Pakedge Device & Software K60D User manual

USER MANUAL
VERSION 1.1
PAKEDGEDEVICE&SOFTWARE INC.
K60D UTM Manual
PRECONFIGURED AUDIO/VIDEO BRIDGING ROUTER

1
FCC Declaration of Conformity
Pakedge Device & Software, Inc., 3847 Breakwater Avenue, Hayward, CA, declares under sole
responsibility that the R60Dcomply with 47 CFR Parts 2 and 15 of the FCC Rules as a Class B digital
device. These devices comply with Part 15 of FCC Rules. Operation of the devices is subject to the
following two conditions: (1) These devices may not cause harmful interference, and (2) these devices
must accept any interference that may cause undesired operation.
WARNING: TO PREVENT FIRE OR SHOCK HAZARD, DO NOT EXPOSE THIS PRODUCT TO RAIN OR
MOISTURE. THE UNIT MUST NOT BE EXPOSED TO DRIPPING OR SPLASHING WATER. CAUTION: DO
NOT OPEN THE UNIT. DO NOT PERFORM ANY SERVICING OTHER THAN THAT CONTAINED IN THE
INSTALLATION AND TROUBLESHOOTING INSTRUCTIONS. REFER ALL SERVICING TO QUALIFIED
SERVICE PERSONNEL. CAUTION: THIS DEVICE MUST BE INSTALLED AND USED IN STRICT ACCORDANCE
WITH THE MANUFACTURER’S INSTRUCTIONS AS DESCRIBED IN THE USER DOCUMENTATION THAT
COMES WITH THE PRODUCT. WARNING: POSTPONE INSTALLATION UNTIL THERE IS NO RISK OF
THUNDERSTORM OR LIGHTNING ACTIVITY IN THE AREA.
SAFETY PRECAUTIONS:
When using this device, always follow basic safety precautions to reduce the risk of fire, electric shock,
and injury to persons, including the following:
Comply with all warning and caution statements in the instructions.
Retain instructions for future reference.
Observe all warning and caution symbols that are affixed to this equipment.
Comply with all instructions that accompany this equipment.
Upon completion of any service or repairs to this product, ask the service technician to perform
safety checks to determine that the product is in safe operating condition.
Installation of this product must be in accordance with national wiring codes and must conform
to local regulations.
Avoid using this product during an electrical storm. There may be a risk of electric shock from
lightning. For added protection for this product during a lightning storm, or when it is left
unattended and unused for long periods of time, unplug the power supply and disconnect the
CAT5e.This will prevent damage to the product due to lightning and power surges.
Give particular attention to all safety precautions.
Operate this product only from the type of power source indicated on the product’s marking
label. If you are not sure what type of power is supplied to your home, consult your dealer or
local power company.
It is recommended that the customer install an AC surge protector in the AC outlet to which this
device is connected. This is to avoid damage to the equipment from lightning strikes and other
electrical surges.
Wipe the unit with a clean, dry cloth. Never use cleaning fluid or similar chemicals. Do not spray
cleaners directly on the unit or use compressed air to remove dust.
Keep the device away from excessive heat and humidity and keep the device free from vibration
and dust.
Do not directly cover the device or block the airflow to the device with insulation or any other
objects.

2
CONTENTS
Introduction ........................................................................................................................................3
Customer Service and Technical Support ............................................................................................. 4
UTM Activation.................................................................................................................................... 5
Web Filtering....................................................................................................................................... 5
Changing User Password.................................................................................................................... 10
Application Control............................................................................................................................ 11
AntiVirus ........................................................................................................................................... 14
Disabling UTM for A Vlan ................................................................................................................... 15
Appendix A: FAQs .............................................................................................................................. 17
Appendix B: Specifications................................................................................................................. 18
R60D Router .................................................................................................................................. 18
Appendix C: Limited Warranty ........................................................................................................... 49

3
INTRODUCTION
The purpose of this manual is to assist with the configuration of the Universal Threat Management
(UTM) features of the K60D router. This manual will cover the following topics.
Web filtering
Application filtering
Antivirus
Unified Threat Management (UTM) is the ability of a comprehensive security product to include
protection again multiple threats simultaneously. The K60D includes a firewall, antivirus scanning, web
filtering, and application control in a single integrated package.
NOTE: This manual is intended to be a supplement to the full K60D manual. If you require assistance
with any setup beyond the UTM features, please refer to the full K60D manual which is available on the
dealer portal.
http://pakedge.com/for-dealers-portal.html

4
CUSTOMER SERVICE AND T ECHN ICAL SUPPORT
Pakedge Device & Software, Inc. is committed to providing you with exceptional support on all of our
products. If you wish to speak with one of our representatives, you may contact us at:
Customer Service
Email: [e-mail]
Phone: [phone]
Technical Support
Email: [email protected]
Phone: [phone]
Website: www.pakedge.com
Visit our website for up-to-date support information.
Please be prepared to provide your product's model and serial number when contacting Pakedge
Support. Your model and serial numbers are printed on a label located on the electronic housing.
Pakedge Device & Software, Inc.
3847 Breakwater Avenue
Hayward, CA 94545
USA

5
UTM ACTIVATION
In order to use the UTM features, your K60D must be registered and have a UTM license applied to it. If
your K60D is not registered, you may register it on the Pakedge dealer portal. Note: It can take up to 24
hours for the registration to take effect. Navigate to System->Dashboard->Status. The widget titled
License Information will display UTM license information, such as the expiration date.
WEB FILTERING
Web Filtering allows you to control the content viewed in browsers on the network. For example, you
can block social media websites or adult content. To configure web filtering options take the following
steps.
1. Navigate to Security Profiles->Web Filter->Profiles.

6
2. If you purchased the UTM configuration on the K60D there will be a default Pakedge profile,
which is preconfigured for you. Make sure this profile is selected. If you did not purchase the
UTM configuration you can simply use the default profile and configure it to your needs.
3. There are several categories that the K60D uses to filter websites. The following image
illustrates this.
4. Click on a category to expand it and view the sub categories underneath it.

7
5. Right click on a subcategory and you will see a small menu. You can use this menu to allow or
block this subcategory on the network. As an example, right click Explicit Violence and click
Allow.
6. The Explicit Violence subcategory is now labeled with a green check mark. This indicates that
the websites that match this subcategory are now allowed on the network.

8
7. You can allow or deny an entire category, which will cause of the subcategories underneath it to
be allowed or denied. For example, right click the Potentially Liable category. Click Allow.
8. The entire category is now allowed on the network.
9. As part of the UTM configuration, there will be two groups that are preconfigured:
Admin
Teen
The Admin group will have a username Admin. The Teen group will have a username Teen. The
password to both accounts will be pakedgef

9
10. The following table summarizes the categories that each user has access to by default:
User
Category
Admin
Alternative Beliefs, Abortion, Adult Materials,
Advocacy Organizations, Gambling, Extremist
Groups, Nudity and Risque, Pornography,
Tasteless, Weapons, Homosexuality,
Marijuana, Sex Education, Alcohol, Tobacco
Teen
Swimsuits, Sports Hunting and War Games,
Downloads, File Sharing, Streaming Media, P2P
File Sharing, Internet Telephony, Web based
email, Social Networking, Web chat, Instant
Messaging, Newsgroups and Message Boards
If a user tries to access any websites that fall into any of the categories listed above, the router
will require authentication. Depending on the credentials entered, the router will either allow or
deny access to that website. If a website does not fall into any of the categories in the above
table, the router will not request any authentication to access that website.
11. Once you are done making changes to the Pakedge profile, click Apply.
12. You must ensure that the web filtering is enabled in the policy section. Navigate to Policy-
>Policy->Policy.
13. You will see a list of the default policies that come with the Pakedge UTM configuration.

10
14. By default, Web Filtering will be enabled in the default policies with the UTM configuration. You
can scroll to the right to confirm this. With the web filtering profile configured and enabled, the
router will begin to filter web sites.
CHANGIN G USER PASSWORD
You can change the password to the default Admin or Teen user account. To do this, take the following
steps.
1. Navigate to User & Device->User->User Definition.
2. As an example, we will change the password to the Teen account. Double click on the Teen
username.

11
3. Remove the current password and enter the new password. Click Ok.
4. The password has now been updated for the Teen user.
APPLICATION CONTROL
Application control will allow you to block applications that do not use web browsers. This will allow you
to block applications on mobile devices such as Facebook, Twitter, Instagram and more. Take the
following steps to configure application control.
1. Navigate to Security Profiles->Application Control->Application Sensors.
2. If you purchased the UTM configuration on the K60D there will be a default Pakedge profile,
which is preconfigured for you. Make sure this profile is selected at the upper right hand corner.
If you did not purchase the UTM configuration you can simply use the default profile and
configure it according to your needs.

12
3. You can block applications by categories. For example, double click on the application policy that
blocks P2P and social media. This policy is available on the default Pakedge UTM configuration.
4. Under this policy, the P2P and Social Media options will be checked.
5. You can block additional categories by simply checking the appropriate check box. Check the IM
box. This will block instant message applications such as AOL instant messaging.
6. Under the Technology box, there will be an option titled Browser-Based. This option allows the
router to block applications that can be accessed with a web browser. For example, if you are
blocking social media, the application control will block the mobile Facebook application found
in iOS or Android, but it will not block Facebook from being accessed with a web browser. The
Browser-Based option will allow the application control to block any Facebook application, and
it will also block Facebook from being accessed from a web browser.

13
7. Scroll down to the bottom of the page. You will notice that the Action is set to Block, meaning
that any applications that match this policy will be blocked.
8. Click OK to apply the changes.
9. Once you have finished making changes to the application profile, you must ensure that the
application control is enabled in the policy section. Navigate to Policy->Policy->Policy.
10. You will see a list of the default policies that come with the Pakedge UTM configuration.
11. By default, UTM will be enabled in the default policies if you purchased the UTM configuration.
You can scroll to the right to confirm this. With the application control profile configured and
enabled, the router will begin to block applications that match the policies in the application
control profile.

14
ANTIVIRUS
Antivirus will allow you to provide network wide antivirus for all devices. This will provide an extra layer
of security on your network. Note: It is recommended that you still install antivirus software on any
computers on the network. The antivirus feature on the router is intended to provide an extra layer of
security. It is not intended to completely replace any antivirus installed on computers. To configure
Antivirus options take the following steps.
1. Navigate to Security Profiles->AntiVirus->Profiles.
2. The Pakedge UTM configuration will have all of the antivirus options configured for you under
the default Pakedge profile. The following image illustrates this. If you wish to make any
modifications to the defaults values, you may do so here. Click Apply down below once you are
finished.

15
3. The Antivirus feature will be enabled in the policy section by default. With the Antivirus profile
configured and enabled, the router will begin to inspect data.
DISABLING UTM FOR A VLAN
You can disable UTM for any of the preconfigured VLANs. To disable UTM for a VLAN take the following
steps.
1. Navigate to Policy->Policy->Policy.
2. As an example, we will disable all UTM features for VLAN2. Edit the policy that allows internet
access for VLAN2. Simply click on the policy and click Edit towards the top.

16
3. Deselect all of the options under Security Profiles. Click OK. UTM has now been disabled on
VLAN2.

17
APPENDIX A: FAQS
1- What is the difference between the standard FortiGate 60D and the preconfigured
Pakedge version (R60D)?
The preconfigured Pakedge version comes with a separate login screen. This login
screen is limited to a basic set of options to get the network up and running. This
allows the powerful Fortigate router/security appliance to be installed in any home
without expert help.
2- Who provides support for the R60D?
Pakedge provides the basic support for the Pakedge pre-configuration. If an
integrator wants to perform any configuration beyond it, they would have to contact
Fortinet.
3- Do I need to purchase antivirus for my router to work?
The router will work without an antivirus subscription. However, the router will not
reach its full potential and malware could potentially penetrate your network. An
antivirus subscription gives the router perimeter network protection for as long as
the subscription is active.
4- Can I purchase the antivirus only, without Fortinet support?
No, Fortinet automatically supplies support when antivirus is purchased.
5- Does the R60D have UPnP?
No, the R60D does not support UPnP. UPnP is seen as a security risk for business-
class routers.

18
AP PENDIX B: SP ECIF IC ATIONS
R60D ROUTER
Interfaces:
10/100/1000 Internal Switch Interfaces (Copper, RJ-45): 7
10/100/1000 WAN Interfaces (Copper, RJ-45): 2
10/100/1000 DMZ Interfaces (Copper, RJ-45): 1
USB Interfaces: 2 (1 Type-A, 1 Type-B)
Internal Storage 8 GB
System Performance:
Firewall Throughput (1518 byte UDP packets) 1.5Gbps
Firewall Throughput (512 byte UDP packets) 1.5Gbps
Firewall Throughput (64 byte UDP packets) 1.5Gbps
IPSec VPN Throughput (512 byte packets) 1Gbps
SSL VPN Throughput 30 Mbps
Intrusion Protection Security Throughput 200 Mbps
Antivirus Throughput (Proxy) 35 Mbps
Gateway-to-Gateway IPSec VPN Tunnels 200 Mbps
Client-to-Gateway IPSec VPN Tunnels 500 Mbps
Max Concurrent Firewall Sessions 500,000
New Sessions/Sec 4,000
Max Concurrent SSL-VPN Users 100
Firewall Policies 5,000
Virtual Domains (Max / Default) 10 / 10

19
Environment:
Power Required 100-240 VAC, 50-60 Hz, 1.5
Amp Max
Power Consumption (AVG/MAX) 11.7/14 W
Heat Dissipation 40 BTU/h
Operating Temperature 32 –104° F (0 –40° C)
Storage Temperature -13 –158° F (-25 –70° C)
Humidity 5%-90% non-condensing
NETWORKING FEATURES
DHCP/PPPoE Client/Server
Port Forwarding
Static/Dynamic Routing*
Traffic Shaping
Radius, LDAP, Active Dir
Local DB
User Group Support
SECURITY FEATURES
Gateway Antivirus Protection
(Virus, Spyware, Trojan)
Integrated IPS (signature & anomaly)
Integrated URL Filtering
Integrated Spam Filtering
VPN (IPSec, SSL, PPTP)
VOIP Security (H323, SIP)
MECHANICAL
Dimensions (dimensions are approximate)
Height x Width x Length: 1.50 x 8.5 x 5.83 in. (38 x 216
x 148mm)
Weight 1.9 lb (0.9 kg)
OPTIONAL SUBSCRIPTION SERVICES
Automatic and Scheduled
Antivirus and IPS Updates
URL Categorizing
Anti-Spam RBL/SURBL
Web Filtering
CERTIFICATIONS
ICSA: Firewall, IPSec, SSL, Antivirus, IPS
COMPLIANCE
FCC Class A, Part 15, UL/CUL, C Tick