Benutzerhandbuch für Fortinet fortigate-200a

Fortinet

Produktcode

fortigate-300aZeig mehr

, fortigate-400a, fortigate-500a

Installationsanweisungen (English)Installationsanweisungen (English)Betriebsanweisung (English)Anleitung Für Quick Setup (English)Betriebsanweisung (English)Anleitung Für Quick Setup (English)

Installationsanweisungen

Inhaltsverzeichnis

Installationsanweisungen

Größe:

1,56 MB
Seiten:

56
Language:

English

Handbuch öffnen

Installationsanweisungen

Inhaltsverzeichnis

Contents
3
Introduction
7
Installing the FortiGate unit
15
- Package Contents
  15
  - FortiGate-200A
    15
    - Mounting
      16
  - FortiGate-300A
    16
    - Mounting
      17
  - FortiGate-400A
    17
    - Mounting
      18
  - FortiGate-500A
    18
    - Mounting
      19
  - Air Flow
    19
  - Mechanical Loading
    19
- Powering on the FortiGate unit
  19
  - Powering off the FortiGate unit
    20
- Connecting to the FortiGate unit
  21
- LCD front control buttons
  24
  - Using the front control buttons and LCD
    25
Factory defaults
27
Configuring the FortiGate unit
31
FortiGate Firmware
51
Index
65

Installationsanweisungen

Größe:

1,77 MB
Seiten:

68
Language:

English

Handbuch öffnen

Betriebsanweisung

Inhaltsverzeichnis

Table of Contents
3
Introduction
13
- About FortiGate Antivirus Firewalls
  13
  - Antivirus protection
    14
  - Web content filtering
    14
  - Spam filtering
    15
  - Firewall
    15
    - NAT/Route mode
      16
    - Transparent mode
      16
  - VLANs and virtual domains
    17
  - Intrusion Prevention System (IPS)
    17
  - VPN
    17
  - High availability
    18
  - Secure installation, configuration, and management
    19
    - Web-based manager
      19
    - Command line interface
      19
    - Logging and reporting
      20
- Document conventions
  20
- FortiGate documentation
  22
  - Comments on Fortinet technical documentation
    22
- Related documentation
  22
- Customer service and technical support
  24
System status
25
- Console access
  25
- Status
  26
  - Viewing system status
    26
    - System status
      27
    - Unit Information
      27
    - Recent Virus Detections
      27
    - Interface Status
      27
    - System Resources
      28
    - History
      28
    - Recent Intrusion Detections
      29
  - Changing unit information
    29
- Session list
  31
- Changing the FortiGate firmware
  32
System network
47
- Interface
  47
  - Interface settings
    48
    - Name
      49
    - Interface
      49
    - VLAN ID
      49
    - Virtual Domain
      50
    - Addressing mode
      50
    - Manual
      50
    - DHCP
      50
    - PPPoE
      51
    - DDNS
      52
    - Ping server
      52
    - Administrative access
      52
    - MTU
      53
    - Log
      53
  - Configuring interfaces
    53
- Zone
  57
  - Zone settings
    58
- Management
  59
- DNS
  60
- Routing table (Transparent Mode)
  61
  - Routing table list
    61
  - Transparent mode route settings
    62
- VLAN overview
  62
  - FortiGate units and VLANs
    63
- VLANs in NAT/Route mode
  63
- VLANs in Transparent mode
  66
- FortiGate IPv6 support
  71
System DHCP
73
- Service
  73
  - DHCP service settings
    74
- Server
  75
  - DHCP server settings
    76
- Exclude range
  77
  - DHCP exclude range settings
    78
- IP/MAC binding
  78
  - DHCP IP/MAC binding settings
    79
- Dynamic IP
  79
System config
81
- System time
  81
- Options
  82
- HA
  84
  - HA configuration
    85
    - Standalone Mode
      86
    - High Availability
      86
    - Cluster Members
      86
    - Mode
      86
    - Group ID
      87
    - Unit Priority
      87
    - Override Master
      88
    - Password
      88
    - Schedule
      88
    - Priorities of Heartbeat Device
      89
    - Heartbeat device IP addresses
      90
    - Monitor priorities
      90
  - Configuring an HA cluster
    91
  - Managing an HA cluster
    95
- SNMP
  98
  - Configuring SNMP
    98
  - SNMP community
    99
  - FortiGate MIBs
    102
  - FortiGate traps
    102
  - Fortinet MIB fields
    104
- Replacement messages
  106
  - Replacement messages list
    107
  - Changing replacement messages
    108
- FortiManager
  109
System administration
111
- Administrators
  111
  - Administrators list
    112
  - Administrators options
    112
    - Using trusted hosts
      113
- Access profiles
  113
  - Access profile list
    114
  - Access profile options
    114
System maintenance
117
- Backup and restore
  117
  - Backing up and Restoring
    118
- Update center
  120
  - Updating antivirus and attack definitions
    122
  - Enabling push updates
    125
    - Push updates when FortiGate IP addresses change
      125
    - Enabling push updates through a NAT device
      126
- Support
  127
  - Sending a bug report
    128
  - Registering a FortiGate unit
    129
- Shutdown
  131
System virtual domain
133
- Virtual domain properties
  134
- Virtual domains
  136
- Configuring virtual domains
  138
Router
143
- Static
  143
  - Static route list
    145
  - Static route options
    146
- Policy
  147
  - Policy route list
    147
  - Policy route options
    148
- RIP
  148
  - General
    149
  - Networks list
    150
  - Networks options
    151
  - Interface list
    151
  - Interface options
    152
  - Distribute list
    153
  - Distribute list options
    154
  - Offset list
    155
  - Offset list options
    155
- Router objects
  156
  - Access list
    156
  - New access list
    156
  - New access list entry
    157
  - Prefix list
    157
  - New Prefix list
    158
  - New prefix list entry
    159
  - Route-map list
    159
  - New Route-map
    160
  - Route-map list entry
    161
  - Key chain list
    162
  - New key chain
    162
  - Key chain list entry
    163
- Monitor
  164
  - Routing monitor list
    164
- CLI configuration
  165
  - get router info ospf
    165
    - Command syntax
      165
    - Examples
      165
  - get router info protocols
    165
    - Command syntax
      165
  - get router info rip
    166
    - Command syntax
      166
    - Examples
      166
  - config router ospf
    166
    - Command syntax pattern
      166
    - Example
      168
    - config area
      169
    - config area command syntax pattern
      169
    - Example
      171
    - config filter-list
      172
    - config filter-list command syntax pattern
      172
    - Example
      173
    - config range
      173
    - config range command syntax pattern
      173
    - Example
      174
    - config virtual-link
      175
    - config virtual link command syntax pattern
      175
    - Example
      177
    - config distribute-list
      177
    - config distribute-list command syntax pattern
      178
    - Example
      178
    - config neighbor
      179
    - config neighbor command syntax pattern
      179
    - Example
      180
    - config network
      181
    - config network command syntax pattern
      181
    - Example
      181
    - config ospf-interface
      182
    - config ospf-interface command syntax pattern
      182
    - Example
      186
    - config redistribute
      186
    - config redistribute command syntax pattern
      187
    - Example
      187
    - config summary-address
      187
    - config summary-address command syntax pattern
      188
    - Example
      188
  - config router static6
    189
    - Command syntax pattern
      189
    - Example
      190
Firewall
191
- Policy
  192
  - How policy matching works
    192
  - Policy list
    192
  - Policy options
    193
  - Advanced policy options
    196
    - Authentication
      196
    - Traffic Shaping
      197
    - Differentiated Services
      197
    - Comments
      198
  - Configuring firewall policies
    198
  - Policy CLI configuration
    199
    - Command syntax pattern
      199
- Address
  200
  - Address list
    201
  - Address options
    201
  - Configuring addresses
    202
  - Address group list
    203
  - Address group options
    203
  - Configuring address groups
    204
- Service
  204
  - Predefined service list
    205
  - Custom service list
    208
  - Custom service options
    208
  - Configuring custom services
    210
  - Service group list
    211
  - Service group options
    211
  - Configuring service groups
    212
- Schedule
  212
  - One-time schedule list
    213
  - One-time schedule options
    213
  - Configuring one-time schedules
    214
  - Recurring schedule list
    214
  - Recurring schedule options
    215
  - Configuring recurring schedules
    215
- Virtual IP
  216
  - Virtual IP list
    217
  - Virtual IP options
    217
  - Configuring virtual IPs
    218
- IP pool
  221
  - IP pool list
    221
  - IP pool options
    222
  - Configuring IP pools
    222
  - IP Pools for firewall policies that use fixed ports
    223
  - IP pools and dynamic NAT
    223
- Protection profile
  223
  - Protection profile list
    224
  - Default protection profiles
    224
  - Protection profile options
    225
  - Configuring protection profiles
    229
  - CLI configuration
    230
    - profile
      231
    - Command syntax pattern
      231
Users and authentication
235
- Setting authentication timeout
  236
- Local
  236
  - Local user list
    236
  - Local user options
    236
- RADIUS
  237
  - RADIUS server list
    237
  - RADIUS server options
    238
- LDAP
  238
  - LDAP server list
    239
  - LDAP server options
    239
- User group
  241
  - User group list
    241
  - User group options
    242
- CLI configuration
  243
  - peer
    243
    - Command syntax pattern
      243
    - Example
      243
  - peergrp
    244
    - Command syntax pattern
      244
    - Example
      244
VPN
247
- Phase 1
  248
  - Phase 1 list
    248
  - Phase 1 basic settings
    249
  - Phase 1 advanced options
    250
  - Configuring XAuth
    251
- Phase 2
  252
  - Phase 2 list
    252
  - Phase 2 basic settings
    253
  - Phase 2 advanced options
    254
- Manual key
  255
  - Manual key list
    256
  - Manual key options
    256
- Concentrator
  257
  - Concentrator list
    257
  - Concentrator options
    258
- Ping Generator
  258
  - Ping generator options
    259
- Monitor
  259
  - Dialup monitor
    260
  - Static IP and dynamic DNS monitor
    260
- PPTP
  261
  - Setting up a PPTP-based VPN
    261
  - Enabling PPTP and specifying a PPTP range
    262
  - Configuring a Windows 2000 client for PPTP
    263
  - Configuring a Windows XP client for PPTP
    263
  - PPTP passthrough
    264
- L2TP
  265
  - Setting up a L2TP-based VPN
    266
  - Enabling L2TP and specifying an L2TP range
    266
  - Configuring a Windows 2000 client for L2TP
    267
  - Configuring a Windows XP client for L2TP
    268
- Certificates
  270
  - Viewing the certificate list
    271
  - Generating a certificate request
    271
  - Installing a signed certificate
    273
  - Enabling VPN access for specific certificate holders
    274
- CLI configuration
  275
  - ipsec phase1
    275
    - Command syntax pattern
      275
    - Example
      277
  - ipsec phase2
    277
    - Command syntax pattern
      277
    - Example
      278
  - ipsec vip
    278
    - Command syntax pattern
      278
    - Example
      279
- Authenticating peers with preshared keys
  280
- Gateway-to-gateway VPN
  280
- Dialup VPN
  281
- Dynamic DNS VPN
  281
- Manual key IPSec VPN
  282
- Adding firewall policies for IPSec VPN tunnels
  282
  - Setting the encryption policy direction
    282
  - Setting the source address for encrypted traffic
    282
  - Setting the destination address for encrypted traffic
    283
  - Adding an IPSec firewall encryption policy
    283
- Internet browsing through a VPN tunnel
  283
  - Configuring Internet browsing through a VPN tunnel
    284
- IPSec VPN in Transparent mode
  285
  - Special rules
    285
- Hub and spoke VPNs
  286
  - Configuring the hub
    286
    - Adding a VPN concentrator
      287
  - Configuring spokes
    288
- Redundant IPSec VPNs
  289
  - Configuring redundant IPSec VPNs
    289
- Configuring IPSec virtual IP addresses
  290
- Troubleshooting
  292
IPS
293
- Protection profile configuration
  293
- IPS updates and information
  293
- Signature
  294
  - Predefined
    294
  - Custom
    298
- Anomaly
  300
  - Anomaly list
    300
  - Configuring an anomaly
    301
  - Anomaly CLI configuration
    303
    - (config ips anomaly) config limit
      303
    - Command syntax pattern
      303
    - Example
      303
- Configuring IPS logging and alert email
  304
- Default fail open setting
  304
Antivirus
305
- Protection profile configuration
  306
- Order of antivirus operations
  306
- Virus list updates and information
  306
- File block
  306
  - File block list
    307
  - Configuring the file block list
    308
- Quarantine
  308
  - Quarantined files list
    308
  - Quarantined files list options
    309
  - AutoSubmit list
    310
  - AutoSubmit list options
    310
  - Configuring the AutoSubmit list
    310
  - Config
    311
- Config
  312
  - Virus list
    312
  - Config
    312
  - Grayware
    313
  - Grayware options
    313
- CLI configuration
  314
  - heuristic
    314
    - Command syntax pattern
      315
    - Example
      315
  - quarantine
    315
    - Command syntax pattern
      316
    - antivirus quarantine command keywords and variables
      316
  - service http
    316
    - Command syntax pattern
      316
    - Example
      317
  - service ftp
    317
    - Command syntax pattern
      317
    - Example
      318
  - service pop3
    318
    - Command syntax pattern
      318
    - Example
      319
  - service imap
    319
    - Command syntax pattern
      319
    - Example
      320
  - service smtp
    320
    - Command syntax pattern
      320
    - Example
      321
Web filter
323
- Protection profile configuration
  324
- Order of web filter operations
  324
- Content block
  324
- URL block
  326
  - Web URL block list
    327
  - Web URL block options
    327
  - Configuring the web URL block list
    327
  - Web pattern block list
    328
  - Web pattern block options
    329
  - Configuring web pattern block
    329
- URL exempt
  329
  - URL exempt list
    330
  - URL exempt list options
    330
  - Configuring URL exempt
    330
- Category block
  331
  - FortiGuard managed web filtering service
    331
    - FortiGuard categories and ratings
      331
    - FortiGuard Service Points
      331
    - FortiGuard licensing
      332
    - FortiGuard configuration
      332
  - Category block configuration options
    332
  - Configuring web category block
    333
  - Category block reports
    333
  - Category block reports options
    334
  - Generating a category block report
    334
  - Category block CLI configuration
    334
    - Command syntax pattern
      335
    - Example
      335
- Script filter
  335
  - Web script filter options
    336
Spam filter
337
- Protection profile configuration
  338
- Order of spam filter operations
  339
- FortiShield IP address black list and spam filter
  339
- IP address
  340
  - IP address list
    340
  - IP address options
    340
  - Configuring the IP address list
    340
- RBL & ORDBL
  341
  - RBL & ORDBL list
    342
  - RBL & ORDBL options
    342
  - Configuring the RBL & ORDBL list
    342
- Email address
  343
  - Email address list
    343
  - Email address options
    343
  - Configuring the email address list
    343
- MIME headers
  344
  - MIME headers list
    345
  - MIME headers options
    345
  - Configuring the MIME headers list
    345
- Banned word
  346
  - Banned word list
    346
  - Banned word options
    347
  - Configuring the banned word list
    348
- Using Perl regular expressions
  348
  - Regular expression vs. wildcard match pattern
    348
  - Word boundary
    349
  - Case sensitivity
    349
  - Examples
    350
Log & Report
351
- Log config
  352
  - Log Setting options
    352
    - FortiLog settings
      353
    - Disk settings
      354
    - Memory settings
      355
    - Syslog settings
      355
    - WebTrends settings
      355
  - Alert E-mail options
    356
  - Log filter options
    357
    - Traffic log
      358
    - Event log
      358
    - Anti-virus log
      359
    - Web filter log
      359
    - Attack log
      360
    - Spam filter log
      360
  - Configuring log filters
    360
  - Enabling traffic logging
    360
- Log access
  361
  - Disk log file access
    361
  - Viewing log messages
    363
    - Choosing columns
      364
  - Searching log messages
    365
- CLI configuration
  366
  - fortilog setting
    366
    - Command syntax pattern
      366
    - Example
      367
  - syslogd setting
    367
    - Command syntax pattern
      367
    - Example
      369
FortiGuard categories
371
FortiGate maximum values
377
Glossary
381
Index
385

Betriebsanweisung

Größe:

4,77 MB
Seiten:

392
Language:

English

Handbuch öffnen

Betriebsanweisung

Inhaltsverzeichnis

Table of Contents
3
Introduction
13
- About FortiGate Antivirus Firewalls
  13
  - Antivirus protection
    14
  - Web content filtering
    14
  - Spam filtering
    15
  - Firewall
    15
    - NAT/Route mode
      16
    - Transparent mode
      16
  - VLANs and virtual domains
    16
  - Intrusion Prevention System (IPS)
    17
  - VPN
    17
  - High availability
    18
  - Secure installation, configuration, and management
    18
    - Web-based manager
      18
    - Command line interface
      18
    - Logging and reporting
      19
- Document conventions
  19
- FortiGate documentation
  21
  - Comments on Fortinet technical documentation
    21
- Related documentation
  21
- Customer service and technical support
  23
System status
25
- Console access
  25
- Status
  26
  - Viewing system status
    26
    - System status
      26
    - Unit Information
      27
    - Recent Virus Detections
      27
    - Interface Status
      27
    - System Resources
      27
    - History
      28
    - Recent Intrusion Detections
      28
  - Changing unit information
    29
- Session list
  31
- Changing the FortiGate firmware
  32
System network
47
- Interface
  47
  - Interface settings
    48
    - Name
      49
    - Interface
      49
    - VLAN ID
      49
    - Virtual Domain
      50
    - Addressing mode
      50
    - Manual
      50
    - DHCP
      50
    - PPPoE
      51
    - DDNS
      52
    - Ping server
      52
    - Administrative access
      52
    - MTU
      53
    - Log
      53
  - Configuring interfaces
    53
- Zone
  57
  - Zone settings
    58
- Management
  59
- DNS
  60
- Routing table (Transparent Mode)
  61
  - Routing table list
    61
  - Transparent mode route settings
    62
- VLAN overview
  62
  - FortiGate units and VLANs
    63
- VLANs in NAT/Route mode
  63
- VLANs in Transparent mode
  66
- FortiGate IPv6 support
  71
System DHCP
73
- Service
  73
  - DHCP service settings
    74
- Server
  75
  - DHCP server settings
    76
- Exclude range
  77
  - DHCP exclude range settings
    78
- IP/MAC binding
  78
  - DHCP IP/MAC binding settings
    79
- Dynamic IP
  79
System config
81
- System time
  81
- Options
  82
- HA
  84
  - HA configuration
    85
    - Standalone Mode
      86
    - High Availability
      86
    - Cluster Members
      86
    - Mode
      86
    - Group ID
      86
    - Unit Priority
      87
    - Override Master
      87
    - Password
      88
    - Schedule
      88
    - Priorities of Heartbeat Device
      89
    - Heartbeat device IP addresses
      90
    - Monitor priorities
      90
  - Configuring an HA cluster
    91
  - Managing an HA cluster
    95
- SNMP
  98
  - Configuring SNMP
    98
  - SNMP community
    99
  - FortiGate MIBs
    102
  - FortiGate traps
    102
  - Fortinet MIB fields
    104
- Replacement messages
  106
  - Replacement messages list
    107
  - Changing replacement messages
    108
- FortiManager
  109
System administration
111
- Administrators
  111
  - Administrators list
    112
  - Administrators options
    112
    - Using trusted hosts
      113
- Access profiles
  113
  - Access profile list
    114
  - Access profile options
    114
System maintenance
117
- Backup and restore
  117
  - Backing up and Restoring
    118
- Update center
  120
  - Updating antivirus and attack definitions
    122
  - Enabling push updates
    125
    - Push updates when FortiGate IP addresses change
      125
    - Enabling push updates through a NAT device
      126
- Support
  127
  - Sending a bug report
    128
  - Registering a FortiGate unit
    129
- Shutdown
  131
System virtual domain
133
- Virtual domain properties
  134
- Virtual domains
  136
- Configuring virtual domains
  138
Router
143
- Static
  143
  - Static route list
    145
  - Static route options
    146
- Policy
  147
  - Policy route list
    147
  - Policy route options
    148
- RIP
  148
  - General
    149
  - Networks list
    150
  - Networks options
    151
  - Interface list
    151
  - Interface options
    152
  - Distribute list
    153
  - Distribute list options
    154
  - Offset list
    155
  - Offset list options
    155
- Router objects
  156
  - Access list
    156
  - New access list
    156
  - New access list entry
    157
  - Prefix list
    157
  - New Prefix list
    158
  - New prefix list entry
    159
  - Route-map list
    159
  - New Route-map
    160
  - Route-map list entry
    161
  - Key chain list
    162
  - New key chain
    162
  - Key chain list entry
    163
- Monitor
  164
  - Routing monitor list
    164
- CLI configuration
  165
  - get router info ospf
    165
    - Command syntax
      165
    - Examples
      165
  - get router info protocols
    165
    - Command syntax
      165
  - get router info rip
    166
    - Command syntax
      166
    - Examples
      166
  - config router ospf
    166
    - Command syntax pattern
      166
    - Example
      168
    - config area
      169
    - config area command syntax pattern
      169
    - Example
      171
    - config filter-list
      172
    - config filter-list command syntax pattern
      172
    - Example
      173
    - config range
      173
    - config range command syntax pattern
      173
    - Example
      174
    - config virtual-link
      175
    - config virtual link command syntax pattern
      175
    - Example
      177
    - config distribute-list
      177
    - config distribute-list command syntax pattern
      178
    - Example
      178
    - config neighbor
      179
    - config neighbor command syntax pattern
      179
    - Example
      180
    - config network
      181
    - config network command syntax pattern
      181
    - Example
      181
    - config ospf-interface
      182
    - config ospf-interface command syntax pattern
      182
    - Example
      186
    - config redistribute
      186
    - config redistribute command syntax pattern
      187
    - Example
      187
    - config summary-address
      187
    - config summary-address command syntax pattern
      188
    - Example
      188
  - config router static6
    189
    - Command syntax pattern
      189
    - Example
      190
Firewall
191
- Policy
  192
  - How policy matching works
    192
  - Policy list
    192
  - Policy options
    193
  - Advanced policy options
    196
    - Authentication
      196
    - Traffic Shaping
      197
    - Differentiated Services
      197
    - Comments
      198
  - Configuring firewall policies
    198
  - Policy CLI configuration
    199
    - Command syntax pattern
      199
- Address
  200
  - Address list
    201
  - Address options
    201
  - Configuring addresses
    202
  - Address group list
    203
  - Address group options
    203
  - Configuring address groups
    204
- Service
  204
  - Predefined service list
    205
  - Custom service list
    208
  - Custom service options
    208
  - Configuring custom services
    210
  - Service group list
    211
  - Service group options
    211
  - Configuring service groups
    212
- Schedule
  212
  - One-time schedule list
    213
  - One-time schedule options
    213
  - Configuring one-time schedules
    214
  - Recurring schedule list
    214
  - Recurring schedule options
    215
  - Configuring recurring schedules
    215
- Virtual IP
  216
  - Virtual IP list
    217
  - Virtual IP options
    217
  - Configuring virtual IPs
    218
- IP pool
  220
  - IP pool list
    221
  - IP pool options
    221
  - Configuring IP pools
    222
  - IP Pools for firewall policies that use fixed ports
    222
  - IP pools and dynamic NAT
    223
- Protection profile
  223
  - Protection profile list
    224
  - Default protection profiles
    224
  - Protection profile options
    225
  - Configuring protection profiles
    229
  - CLI configuration
    230
    - profile
      231
    - Command syntax pattern
      231
Users and authentication
235
- Setting authentication timeout
  236
- Local
  236
  - Local user list
    236
  - Local user options
    236
- RADIUS
  237
  - RADIUS server list
    237
  - RADIUS server options
    238
- LDAP
  238
  - LDAP server list
    239
  - LDAP server options
    239
- User group
  241
  - User group list
    241
  - User group options
    242
- CLI configuration
  243
  - peer
    243
    - Command syntax pattern
      243
    - Example
      243
  - peergrp
    244
    - Command syntax pattern
      244
    - Example
      244
VPN
247
- Phase 1
  248
  - Phase 1 list
    248
  - Phase 1 basic settings
    249
  - Phase 1 advanced options
    250
  - Configuring XAuth
    251
- Phase 2
  252
  - Phase 2 list
    252
  - Phase 2 basic settings
    253
  - Phase 2 advanced options
    254
- Manual key
  255
  - Manual key list
    256
  - Manual key options
    256
- Concentrator
  257
  - Concentrator list
    257
  - Concentrator options
    258
- Ping Generator
  258
  - Ping generator options
    259
- Monitor
  259
  - Dialup monitor
    260
  - Static IP and dynamic DNS monitor
    260
- PPTP
  261
  - Setting up a PPTP-based VPN
    261
  - Enabling PPTP and specifying a PPTP range
    262
  - Configuring a Windows 2000 client for PPTP
    263
  - Configuring a Windows XP client for PPTP
    263
  - PPTP passthrough
    264
- L2TP
  265
  - Setting up a L2TP-based VPN
    266
  - Enabling L2TP and specifying an L2TP range
    266
  - Configuring a Windows 2000 client for L2TP
    267
  - Configuring a Windows XP client for L2TP
    268
- Certificates
  270
  - Viewing the certificate list
    271
  - Generating a certificate request
    271
  - Installing a signed certificate
    273
  - Enabling VPN access for specific certificate holders
    274
- CLI configuration
  275
  - ipsec phase1
    275
    - Command syntax pattern
      275
    - Example
      277
  - ipsec phase2
    277
    - Command syntax pattern
      277
    - Example
      278
  - ipsec vip
    278
    - Command syntax pattern
      278
    - Example
      279
- Authenticating peers with preshared keys
  280
- Gateway-to-gateway VPN
  280
- Dialup VPN
  281
- Dynamic DNS VPN
  281
- Manual key IPSec VPN
  282
- Adding firewall policies for IPSec VPN tunnels
  282
  - Setting the encryption policy direction
    282
  - Setting the source address for encrypted traffic
    282
  - Setting the destination address for encrypted traffic
    283
  - Adding an IPSec firewall encryption policy
    283
- Internet browsing through a VPN tunnel
  283
  - Configuring Internet browsing through a VPN tunnel
    284
- IPSec VPN in Transparent mode
  285
  - Special rules
    285
- Hub and spoke VPNs
  286
  - Configuring the hub
    286
    - Adding a VPN concentrator
      287
  - Configuring spokes
    288
- Redundant IPSec VPNs
  289
  - Configuring redundant IPSec VPNs
    289
- Configuring IPSec virtual IP addresses
  290
- Troubleshooting
  292
IPS
293
- Protection profile configuration
  293
- IPS updates and information
  293
- Signature
  294
  - Predefined
    294
  - Custom
    298
- Anomaly
  300
  - Anomaly list
    300
  - Configuring an anomaly
    301
  - Anomaly CLI configuration
    303
    - (config ips anomaly) config limit
      303
    - Command syntax pattern
      303
    - Example
      303
- Configuring IPS logging and alert email
  304
- Default fail open setting
  304
Antivirus
305
- Protection profile configuration
  306
- Order of antivirus operations
  306
- Virus list updates and information
  306
- File block
  306
  - File block list
    307
  - Configuring the file block list
    308
- Quarantine
  308
  - Quarantined files list
    308
  - Quarantined files list options
    309
  - AutoSubmit list
    310
  - AutoSubmit list options
    310
  - Configuring the AutoSubmit list
    310
  - Config
    311
- Config
  312
  - Virus list
    312
  - Config
    312
  - Grayware
    313
  - Grayware options
    313
- CLI configuration
  314
  - heuristic
    314
    - Command syntax pattern
      315
    - Example
      315
  - quarantine
    315
    - Command syntax pattern
      316
    - antivirus quarantine command keywords and variables
      316
  - service http
    316
    - Command syntax pattern
      316
    - Example
      317
  - service ftp
    317
    - Command syntax pattern
      317
    - Example
      318
  - service pop3
    318
    - Command syntax pattern
      318
    - Example
      319
  - service imap
    319
    - Command syntax pattern
      319
    - Example
      320
  - service smtp
    320
    - Command syntax pattern
      320
    - Example
      321
Web filter
323
- Protection profile configuration
  324
- Order of web filter operations
  324
- Content block
  324
- URL block
  326
  - Web URL block list
    327
  - Web URL block options
    327
  - Configuring the web URL block list
    327
  - Web pattern block list
    328
  - Web pattern block options
    329
  - Configuring web pattern block
    329
- URL exempt
  329
  - URL exempt list
    330
  - URL exempt list options
    330
  - Configuring URL exempt
    330
- Category block
  331
  - FortiGuard managed web filtering service
    331
    - FortiGuard categories and ratings
      331
    - FortiGuard Service Points
      331
    - FortiGuard licensing
      332
    - FortiGuard configuration
      332
  - Category block configuration options
    332
  - Configuring web category block
    333
  - Category block reports
    333
  - Category block reports options
    334
  - Generating a category block report
    334
  - Category block CLI configuration
    334
    - Command syntax pattern
      335
    - Example
      335
- Script filter
  335
  - Web script filter options
    336
Spam filter
337
- Protection profile configuration
  338
- Order of spam filter operations
  339
- FortiShield IP address black list and spam filter
  339
- IP address
  340
  - IP address list
    340
  - IP address options
    340
  - Configuring the IP address list
    340
- RBL & ORDBL
  341
  - RBL & ORDBL list
    342
  - RBL & ORDBL options
    342
  - Configuring the RBL & ORDBL list
    342
- Email address
  343
  - Email address list
    343
  - Email address options
    343
  - Configuring the email address list
    343
- MIME headers
  344
  - MIME headers list
    345
  - MIME headers options
    345
  - Configuring the MIME headers list
    345
- Banned word
  346
  - Banned word list
    346
  - Banned word options
    347
  - Configuring the banned word list
    348
- Using Perl regular expressions
  348
  - Regular expression vs. wildcard match pattern
    348
  - Word boundary
    349
  - Case sensitivity
    349
  - Examples
    350
Log & Report
351
- Log config
  352
  - Log Setting options
    352
    - FortiLog settings
      353
    - Disk settings
      354
    - Memory settings
      355
    - Syslog settings
      355
    - WebTrends settings
      355
  - Alert E-mail options
    356
  - Log filter options
    357
    - Traffic log
      358
    - Event log
      358
    - Anti-virus log
      359
    - Web filter log
      359
    - Attack log
      360
    - Spam filter log
      360
  - Configuring log filters
    360
  - Enabling traffic logging
    360
- Log access
  361
  - Disk log file access
    361
  - Viewing log messages
    363
    - Choosing columns
      364
  - Searching log messages
    365
- CLI configuration
  366
  - fortilog setting
    366
    - Command syntax pattern
      366
    - Example
      367
  - syslogd setting
    367
    - Command syntax pattern
      367
    - Example
      369
FortiGuard categories
371
FortiGate maximum values
377
Glossary
381
Index
385

Betriebsanweisung

Größe:

4,74 MB
Seiten:

392
Language:

English

Handbuch öffnen

Anleitung Für Quick Setup

Anleitung Für Quick Setup

Größe:

762 KB
Seiten:

2
Language:

English

Handbuch öffnen

Anleitung Für Quick Setup

Anleitung Für Quick Setup

Größe:

749 KB
Seiten:

2
Language:

English

Handbuch öffnen