., qu’ils ont la priorité) pour les bandes 5 250-5 350 MHz et 5 650-5 850
MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux
dispositifs LAN-EL.
Radiation Exposure Statement:
This equipment complies with IC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and operated with
minimum distance 21cm between the radiator & your body.
Déclaration d’exposition aux radiations:
Cet équipement est conforme aux limites d’exposition aux rayonnements IC
établies pour un environnement non contrôlé. Cet équipement doit être installé et
utilisé avec un minimum de 21 cm de distance entre la source de rayonnement
et votre corps.
Grounding
Ensure your Fortinet product is connected and properly grounded to a lightning
and surge protector. WAN or LAN connections that enter the premises from
outside the building should be connected to an Ethernet CAT5 (10/100 Mb/s)
surge protector.
Shielded Twisted Pair (STP) Ethernet cables should be used whenever possible
rather than Unshielded Twisted Pair (UTP).
Do not connect or disconnect cables during lightning activity to avoid damage
to your Fortinet product or personal injury.
Electrostatic discharge (ESD) can damage Fortinet equipment. Only perform
the procedures described in this document from an ESD workstation. If no
such station is available, you can provide some ESD protection by wearing an
anti-static wrist strap and attaching it to an available ESD connector or other
bare metal object.
Caution: This equipment is to be connected only to PoE networks without
routing to the outside plant.
Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of
used batteries according to your local regulations.

Page 14
Register Your Product
If you did not register your Fortinet product, please register
your product now.
Register
Register your Fortinet product in order to receive:
•TechnicalSupport•Newproductfeatures•Protectionfromnew
threats
Enregistrer
Vous devez enregistrer le produit pour recevoir:
•Supporttechnique•Nouvellesfonctionnalitéesduproduit•
Protection contre de nouvelles menaces
Registra
La reistrazione ti permette di usufruire di:
•SupportoTecnico•Nuovefunzionalita•Proteezionedalleultime
minaccce
Registrar
Debe registrar el producto para recibir:
•Apoyotécnico•Nuevasfuncionalidadesdelproducto•
Protección contra ataques
登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御
请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护
Web: https://support.fortinet.com/
Toll free: 1 866 648 4638
Phone: [phone]
Fax: [phone]
Email: r[email protected]

Page 15
Product License Agreement
Product License Agreement
CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT (THE OR THIS “AGREEMENT”). USE OF FORTINET, INC. (“FORTINET”)
PRODUCT(S) AND ANY UPDATES THERETO, INCLUDING HARDWARE APPLIANCE PRODUCTS, SOFTWARE AND FIRMWARE INCLUDED
THEREIN BY FORTINET, AND STAND-ALONE SOFTWARE PRODUCTS SOLD BY FORTINET (TOGETHER, THE “PRODUCTS”) CONSTI-
TUTES ACCEPTANCE BY YOU OF THE PROVISIONS IN THIS AGREEMENT. FORTINET SHALL NOT BE BOUND BY ANY ADDITIONAL AND/
OR CONFLICTING PROVISIONS IN ANY ORDER, RELEASE, ACCEPTANCE OR OTHER WRITTEN CORRESPONDENCE OR OTHER WRITTEN
OR VERBAL COMMUNICATION UNLESS EXPRESSLY AGREED TO IN A WRITING SIGNED BY THE GENERAL COUNSEL OF FORTINET.
YOUR INSTALLATION OR USE OF ANY PRODUCT REPRESENTS AGREEMENT TO THE TERMS HEREIN, AS AMENDED OR UPDATED
FROM TIME TO TIME IN FORTINET’S DISCRETION BY FORTINET PUBLISHING AN AMENDED OR UPDATED VERSION. IF YOU DO NOT
AGREE TO THE PROVISIONS OF THIS AGREEMENT, YOU SHOULD PROMPTLY RETURN THE PRODUCTS TO THE LOCATION WHERE
YOU OBTAINED THEM FOR A FULL REFUND. IF YOU DO NOT AGREE TO All OF THE TERMS OF THIS AGREEMENT, DO NOT START THE
INSTALLATION PROCESS OR USE THE PRODUCTS.
1. License Grant.
This is a license, not a sales agreement, between you and Fortinet. The term “Software”, as used throughout this Agreement,
includes all Fortinet and third party rmware and software provided to you with, or incorporated into, Fortinet appliances and any
stand-alone software provided to you by Fortinet, with the exception of any open source software contained in Fortinet’s Products
which is discussed in detail in section 15 below, and the term “Software” includes any accompanying documentation, any updates
and enhancements of the software or rmware provided to you by Fortinet, at its option. Subject to proper payment to Fortinet
and your compliance with the other terms and conditions, Fortinet grants to you a non-transferable (except as provided in section
5 (“Transfer”) and section 13 (“Open Source Software”) below), non-exclusive license to use the Software solely for your internal
business purposes, in accordance with the terms set forth in this Agreement and subject to any further restrictions in Fortinet docu-
mentation, and solely on the Fortinet appliance, or, in the case of blades, CPUs or databases, on the single blade, CPU or database
on which Fortinet installed the Software or, for stand-alone Software, solely on a single computer running a validly licensed copy of
the operating system for which the Software was designed, or, in the case of blades, CPUs or databases, on a single blade, CPU or
database. For clarity, notwithstanding anything to the contrary, all licenses of Software to be installed on blades, CPUs or databases
are licensed on a per single blade, solely for one blade and not for multiple blades that may be installed in a chassis, per single CPU
or per single database basis, as applicable. The Software is “in use” on any Fortinet appliances when it is loaded into temporary
memory (i.e. RAM). Note that, for evaluation or beta Products for which Fortinet does not charge a fee, the payment requirement
does not apply and the Product is provided to you as-is and you are not entitled to any warranty, under section 6 (“Limited War-
ranty”) below or otherwise. You agree that, except for the limited, specic license rights granted in this section 1, you receive no
license rights to the Software.
2. Limitation on Use.
You may not attempt to, and, if you are a corporation, you are responsible to prevent your employees and contractors from attempt-
ing to, (a) modify, translate, reverse engineer, decompile, disassemble, create derivative works based on, sublicense, or distribute
the Software; (b) rent or lease any rights in the Software in any form to any third party or make the Software available or accessible
to third parties in any other manner; (c) except as provided in section 5, transfer assign or sublicense right to any other person or
entity, or (d) remove any proprietary notice, labels, or marks on the Software, Products, and containers.
3. Proprietary Rights.
All rights, title, interest, and all copyrights to the Software and any copy made thereof by you and to any Product remain with
Fortinet. You acknowledge that no title to the intellectual property in the Software or other Products is transferred to you and you will
not acquire any rights to the Software or other Products except for the specic license as expressly set forth in section 1 (“License
Grant”) above.
4. Term and Termination.
Except for evaluation and beta licenses or other licenses where the term of the license is limited per the evaluation/beta or other
agreement, the term of the license is for the duration of Fortinet’s copyright in the Software. Fortinet may terminate this Agreement,
and the licenses and other rights herein, immediately without notice if you breach or fail to comply with any of the terms and condi-
tions of this Agreement. You agree that, upon such termination, you will cease using the Software and any Product and either destroy
all copies of the Fortinet documentation or return all materials to Fortinet. The provisions of this Agreement, other than the license
granted in section 1 (“License Grant”), shall survive termination.
5. Transfer.
If you are a Fortinet contracted and authorized reseller or distributor of Products, you may transfer (not rent or lease unless speci-
cally agreed to in writing by Fortinet) the Software to one end user on a permanent basis, provided that: (i) you ensure that your
customer and the end user receives a copy of this Agreement, is bound by its terms and conditions, and, by selling the Product
or Software, you hereby agree to enforce the terms in this Agreement against such end user, (ii) you at all times comply with all
applicable United States export control laws and regulations, and (iii) you agree to refund any fees paid to you by an end user who
purchased Product(s) from you but does not agree to the terms contained in this EULA and therefore wishes to return the Product(s)
as provided for in this Agreement.
6. Limited Warranty.
Fortinet provides this limited warranty for its product only to the single end-user person or entity that originally purchased the
Product from Fortinet or its authorized reseller or distributor and paid for such Product. The warranty is only valid for Products which
are registered on Fortinet’s Support Website: https://support.fortinet.com. For the below software warranty to start, registration must
take place within three hundred sixty-ve (365) days from the date the Product was originally shipped from Fortinet’s facilities or
the warranty is null and void and will not be honored. For the hardware warranty, such warranty starts on the earlier of the date of
Product registration on Fortinet’s Support Website or ninety (90) days from the date that the Product was originally shipped from
Fortinet’s facilities. It is the Fortinet distributor’s and reseller’s responsibility to make clear to the end user the date the product
was originally shipped from Fortinet, and it is the end user’s responsibility to understand the original ship date from the party from
which the end user purchased the product. All warranty claims must be submitted in writing to Fortinet before the expiration of the
warranty term or such claims are waived in full, i.e. ninety (90) days from the earlier of registration or the automatically started term
for hardware and spare parts claims and three hundred sixty-ve (365) days from registration within three hundred sixty-ve (365)
days from shipment for software claims. Fortinet provides no warranty for any beta or evaluation Products, for any spare parts not

purchased directly from Fortinet by the end-user, for any accessories, or for any stand-alone software.
Fortinet warrants that the hardware portion of the Products, including spare parts unless noted otherwise (“Hardware”) will be free
from material defects in workmanship as compared to the functional specications for the period set forth as follows and applicable
to the Product type (“Hardware Warranty Period”): a three hundred sixty-ve (365) day limited warranty for the Hardware excluding
spare parts, and, for spare parts, solely a ninety (90) days limited warranty. Fortinet’s sole obligation shall be to repair or replace
the defective Hardware at no charge to the original owner. This obligation is exclusive of transport fees, labor or installation costs,
and any other cost which are not directly associated to the Product. Such repair or replacement will be rendered by Fortinet at an
authorized Fortinet service facility as determined by Fortinet. The replacement Hardware need not be new or of an identical make,
model, or part; Fortinet may, in its discretion, replace the defective Hardware (or any part thereof) with any reconditioned Product
that Fortinet reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware. The
Hardware Warranty Period for the repaired or replacement Hardware shall be for the greater of the remaining Hardware Warranty
Period or ninety days from the delivery of the repaired or replacement Hardware. If Fortinet determines in its reasonable discretion
that a material defect is incapable of correction or that it is not practical to repair or replace defective Hardware, the price paid by
the original purchaser for the defective Hardware will be refunded by Fortinet upon return to Fortinet of the defective Hardware. All
Hardware (or part thereof) that is replaced by Fortinet, or for which the purchase price is refunded, shall become the property of
Fortinet upon replacement or refund.
90-day Software Warranty: Fortinet warrants that the software portion of Hardware Products will substantially conform to Fortinet’s
then current functional specications for the Software, as set forth in the applicable documentation for a period of ninety (90)
days (“Software Warranty Period”), if the Software is properly installed on approved Hardware and operated as contemplated in its
documentation. Fortinet’s sole obligation shall be to repair or replace the non-conforming Software with software that substantially
conforms to Fortinet’s functional specications. Except as otherwise agreed by Fortinet in writing, the replacement Software is
provided only to the original licensee, and is subject to the terms and conditions of the license granted by Fortinet for the Software.
The Software Warranty Period shall extend for an additional ninety (90) days after any replacement software is delivered. If Fortinet
determines in its reasonable discretion that a material non-conformance is incapable of correction or that it is not practical to repair
or replace the non-conforming Software, the price paid by the original licensee for the non-conforming Software will be refunded
by Fortinet; provided that the non-conforming Software (and all copies thereof) is rst returned to Fortinet. The license granted
respecting any Software for which a refund is given automatically terminates immediately upon refund. For purpose of the above
hardware and software warranties, the term “functional specications” means solely those specications authorized and published
by Fortinet that expressly state in such specications that they are the functional specications referred to in this section 6 of this
Agreement, and, in the event no such specications are provided to you with the Software or Hardware, there shall be no warranty
on such Software.
7. Disclaimer of Other Warranties and Restrictions.
EXCEPT FOR THE LIMITED WARRANTY SPECIFIED IN SECTION 6 ABOVE, THE PRODUCT AND SOFTWARE ARE PROVIDED “AS-IS”
WITHOUT ANY WARRANTY OF ANY KIND INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY, IMPLIED OR EXPRESS WAR-
RANTY OF MERCHANTABILITY, OR WARRANTY FOR FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IF ANY IMPLIED
WARRANTY CANNOT BE DISCLAIMED IN ANY TERRITORY WHERE A PRODUCT IS SOLD, THE DURATION OF SUCH IMPLIED WARRANTY
SHALL BE LIMITED TO NINETY (90) DAYS FROM THE DATE OF ORIGINAL SHIPMENT FROM FORTINET. EXCEPT AS EXPRESSLY COV-
ERED UNDER THE LIMITED WARRANTY PROVIDED HEREIN, THE ENTIRE RISK AS TO THE QUALITY, SELECTION AND PERFORMANCE
OF THE PRODUCT IS WITH THE PURCHASER OF THE PRODUCT. NOTWITHSTANDING ANYTHING TO THE CONTRARY, THE HARDWARE
WARRANTY PERIOD DISCUSSED ABOVE DOES NOT APPLY TO CERTAIN FORTINET PRODUCTS, INCLUDING FORTIFONE WHICH HAS
A NINETY (90) DAY LIMITED WARRANTY AND THE SOFTWARE WARRANTY DOES NOT APPLY TO CERTAIN FORTINET PRODUCTS,
INCLUDING FortiWi-ONE AND VDOM SOFTWARE.
The warranty in Section 6 above does not apply if the Software, Product or any other equipment upon which the Software is
authorized to be used (a) has been altered, except by Fortinet or its authorized representative, (b) has not been installed, operated,
repaired, or maintained in accordance with instructions supplied by Fortinet, (c) has been subjected to abnormal physical or electri-
cal stress, misuse, negligence, or accident; or (d) is licensed for beta, evaluation, testing or demonstration purposes or for which
Fortinet does not charge a purchase price or license fee. In the case of beta, testing, evaluation or free Software or Product, the end
user acknowledges and agrees that such Software or Product may contain bugs or errors and could cause system failures, data loss
and other issues, and the end user agrees that such Software or Product is provided “as-is” without any warranty whatsoever, and
Fortinet disclaims any warranty or liability whatsoever. An end user’s use of evaluation or beta Software or Product is limited to thirty
(30) days from original shipment unless otherwise agreed in writing by Fortinet.
8. Governing Law.
This Agreement and the warranty herein shall be governed by the laws of the state of California, without regards to the conicts of
laws principles thereof. In all events the terms of this Agreement and the limitations of liability, disclaimers of warranties and other
restrictions herein shall be enforced to the maximum extent permissible by applicable law.
9. Limitation of Liability.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, FORTINET IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, TORT, STRICT
LIABILITY, INFRINGEMENT OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT OR SERVICE OR ANY
INCONVENIENCE OR DAMAGES OF ANY CHARACTER, WHETHER DIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL (INCLUDING,
BUT NOT LIMITED TO, DAMAGES FOR LOSS OF GOODWILL, LOSS OF PROFIT, LOSS OF OPPORTUNITY, LOSS OR DAMAGE RELATED
TO USE OF THE PRODUCT OR SERVICE IN CONNECTION WITH HIGH RISK ACTIVITIES, DAMAGE TO PERSONAL OR REAL PROPERTY,
WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, COMPUTER SECURITY BREACH, COMPUTER VIRUS INFECTION, LOSS OF
INFORMATION OR DATA CONTAINED IN, STORED ON, OR INTEGRATED WITH ANY PRODUCT INCLUDING ANY PRODUCT RETURNED TO
FORTINET FOR WARRANTY SERVICE) RESULTING FROM THE USE OF THE PRODUCT, RELATING TO WARRANTY SERVICE, OR ARISING
OUT OF ANY BREACH OF THE LIMITED WARRANTY IN SECTION 6 ABOVE, EVEN IF FORTINET HAS BEEN ADVISED OF THE POSSIBILITY
OF SUCH DAMAGES. THE SOLE REMEDY FOR A BREACH OF THE LIMITED WARRANTY IS REPAIR, REPLACEMENT OR REFUND OF THE
DEFECTIVE OR NON-CONFORMING PRODUCT AS SPECIFICALLY STATED IN SECTION 6 ABOVE.
10. Export Control; FCPA Compliance.
You are advised that the Software is of United States origin and subject to the United States Export Administration Regulations; diver-
sion contrary to United States law and regulation is prohibited. You agree to comply with all applicable international and national
laws that apply to the Software as well as end user, end-use, and destination restrictions issued by U.S. and other governments. For
additional information on U.S. export controls see www.bis.doc.gov. Fortinet assumes no responsibility or liability for your failure to
obtain any necessary export approvals. Furthermore, you represent that you understand, and you hereby agree to comply with, all
requirements of the U.S. Foreign Corrupt Practices Act and all other applicable laws. You represent that neither the United States
Bureau of Industry and Security nor any other governmental agency has issued sanctions against you or otherwise suspended,
revoked or denied your export privileges. You agree not to use or transfer the Software for any use relating to nuclear, chemical
or biological weapons, or missile technology, unless authorized by the United States Government by regulation or specic written
license. Additionally, you agree not to directly or indirectly export, import or transmit the Software contrary to the laws or regulations
of any other governmental entity that has jurisdiction over such export, import, transmission or use.
Page 16 Page 17

11. U.S. Government End Users.
The Software and accompanying documentation are deemed to be “commercial computer software” and “commercial computer
software documentation,” respectively, pursuant to DFAR Section 227.7202 and FAR Section 12.212, as applicable. Any use, modi-
cation, reproduction, release, performance, display or disclosure of the Software and accompanying documentation by the United
States Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly
permitted by the terms of this Agreement and its successors.
12. Tax Liability.
You agree to be responsible for the payment of any sales or use taxes imposed at any time whatsoever on this transaction.
13. General Provisions.
Except as specically permitted and required in section 5 (“Transfer”) above, you agree not to assign this Agreement or transfer
any of the rights or obligations under this Agreement without the prior written consent of Fortinet. This Agreement shall be binding
upon, and inure to the benet of, the successors and permitted assigns of the parties. This Agreement will be governed by the laws
of California, without regard to that body of law controlling conicts of law. The United Nations Convention on Contracts for the
International Sales of Goods is expressly excluded. In the event of any claim arising out of this Agreement, the parties herby submit
to the jurisdiction of the federal and state courts located in Santa Clara County, California, as applicable. This Agreement and other
Fortinet agreements may be amended or supplemented only by a writing that refers explicitly to the agreement signed on behalf of
both parties, or, for this Agreement, as otherwise expressly provided in the lead-in above Section 1 above, provided, notwithstanding
anything to the contrary and except for this Agreement which may be amended or updated as expressly provided in the lead-in
above Section 1 above, for any amendment or other agreement to be binding on Fortinet, such amendment or other agreement must
be signed by Fortinet’s General Counsel. No waiver will be implied from conduct or failure to enforce rights nor effective unless in a
writing signed on behalf of the party against whom the waiver is asserted. If any part of this Agreement is found unenforceable, that
part will be enforced to the maximum extent permitted, the remainder shall continue in full force and effect. You acknowledge that
you have read this Agreement, understand it, and agree to be bound by its terms and conditions.
14. Privacy.
By entering into this Agreement, you agree and consent that Fortinet may collect, retain and use personal information supplied,
including name, address, and e-mail address of individuals and payment details and other information. Personal information will be
used primarily to provide services and product functionality to end users. Fortinet may also use personal information for additional
communication, subject to an opt-out indication in writing not to accept such communications from Fortinet and subject to ap-
plicable laws. Fortinet may engage other companies and individuals to perform functions on its behalf, such as payment processing,
order fulllment, marketing programs and customer service. Fortinet may share personal information with such subcontractors in
order to perform these and other functions, but such subcontractors may not use your personal information for other purposes, un-
less you agree. By entering into this Agreement, you agree and consent to the transfer the supplied personal information to Fortinet’s
ofces in the United States and elsewhere, for the purposes stated above. For more detailed information on the collection, use and
transfer of your personal information, and for information on how to opt out of or unsubscribe from the communications described
above, please read the Fortinet privacy policy on the Fortinet web site (www.Fortinet.com).
15. Open Source Software.
Fortinet’s products may include software modules that are licensed (or sublicensed) to the user under the GNU General Public
License, Version 2, of June 1991 (“GPL”) or GNU Lesser General Public License, Version 2.1, of February 1999 (“LGPL”) or other
open source software licenses which, among other rights, permit the user touse, copy, modify and redistribute modules, or portions
thereof, and may also require attribution disclosures and access to the source code (“Open Source Software”). The GPL requires
that for any Open Source Software covered under the GPL, which is distributed to someone in an executable binary format, that the
source code also be made available to those users. For any Open Source Software covered under the GPL, the source code is made
available on this CD or download package. If any Open Source Software licenses require that Fortinet provide rights to use, copy
or modify a Open Source Software program that are broader than the rights granted in this agreement, then such rights shall take
precedence over the rights and restrictions herein. Fortinet will provide, for a charge reecting our standard distribution costs, the
complete machine-readable copy of the modied software modules. To obtain a complete machine-readable copy, please send your
written request, along with a check in the amount of US $25.00, to General Public License Source Code Request, Fortinet, Inc., 1090
Kifer Rd, Sunnyvale, CA 94086 USA. In order to receive the modied software modules, you must also include the following informa-
tion: (a) Name, (b) Address, (c) Telephone number, (d) E-mail Address, (e) Product purchased (if applicable), (f) Product Serial Number
(if applicable). All open source software modules are licensed free of charge. There is no warranty for these modules, to the extent
permitted by applicable law. The copyright holders provide these software modules “AS-IS” without warranty of any kind, either
expressed or implied. In no event will the copyright holder for the open source software be liable to you for damages, including any
special, incidental or consequential damages arising out of the use or inability to use the software modules, even if such holder
has been advised of the possibility of such damages. A full copy of this license, including additional open source software license
disclosures and third party license disclosures applicable to certain Fortinet products, may obtained by contacting Fortinet’s Legal
Department at [email protected].
GNU GENERAL PUBLIC LICENSE GNU GENERAL PUBLIC LICENSE
Version 2, June 1991
Copyright (C) 1989, 1991 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distrib-
uted under the terms of this General Public License. The “Program”, below, refers to any such program or work, and a “work based
on the Program” means either the Program or any derivative work under copyright law: that is to say, a work containing the Program
or a portion of it, either verbatim or with modications and/or translated into another language. (Hereinafter, translation is included
without limitation in the term “modication”.) Each licensee is addressed as “you”.
Activities other than copying, distribution and modication are not covered by this License; they are outside its scope. The act of
running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the
Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.
1. You may copy and distribute verbatim copies of the Program’s source code as you receive it, in any medium, provided that you
conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all
the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this
License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer
warranty protection in exchange for a fee.
2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and
distribute such modications or work under the terms of Section 1 above, provided that you also meet all of these conditions:
a) You must cause the modied les to carry prominent notices stating that you changed the les and the date of any change.
b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any
Page 17