Fortinet fortigate-100a Leaflet
© Copyright 2007 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trade-
marks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
17 January 2007
INTERNAL
DMZ 1
4
3
2
1
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
WAN 1
WAN 2
PWR
STATUS
A
DMZ 2
Internal Interface
(4-port switch connectors)
WAN
1,2
DMZ
1,2
Internal Interface
(4-port switch)
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Power Cable Power Supply
Back
Front
1
2
3
4
Console
USB
WAN 2
WAN 1
DMZ 2
DMZ 1
DC+12V
Internal
Power
Connection
RS-232 Serial
Connection
USB
DMZ2
DMZ1
WAN2
WAN1
Documentation
FortiGate-100A
Copyright 2006 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
Q u i c k S t a r t G u i d e
INTERNAL
EXTERNAL
DMZ
POWER
STATUS
Status
LED
Power
LED
RJ-45 to
DB-9 Serial Cable
Console
WAN 2
WAN 1
DMZ 2
DMZ 1
Internal
Optional RS-232 serial cable connects to serial port on management computer
Straight-through Ethernet
cables connect to Internet
(public switch, router or modem)
Power cable connects to power supply
Straight-through
Ethernet cables connect
to computers on internal network
Optional connection to
1 or 2 DMZ networks
1
2
3
4
USB
DC+12V
Checking the Package Contents
Connecting
Planning the Configuration
Connector Type
Speed
Protocol
Description
Internal
RJ-45
10/100 Base-T Ethernet
A 4-port switch connection for up to four network
devices or the internal network.
WAN1 and
WAN2
RJ-45
10/100 Base-T Ethernet
Connection to the Internet.
DMZ1 and
DMZ2
RJ-45
10/100 Base-T Ethernet
Optional connection to one or two DMZ networks, or
other FortiGate-100A units for high availability (HA).
For details, see the Documentation CD-ROM.
Console
RJ-45
9600 Bps
RS-232
Optional connection to the management computer.
Provides access to the command line interface
(CLI).
USB
USB
USB
Optional connection for the FortiUSB key, modem or
backup operation
Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
Plug in power cable to the unit before connecting power.
The Status light flashes while the unit is starting up and turns off when the system is up
and running.
•
•
•
Connect the FortiGate unit to a power outlet and to the internal and external networks.
Before beginning to configure the FortiGate unit, you need to plan how to integrate the unit into your network. Your configuration plan depends on the operating mode you select: NAT/Route
mode (the default) or Transparent mode.
NAT/Route mode
In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All
of its interfaces are on
different subnets. Each
interface that is connected
to a network must be
configured with an IP ad-
dress that is valid for that
network.
You would typically use
NAT/Route mode when
the FortiGate unit is
deployed as a gateway
between private and public
networks. In its default
NAT/Route mode configu-
ration, the unit functions as a firewall. Firewall policies control communications through the
FortiGate unit. No
traffic can pass through the FortiGate unit until you add firewall policies. In NAT/Route mode,
firewall policies can operate in NAT mode or in Route mode. In NAT mode, the FortiGate unit
performs network address translation before IP packets are sent to the destination network.
In Route mode, no translation takes place.
Transparent mode
In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on
the same subnet. You only have to configure a management IP address so that you can make
configuration changes.
You would typically use the
FortiGate unit in Transparent
mode on a private network
behind an existing firewall or
behind a router. In its default
Transparent mode configuration,
the unit functions as a firewall.
No traffic can pass through the
FortiGate unit until you add
firewall policies.
You can connect up to four network segments to the FortiGate unit to control traffic between
these network segments.
Router
Internet
Internal
network
10.10.10.3
Internal
WAN1
Gateway to public network
204.23.1.5 10.10.10.2
Transparent mode policies
controlling traffic between
internal and external networks
Refer to the Documentation CD-ROM for information on how to control traffic, and how to configure HA, antivirus protection, FortiGuard, Web content filtering, Spam filtering,
intrusion prevention (IPS), and virtual private networking (VPN).
FortiGate-100A
01-30004-0066-20070117
LED
State
Description
Power
Green
The FortiGate unit is on.
Off
The FortiGate unit is off.
Status
Flashing Green
The FortiGate unit is starting up.
Green
The FortiGate unit is running normally.
Off
The FortiGate unit is powered off.
Link
Internal, 1, 2, 3, 4,
WAN1 and WAN2,
DMZ1 and DMZ2
Green
The correct cable is in use and the connected
equipment has power.
Flashing Green
Network activity at this interface.
Off
No link established.
100
Internal, 1, 2, 3, 4,
WAN1 and WAN2,
DMZ1 and DMZ2
Green
The interface is connected at 100Mbps.
Router
Internet
Internal
network
DMZ
network
192.168.1.3
Internal network
192.168.1.99
DMZ network
10.10.10.1
10.10.10.2
NAT mode policies
controlling traffic between
internal and external networks
Route mode policies
controlling traffic between
internal networks
controlling traffic between
internal networks
WAN1
204.23.1.5
DMZ
Internal
Choosing a Configuration Tool
Web-based manager
The FortiGate web-based manager is an easy to use management tool. Use it to configure
the administrator password, the interface and default gateway addresses, and the DNS
server addresses.
Requirements:
An Ethernet connection between the FortiGate unit and management computer.
Internet Explorer 6.0 or higher on the management computer.
•
•
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to configure the administrator password,
the interface addresses, the default gateway address, and the DNS server addresses. To
configure advanced settings, see the Documentation CD-ROM.
Requirements:
The DB-9 serial connection between the FortiGate unit and management computer.
A terminal emulation application (HyperTerminal for Windows) on the management
computer.
•
•
INTERNAL
DMZ 1
4
3
2
1
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
LINK 100
WAN 1
WAN 2
PWR
STATUS
A
DMZ 2