Summary of the content on the page No. 1
INSTALL GUIDE
FortiGate-50A/50B,
FortiWiFi-50B and
FortiGate-100
FortiOS 3.0 MR4
www.fortinet.com
Summary of the content on the page No. 2
FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 Install Guide FortiOS 3.0 MR4 31 August 2007 01-30004-0265-20070831 © Copyright 2007 Fortinet, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of Fortinet, Inc. Trademarks Dynamic Threat Prevention System (DT
Summary of the content on the page No. 3
Contents Contents Contents.............................................................................................. 3 Introduction ........................................................................................ 7 About the FortiGate unit ................................................................................... 7 FortiGate-50A................................................................................................ 7 FortiGate-50B....................................
Summary of the content on the page No. 4
Contents Connecting to the FortiGate unit ................................................................... 21 Web-based manager .................................................................................. 21 Command line interface .............................................................................. 21 Connecting to the web-based manager ...................................................... 21 Command line interface .............................................................
Summary of the content on the page No. 5
Contents Next steps ........................................................................................................ 46 Set the date and time.................................................................................. 46 Updating antivirus and IPS signatures........................................................ 47 Updating antivirus and IPS signatures from the web-based manager . 47 Updating the IPS signatures from the CLI............................................ 48 Scheduling
Summary of the content on the page No. 6
Contents Reverting to a previous firmware version..................................................... 67 Reverting to a previous firmware version using the web-based manager .. 67 Reverting to a previous firmware version using the CLI ............................. 68 Installing firmware images from a system reboot using the CLI................ 70 Restoring the previous configuration .......................................................... 72 The FortiUSB key...................................
Summary of the content on the page No. 7
Introduction About the FortiGate unit Introduction Welcome and thank you for selecting Fortinet products for your real-time network protection. FortiGate™ Unified Threat Management System improves network security, reduces network misuse and abuse, and helps you use communications resources more efficiently without compromising the performance of your network. FortiGate Unified Threat Management Systems are ICSA-certified for firewall, IPSec, and antivirus services. The FortiGate Unified T
Summary of the content on the page No. 8
About the FortiGate unit Introduction FortiGate-50B The FortiGate-50B is designed for telecommuters and small remote offices with INTERNAL WAN1 WAN2 LINK / ACT 10 to 50 employees. The POWER STATUS 10/100 1 2 3 FortiGate-50B unit includes two WAN ports for a redundant connection to the Internet. It also features a 3-port switch for connecting additional network connections and supports HA configurations with additional FortiGate-50B units. FortiWiFi-50B The FortiWiFi-50B is designed for
Summary of the content on the page No. 9
Introduction Fortinet Family Products Fortinet Family Products Fortinet offers a family of products that includes both software and hardware appliances for a complete network security solution including mail, logging, reporting, network management, and security along with FortiGate Unified Threat Management Systems. For more information on the Fortinet product family, go to www.fortinet.com/products. FortiGuard Subscription Services FortiGuard Subscription Services are security services crea
Summary of the content on the page No. 10
About this document Introduction FortiAnalyzer FortiAnalyzer™ provides network administrators with the information they need to enable the best protection and security for their networks and monitor against attacks and vulnerabilities. The FortiAnalyzer unit features include: • collecting logs from FortiGate, FortiManager, FortiMail devices and syslog devices • generating reports on network use, vulnerabilities, and traffic patterns. • storing quarantined files from a FortiGate unit and archi
Summary of the content on the page No. 11
Introduction About this document This document contains the following chapters: • Installing the FortiGate unit – Describes unpacking, setting up, and powering on a FortiGate unit. • Factory defaults – Provides the factory default settings for the FortiGate unit • Configuring the FortiGate unit – Provides an overview of the operating modes of the FortiGate unit and how to integrate the FortiGate unit into your network. • Configuring the modem interface – Describes how to configure and use a
Summary of the content on the page No. 12
Fortinet documentation Introduction Convention Example Keyboard input In the Gateway Name field, type a name for the remote VPN peer or client (for example, Central_Office_1). Code examples config sys global set ips-open enable end CLI command syntax config firewall policy edit id_integer set http_retry_count set natip end Document names FortiGate Administration Guide Menu commands Go to VPN > IPSEC > Phase 1 and select Create New. Program output Welcome! Vari
Summary of the content on the page No. 13
Introduction Customer service and technical support • FortiGate High Availability User Guide Contains in-depth information about the FortiGate high availability feature and the FortiGate clustering protocol. • FortiGate IPS User Guide Describes how to configure the FortiGate Intrusion Prevention System settings and how the FortiGate IPS deals with some common attacks. • FortiGate IPSec VPN User Guide Provides step-by-step instructions for configuring IPSec VPNs using the web- based manager. •
Summary of the content on the page No. 14
Customer service and technical support Introduction FortiGate-50A/50B, FortiWiFi-50B and FortiGate-100 FortiOS 3.0 MR4 Install Guide 14 01-30004-0265-20070831
Summary of the content on the page No. 15
Installing the FortiGate unit Package Contents Installing the FortiGate unit This section provides information on installing and setting up the FortiGate unit on your network. This chapter includes the following sections: • Package Contents • Mounting • Powering on the FortiGate unit • Connecting to the FortiGate unit Package Contents Review the contents of your FortiGate package to ensure all components were included. FortiGate-50A The FortiGate-50A package contains the following items: • For
Summary of the content on the page No. 16
Package Contents Installing the FortiGate unit Table 1: Technical Specifications Dimensions 8.63 x 6.13 x 1.38 in. (21.9 x 15.6 x 3.5 cm) Weight 1.5 lb. (0.68 kg) Power Requirements DC input voltage: 12V DC input current: 3A Environmental Operating temperature: 32 to 104 F (0 to 40 C) Specifications Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 95% non-condensing FortiGate-50B The FortiGate-50B package contains the following items: • FortiGate-50B Unified Threat Management Syste
Summary of the content on the page No. 17
Installing the FortiGate unit Package Contents FortiWiFi-50B The FortiWiFi-50B package contains the following items: • FortiWiFi-50B Unified Threat Management System • one gray straight-through Ethernet cable (Fortinet part number CC300249) • one RJ-45 to DB-9 serial cable (Fortinet part number CC300247) • one AC adapter and power cable • two mounting brackets • FortiWiFi-50B QuickStart Guide • Fortinet Tools and Documentation CD Figure 3: FortiWiFi-50B package contents Back Front INTERNAL WAN1
Summary of the content on the page No. 18
Package Contents Installing the FortiGate unit Figure 4: FortiGate-100 package contents Front Ethernet Cables: Orange - Crossover Grey - Straight-through POWER INTERNAL EXTERNAL DMZ STATUS Null-Modem Cable (RS-232) Internal, External, DMZ Status Power Interfaces LED LED Back Power Cable Power Supply DMZ External Internal DC +12V 5A Console QuickStart Guide INTERNAL EXTERNAL DMZ POWER STATUS FortiGate-100 Copyright 2006 Fortinet Incorporated. All rights reserved. Trademarks Products mentioned in
Summary of the content on the page No. 19
Installing the FortiGate unit Mounting Mounting Adhere the rubber feet included in the package to the underside of the FortiWiFi unit, near the corners of the device. Place the FortiGate unit on any flat, stable surface. Ensure the unit has at least 1.5 inches (3.75 cm) of clearance on each side to ensure adequate airflow for cooling. Alternatively, you can use the mounting brackets to mount the FortiWiFi-50B to a wall. To attach the mounting brackets, place the bracket so that the flat port
Summary of the content on the page No. 20
Powering on the FortiGate unit Installing the FortiGate unit Table 5: FortiGate-50A and FortiGate-100 LED indicators LED State Description Power Green The FortiGate unit is powered on. Off The FortiGate unit is powered off. Status Flashing The FortiGate unit is starting up. Off The FortiGate unit is running normally. Internal Green The correct cable is in use, and the connected equipment has power. External DMZ (FortiGate-100) Flashing Network activity at this interface. green Off No link esta
