Fortinet 50A/50B manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

Ir para a página of

Bom manual de uso

As regras impõem ao revendedor a obrigação de fornecer ao comprador o manual com o produto Fortinet 50A/50B. A falta de manual ou informações incorretas fornecidas ao consumidor são a base de uma queixa por não conformidade do produto com o contrato. De acordo com a lei, pode anexar o manual em uma outra forma de que em papel, o que é frequentemente utilizado, anexando uma forma gráfica ou manual electrónicoFortinet 50A/50B vídeos instrutivos para os usuários. A condição é uma forma legível e compreensível.

O que é a instrução?

A palavra vem do latim "Instructio" ou instruir. Portanto, no manual Fortinet 50A/50B você pode encontrar uma descrição das fases do processo. O objetivo do manual é instruir, facilitar o arranque, a utilização do equipamento ou a execução de determinadas tarefas. O manual é uma coleção de informações sobre o objeto / serviço, um guia.

Infelizmente, pequenos usuários tomam o tempo para ler o manual Fortinet 50A/50B, e um bom manual não só permite conhecer uma série de funcionalidades adicionais do dispositivo, mas evita a formação da maioria das falhas.

Então, o que deve conter o manual perfeito?

Primeiro, o manual Fortinet 50A/50B deve conte:
- dados técnicos do dispositivo Fortinet 50A/50B
- nome do fabricante e ano de fabricação do dispositivo Fortinet 50A/50B
- instruções de utilização, regulação e manutenção do dispositivo Fortinet 50A/50B
- sinais de segurança e certificados que comprovam a conformidade com as normas pertinentes

Por que você não ler manuais?

Normalmente, isso é devido à falta de tempo e à certeza quanto à funcionalidade específica do dispositivo adquirido. Infelizmente, a mesma ligação e o arranque Fortinet 50A/50B não são suficientes. O manual contém uma série de orientações sobre funcionalidades específicas, a segurança, os métodos de manutenção (mesmo sobre produtos que devem ser usados), possíveis defeitos Fortinet 50A/50B e formas de resolver problemas comuns durante o uso. No final, no manual podemos encontrar as coordenadas do serviço Fortinet na ausência da eficácia das soluções propostas. Atualmente, muito apreciados são manuais na forma de animações interessantes e vídeos de instrução que de uma forma melhor do que o o folheto falam ao usuário. Este tipo de manual é a chance que o usuário percorrer todo o vídeo instrutivo, sem ignorar especificações e descrições técnicas complicadas Fortinet 50A/50B, como para a versão papel.

Por que ler manuais?

Primeiro de tudo, contem a resposta sobre a construção, as possibilidades do dispositivo Fortinet 50A/50B, uso dos acessórios individuais e uma gama de informações para desfrutar plenamente todos os recursos e facilidades.

Após a compra bem sucedida de um equipamento / dispositivo, é bom ter um momento para se familiarizar com cada parte do manual Fortinet 50A/50B. Atualmente, são cuidadosamente preparados e traduzidos para sejam não só compreensíveis para os usuários, mas para cumprir a sua função básica de informação

Índice do manual

  • Página 1

    www.fortinet.com For tiGate-50A/ 50B, For tiWiF i-50B and FortiG at e -1 00 FortiO S 3 .0 MR 4 INST ALL GUIDE[...]

  • Página 2

    FortiGate-50A/50B, FortiW iFi-50B and FortiGate-100 Inst all Guide FortiOS 3.0 MR4 31 August 2007 01-30004-02 65-20070831 © Copyright 2007 Fortine t, Inc. All rights reserved. No p art of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mec[...]

  • Página 3

    Contents FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 3 Content s Contents...................................................................... .............. .......... 3 Introduction ............... ................................. .............................. .......... 7 About th[...]

  • Página 4

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 4 01-30004-0265-200708 31 Contents Connecting to the FortiGate unit ............................... ................ ................... . 21 Web-based manager ................. ................ ................... ................ .............. 21 Command line inter[...]

  • Página 5

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 5 01-30004-0265-200708 31 Contents Next steps ................... ................. ................ ............. ................ ................ ....... 46 Set the date and ti me ....... ................ ............. ................ ................ ............[...]

  • Página 6

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 6 01-30004-0265-200708 31 Contents Reverting to a previous firmware version ....... .................... ................ .......... 67 Reverting to a pr evious firmware ve rsion using the web-based manager .. 67 Reverting to a previous firmware vers ion using the CLI[...]

  • Página 7

    Introduction About the FortiGate unit FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 7 Introduction Welcome an d thank you for selecting Fortinet product s for your real-time network protection. FortiGate™ Unified Threat Management System improves n etwork security , reduces network misu[...]

  • Página 8

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 8 01-30004-0265-200708 31 About the FortiGate unit Introduction FortiGate-50B The FortiGate-50B is designed for te lecommuters and small remote offices with 10 to 50 employees. The FortiGate-50B unit includes two WAN ports for a redundant connection to the Interne t. [...]

  • Página 9

    Introduction Fortinet Family Products FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 9 Fortinet Family Product s Fortinet of fers a family of products that includes both sof tware and hardware appliances for a complete networ k secu rity solution including mail, logging, reporting, netwo r[...]

  • Página 10

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 10 01-30004-0265-200708 31 About this document Introduction FortiAnalyzer FortiAnalyze r™ provides ne twork admin istrators with t he information they need to enable the be st protection an d security for their networks and moni tor against attacks and vulnerabiliti[...]

  • Página 11

    Introduction About this document FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 11 This document contain s the following chapters: • Installing the FortiGate unit – Describes unp acking, setting up, and powering on a FortiGate unit. • Factory defaults – Provides the factory default[...]

  • Página 12

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 12 01-30004-0265-200708 31 Fortinet documentation Introduction Fortinet document ation The most up-to-da te publications and previous releases of Fortinet product documenta tion are available from the Fort inet T echnical Docu mentation web site at http://docs.fortic [...]

  • Página 13

    Introduction Customer service a nd technical su pport FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 13 • FortiGate High Availability Us er Guide Contains in-depth informat ion about the FortiGate hi gh availability feature and the FortiGate clustering prot ocol. • FortiGate IPS User G[...]

  • Página 14

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 14 01-30004-0265-200708 31 Customer service and technical support Introduction[...]

  • Página 15

    Installing the FortiGate unit Package Contents FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 15 Inst alling the FortiGate unit This section provides inform ation on installing and sett ing up the FortiGate unit on your network. This chapter inclu des the following sections: • Package Co[...]

  • Página 16

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 16 01-30004-0265-200708 31 Package Contents Insta lling the FortiGat e unit T able 1: T echnical Specifications FortiGate-50B The FortiGate-50B package con tains the following items: • FortiGate -50B Unified Threat Ma nagement Syst em • one gray straight-th rough [...]

  • Página 17

    Installing the FortiGate unit Package Contents FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 17 FortiWiFi-50B The FortiWiFi-50B p ackage conta ins the following items: • FortiWiFi-50B Unified Threat Manage ment System • one gray straight-thr ough Ethernet ca ble (Fortinet part nu mber[...]

  • Página 18

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 18 01-30004-0265-200708 31 Package Contents Insta lling the FortiGat e unit Figure 4: FortiGate-10 0 p ackage con tents T able 4: T echnical Specifications Warnings This device complies with part 15 of the FCC Rules. Operation is subject to the following two condition[...]

  • Página 19

    Installing the FortiGate unit Mounting FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 19 Mounting Adhere the rubber fee t included in the package to the under side of the FortiWiFi unit, near the corners of the device. Place the FortiGate unit on a ny flat, stable surface. En sure the unit[...]

  • Página 20

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 20 01-30004-0265-200708 31 Powering on the FortiGate unit Insta lling the FortiGat e unit T able 5: FortiGate-50A and F ortiGate-100 LED indicators T able 6: FortiGate-50B and FortiWiFi-50B LED indicators Power over Ethernet Power over Ethernet (P oE) is a meth od of [...]

  • Página 21

    Installing the FortiGate unit Powering off the FortiGate unit FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 21 Powering off the FortiGate unit Always shut down the FortiGate operatin g system properly bef ore turning off the power switch to avoid po te ntial hardware problems. T o power [...]

  • Página 22

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 22 01-30004-0265-200708 31 Connecting to the FortiGate unit Insta lling the FortiGat e unit T o connect to the web-based manage r 1 Set the IP address of the computer with an Ethernet con nection to the static IP address 192.168.1.2 with a n etmask of 255.255.255.0. 2[...]

  • Página 23

    Installing the FortiGate unit Connecting to the FortiGate unit FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 23 Command line interface Y ou can access the FortiGate comma nd line interface (CLI) by connecting a management compute r serial port to the FortiGate serial console connector . [...]

  • Página 24

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 24 01-30004-0265-200708 31 Quick inst allation using factory defaults Insta lling the FortiGate u nit Quick inst allation using factory default s The following procedure d escribes how to configure your internal networ k and the FortiGate unit to use the FortiGate def[...]

  • Página 25

    Installing the FortiGate unit Quick installation using factory defaults FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 25 6 Go to System > Network > Options . 7 Select one of the following DNS settings • Obtain DNS se rver address automatica lly: select to get the DNS addresses fr[...]

  • Página 26

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 26 01-30004-0265-200708 31 Quick inst allation using factory defaults Insta lling the FortiGate u nit[...]

  • Página 27

    Factory defaults FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 27 Factory default s The FortiGate unit ships with a factor y default configuration. The de fault configuration enab les you to connect to and use the FortiGate web-base d manager to configure the Fo rtiGate unit onto the netw[...]

  • Página 28

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 28 01-30004-0265-200708 31 Factory defaults Factory default DHCP server configuration T able 7: FortiGate DHCP Serv er default configurat ion Factory default NAT/Route mode network configuration When the FortiGate unit is first powered on , it is running in NA T/Route[...]

  • Página 29

    Factory defaults FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 29 Factory default Transparent mode network configuration In T ranspar ent mode, the FortiGate unit has the de fault network configuration listed in Ta b l e 9 . Factory default firewall configuration FortiGate firewall polici[...]

  • Página 30

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 30 01-30004-0265-200708 31 Factory defaults T able 10: Factory default firewall confi guration The factory default firewall configurati on is the sa me in NA T/Route mode and T ransparent mode. Factory default protection profiles Use protection profiles to apply dif f[...]

  • Página 31

    Factory defaults Re storing the default settings FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 31 Restoring the default settings Y ou can re vert to the factory default se ttings if you change a network setting and are unable to recover fr om it. Restoring the default settings using the w[...]

  • Página 32

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 32 01-30004-0265-200708 31 Restorin g the default setti ngs Factory defaults[...]

  • Página 33

    Configuring the FortiGat e unit Planning the FortiGate configu ration FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 33 Configuring the FortiGate unit This section provides an overview of t he operating modes of the FortiGate unit. Before beginning to configure the FortiGa te unit, you nee[...]

  • Página 34

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 34 01-30004-0265-200708 31 Planning the Forti Gate configuration Configuring the FortiGa te unit Y ou typically use NA T/Route mode when the FortiGate unit is operating as a gateway between private and public n etworks. In this configuration, you create NA T mode fire[...]

  • Página 35

    Configuring the Fo rt iGate unit Preventing the public interf a ce from responding to ping requests FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 35 Transparent mode In T ranspar ent mode, the FortiGate unit is invisible to the network. Similar to a network brid ge, all FortiG ate interf[...]

  • Página 36

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 36 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit T o disable ping administrative acce ss from the web-based manager 1 Log into the FortiGate web-b ased manager . 2 Go to System > Network > Interface . 3 Choose the ex terna[...]

  • Página 37

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 37 DHCP or PPPoE configuration Y ou can config ure any FortiGate interface to acquire its IP address fro m a DHCP or PPPoE server . Y our Interne t Service Provider (ISP) may provide[...]

  • Página 38

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 38 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit T o add/change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select the Change Password icon for the ad min administrator . 3 Enter the new passwor[...]

  • Página 39

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 39 4 Set Destination IP to 0. 0.0.0. 5 Set Mask to 0.0.0.0. 6 Set Gateway to the default gatewa y IP address. 7 Set Device to the interface con nected to the external network. 8 Sele[...]

  • Página 40

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 40 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit config system interface edit <interface> set mode static set ip <address_ip> <netmask> end Example config system interface edit internal set mode static set ip 1[...]

  • Página 41

    Configuring the Fo rtiGate unit NA T/Route mode installation FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 41 config system dns set primary <address_ip> set secondary <address_ip> end Example config system dns set primary 293.44.75.21 set secondary 293.44.75.22 end Adding a de[...]

  • Página 42

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 42 01-30004-0265-200708 31 NA T/Route mode installation Configu ring the FortiGat e unit Connecting the FortiGate unit to the network(s) When you have completed the initial config uration, you can connect the For tiGate unit between yo ur internal network and the Inte[...]

  • Página 43

    Configuring the Fo rtiGate unit T ransparent mode installati on FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 43 T ransp arent mode inst allation This section describes how to inst all th e FortiGate unit in NA T/Route mode. This section includes the following topics: • Prepar ing to co[...]

  • Página 44

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 44 01-30004-0265-200708 31 T ransparent mode installation Configu ring the FortiGat e unit Y ou do not have to recon nec t to the web-based m anager at this time. On ce you select Apply , the cha nges are immedi ate, and you can go to the system dashboard to verify th[...]

  • Página 45

    Configuring the Fo rtiGate unit T ransparent mode installati on FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 45 T o configure DNS serv er settings Set the primary and secondary DNS server IP addresses. Enter: config system dns set primary <address_ip> set secondary <address_ip&g[...]

  • Página 46

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 46 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit Figure 1 1: FortiGate-50B T ransparent mode connections Next step s Use the following information to configure FortiGate system time, and to conf igure antivirus and attack definition updates. Refe[...]

  • Página 47

    Configuring the Fo rtiGate unit Next steps FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 47 5 S p ecify how often the FortiGate unit shou ld synchronize its time with the NTP server . 6 Select OK. Updating antivirus and IPS signatures Configure the FortiGate unit to connec t to the FortiG[...]

  • Página 48

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 48 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit Updating the IPS signa tures from the CLI Y ou can update I PS signatures us ing the CLI. Use the followin g procedu re to update IPS signatures. T o up date IPS signatures using the CLI 1 Log into[...]

  • Página 49

    Configuring the Fo rtiGate unit Next steps FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 49 Example config system autoupdate schedule set update every Sunday set frequency weekly set status enable set time 16:45 end Adding an override server If you cannot con nect to the FDN, or if your o[...]

  • Página 50

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 50 01-30004-0265-200708 31 Next steps Configu ring the FortiGat e unit[...]

  • Página 51

    Configuring the modem interface Conn ecting a modem to the FortiGate- 50A FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 51 Configuring the modem interface The following sections will cover how to configure the Fo rtiGate-50A modem using the CLI. The FortiGate-50A suppo rts a redundant o r[...]

  • Página 52

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 52 01-30004-0265-200708 31 Selecting a modem mode Configuring the modem in terface Figure 12: Example modem interface network conne ction Selecting a modem mode The modem interface can work in one of two modes: • redundant mo de • stand a lone mode Redundant mode [...]

  • Página 53

    Configuring the modem interface Config uring the modem for the FortiGate- 50A FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 53 In stand alon e mode the modem interface replaces the external Ethernet interface. Y ou must also configure fire wall policies for connections between the modem i[...]

  • Página 54

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 54 01-30004-0265-200708 31 Configuring the modem for th e FortiGat e-50A Configuring the modem in terface T able 15: CL I commands for the FortiGate-50A passwd2 <password_str> Enter the password used to access the specified dialup account. No default. passwd3 &l[...]

  • Página 55

    Configuring the modem interface Adding a Ping Server FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 55 Example config system modem set action dial set status enable set holddown-time 5 set interface wan1 set passwd1 acct1passwd set phone1 1234567891 set redial 10 set username1 acct1user en[...]

  • Página 56

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 56 01-30004-0265-200708 31 Adding firewall policies for modem conn ections Configuring the modem in terface Adding firewall policies for modem connections The modem interface requir es firewall addresses and policies. Y ou can add one or more addresses to the modem in[...]

  • Página 57

    Using a wireless network Setting up a wire less network FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 57 Using a wireless network In a wired network, computers are connec ted through a series of cables that transfer inf ormation. I n a wireless n etwork, inform ation is tran sferred ov er[...]

  • Página 58

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 58 01-30004-0265-200708 31 Setting up a wireless network Using a wireless network Figure 13: FortiWiFi-50B as an Access Poin t Positioning an Access Point When placing the FortiWiFi-50B AP , your main concern is providing a strong signal to all users. A strong signal [...]

  • Página 59

    Using a wireless network Setting up a wire less network FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 In stall Guide 01-30004-0265-20070 831 59 T o avoid RF interference: • Remove these devices from the immediate area where users are working . Something as simple as a Bluetooth enabled mouse may cause transmission interrupt[...]

  • Página 60

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 60 01-30004-0265-200708 31 Wireless Security Using a wireless network Wireless Security Radio waves transmitted between a wireless device and access points provide th e weakest link between the wireless device and network servers. Wireless networking can be risky beca[...]

  • Página 61

    Using a wireless network FortiWiFi-50B operation mo des FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 61 Additional security measures The FortiWiFi-50B include s other security measures you can use to block unwanted users from accessing yo ur wireless network. By setting a few extra optio[...]

  • Página 62

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 62 01-30004-0265-200708 31 FortiWiFi-50B operation modes Using a wireless network Figure 15: FortiWiFi in Access Point mode Client mode When using the FortiWiFi-50B in C lient mode, the device is set to receive transmissions from ano ther access point. This enables yo[...]

  • Página 63

    Using a wireless network Setting up the FortiWiFi-50B as an Access Point FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 63 Changing the operating mode T o change the wireless op erating mode 1 Go to System > Wireless > Settin gs . 2 For the Operation mode , select Change 3 Select the[...]

  • Página 64

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 64 01-30004-0265-200708 31 Setting up the FortiWiFi-50B as an Access Point Using a wireless network Set the security options T o ensure proper security and protection of your network and its information, set the security options for the FortiWiFi-50B unit. T o set the[...]

  • Página 65

    FortiGate Firmware Upgra ding to a new firmwar e version FortiGate-50A/50B, Forti WiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 01-30004-0265-2007083 1 65 FortiGate Firmware Fortinet periodically u pdates the FortiGate firmware to include enhancement s and address issues. Af ter you have registered yo ur FortiGate unit, FortiGat e firmw[...]

  • Página 66

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 66 01-30004-0265-200708 31 Upgrading to a new firmware version FortiGate Firmware 5 T ype the path and filename of the firmware image file, or select Browse a nd locate the file. 6 Select OK. The FortiGate unit uploads the fi rmware image file, upgrades to the new fir[...]

  • Página 67

    FortiGate Firmware Reverting to a previous firmware version FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 67 The FortiGate unit uploads the firmwa re image file, upgrades to the new firmwar e version, and restarts. This process takes a few minutes. 7 Reconnect to the CLI. 8 T o confirm th[...]

  • Página 68

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 68 01-30004-0265-200708 31 Reverting to a previous firmware version FortiGate Firmwar e 6 Select OK. The FortiGate unit uploads the firmware im age file, reverts to th e old firmware version, reset s the configuration, restar ts , and displays the FortiGate login. Thi[...]

  • Página 69

    FortiGate Firmware Reverting to a previous firmware version FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 69 4 Make sure the FortiGate uni t c an connect to the TFTP server . Y ou can use the following command to ping the computer running the TFTP server . For example, if the TFTP se rver[...]

  • Página 70

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 70 01-30004-0265-200708 31 Installing firmware images from a system reboot using the CLI FortiGate Firmware Inst alling firmware images from a system reboot using the CLI This procedure inst alls a specified firmwar e ima ge and resets the FortiGate unit to default se[...]

  • Página 71

    FortiGate Firmware Installing firmware im ages from a system reb oot using the CLI FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 71 6 Enter the following co mmand to restart the FortiGate unit: execute reboot The FortiGate unit responds with the following mess age: This operation will reb[...]

  • Página 72

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 72 01-30004-0265-200708 31 Installing firmware images from a system reboot using the CLI FortiGate Firmware 11 Enter the firmware image filename an d press Enter . The TFTP server uploads the firmwar e im age file to the FortiG ate unit an d messages similar to the fo[...]

  • Página 73

    FortiGate Firmware The FortiUSB key FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 73 The FortiUSB key The FortiUSB key provides flex ibility an d control when you ar e backing up and restoring configuration files. The For tiUSB key also enables you to have a single, secure location for st[...]

  • Página 74

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 74 01-30004-0265-200708 31 The FortiUSB key FortiGate Firmware exec backup config usb <filename> 3 Enter the following command to verify t he configuration files are on the key: exec usb-disk list T o restore configurat ion using the CLI 1 Log into the CLI. 2 En[...]

  • Página 75

    FortiGate Firmware T esting a new firmware image before installing it FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 75 config system auto-install set default-config-file <filename> set auto-install-config <enable/disable> set default-image-file <filename> set auto-instal[...]

  • Página 76

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 76 01-30004-0265-200708 31 T esting a new firmware image before installing it FortiGate Firmware 4 Make sure t he internal interface is c onnected to the same n etwork as th e TFTP server . Y ou can use the f ollowing comm and to ping the comput er running th e TFTP s[...]

  • Página 77

    FortiGate Firmware Installing and using a backu p firmware image FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 77 10 T ype an IP address that can be used by th e FortiGate unit to connect to the FTP server . The IP address can be any IP address that is valid for the network the interface [...]

  • Página 78

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 78 01-30004-0265-200708 31 Installing and using a backup firmware image FortiGate Firmware • Access the CLI by connecting to the Fo rtiGate consol e port using a RJ-45 to DB-9 serial cable or null -modem cable. • Install a TFTP serve r that you can connec t to fro[...]

  • Página 79

    FortiGate Firmware Installing and using a backu p firmware image FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 79 9 T ype an IP address that can be used by th e FortiGate unit to connect to the FTP server . The IP address can be any IP address that is valid for the network the interface i[...]

  • Página 80

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 80 01-30004-0265-200708 31 Installing and using a backup firmware image FortiGate Firmware[...]

  • Página 81

    Index FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3. 0 MR4 Install Guide 01-30004-0265-20070 831 81 Index A adding a defa ult route 38, 41 C CAT5 20 certificate, security 22 CLI additional CLI commands, FortiUSB 75 connecting 23 upgrading the firmware 6 6, 68 comments, documentation 13 configuring redundant mode 52 standalone mode 5[...]

  • Página 82

    FortiGate-50A/50B, FortiWiFi-50B and Fort iGate-100 FortiOS 3.0 MR4 Install Guide 82 01-30004-0265-200708 31 Index mounting 19 N NAT/Route mode settings 36 using the CLI 39 using the web-base d manager 3 7 NTP server 46 NTP server synchronize 46 P ping requests, preventin g public FortiGate interfac e from responding to 35 ping server 55 PoE 20 Pow[...]

  • Página 83

    www.fortinet.com[...]

  • Página 84

    www.fortinet.com[...]