Italiano dropdown-ico

Manuale per l’uso Fortinet 3016B

62 pagine 1.72 mb
Scarica

Vai alla pagina of 62

Summary
  • Fortinet 3016B - page 1

    www.fortinet.com FortiG at e -3 0 1 6B FortiO S 3 .0 MR 6 INST ALL GUIDE ...

  • Fortinet 3016B - page 2

    FortiGate-3016B Install Guide FortiOS 3.0 MR6 18 March 2008 01-30006-04 58-20080318 © Copyright 2008 Fortine t, Inc. All rights reserved. No p art of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mechanical, manual, op tical or otherwise ...

  • Fortinet 3016B - page 3

    Contents FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-2008031 8 3 Content s Contents...................................................................... .............. .......... 3 Introduction ............... ................................. .............................. .......... 7 Register your FortiGate unit ................ ...

  • Fortinet 3016B - page 4

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 4 01-30006-0458-200803 18 Contents Configure a DNS server ................ ................... ................... ................ . 24 Adding a default route and gateway . ......... .................... ................ ....... 24 Adding firewall policies ..................... ...... ................ ...

  • Fortinet 3016B - page 5

    Contents FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 5 Configure the speed ............................ ................... ................ .............. 44 FortiGate Firmware ............ .................................................. ............ 45 Downloading firmware .. .................... ................ .... ...

  • Fortinet 3016B - page 6

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 6 01-30006-0458-200803 18 Contents ...

  • Fortinet 3016B - page 7

    Introduction Register your FortiGate unit FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 7 Introduction Welcome an d thank you for selecting Fortinet product s for your real-time network protection. The FortiGate Unified Threat Man agement System improves network security , reduces network misuse and abuse, and help s you use ...

  • Fortinet 3016B - page 8

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 8 01-30006-0458-200803 18 About the FortiGate-3016B Introduction About the FortiGate-3016B The FortiGate -3016B multi-thr eat security appliance is a carrier-class device with sixteen gigabit Ethernet interface s and a fu ll complemen t of netw ork protecti on features. Each interface of the Fo rtiG ate ...

  • Fortinet 3016B - page 9

    Introduction Further Reading FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 9 Typographic conventions FortiGate document ation uses the fo llowing typographical conven tions: Further Reading The most up-to-date publication s and pr evious rele ases of For tinet product documentation are available from the Fortinet T echnical ...

  • Fortinet 3016B - page 10

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 10 01-30006-0458-200803 18 Customer service and technical support Introduction • FortiGate Log Message Refe rence Available exclusively from the Fortinet Knowledge Center , the FortiG ate Log Message Reference describes the str uct ure of FortiGate log messages and provides information about the log m ...

  • Fortinet 3016B - page 11

    Installing Environmental specifications FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 11 Inst alling This chapter describes in stalling your FortiGate unit in yo ur server room, environmental specifications and how to mount the FortiGate in a rack if applicable. This chapter contains the follow ing topics: • Environmenta l ...

  • Fortinet 3016B - page 12

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 12 01-30006-0458-200803 18 Cautions and warnings Installing • Connect the equipment into an outlet on a circuit different fro m that to which the receiver is connecte d. • Consult the dealer or an experien ced radio/TV technician for help. The equipm ent compliance with FCC ra diation exposure limit ...

  • Fortinet 3016B - page 13

    Installing Cautions and warni ngs FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 13 When placing the For tiGate unit on any flat , sta ble surface, ensure the unit has at least 1.5 inches (3.75 cm) of clearance on each side to ensure adequate airflow for cooling. For rack mounting, use the moun ting brackets and screws includ ...

  • Fortinet 3016B - page 14

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 14 01-30006-0458-200803 18 Plugging in the FortiGa te Installing The following photos illustra te how the mounting bra ckets and FortiGate unit should be att ached to the rack. Figure 2: Mounting in a rack Plugging in the FortiGate The FortiGate unit does no t have an on/of f switch. T o power on the Fo ...

  • Fortinet 3016B - page 15

    Installing T urning off the FortiGate uni t FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 15 Connecting to the network Using the supplied Ethernet ca ble, connect one end of the cable to your router or modem, whatever the connection is to th e In ternet. Connect the other end to the FortiGate u nit. Connect t o either the Ex ...

  • Fortinet 3016B - page 16

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 16 01-30006-0458-200803 18 T urning off the Forti Gate unit Installing ...

  • Fortinet 3016B - page 17

    Configuring NA T vs. T ransparent mode FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 17 Configuring This section provides an overview of t he operating modes of the FortiGate unit, NA T/Route and T ranspa rent, and how to configure the FortiGate unit for each mode. There are two ways you can configure the FortiGa te unit, us ...

  • Fortinet 3016B - page 18

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 18 01-30006-0458-200803 18 Connecting to the FortiGate unit Configuring Transparent mode In T ransparen t mode, the FortiGate unit is invisible to the network. Sim ilar to a network bridge, all FortiGate interfaces must be on the same subnet. Y ou only have to configure a mana gement IP address to make ...

  • Fortinet 3016B - page 19

    Configuring Connecting to the FortiGate unit FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 19 T o support a secure HT TPS authentication method, the FortiGate unit ships with a self-signed security certific ate, which is offered to remote clients whenever they initiate a HTTPS connecti on to the FortiGate unit. When you conn ...

  • Fortinet 3016B - page 20

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 20 01-30006-0458-200803 18 Configuring NA T mode Configuring Configuring NA T mode Configuring NA T mode involves defining interface addresses and default route s, and simple firewall policies. Y ou can use the web-based manager or the CLI to configure the FortiGate unit in NA T/Route mode. Using the we ...

  • Fortinet 3016B - page 21

    Configuring Configuring NA T mode FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 21 4 Select OK. 5 Repeat this procedure for each interf ace as required. Configure a DNS server A DNS server is a service that conver ts symbolic node names to IP addresses. A domain name server (DNS server) implem ents the protocol. In simple te ...

  • Fortinet 3016B - page 22

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 22 01-30006-0458-200803 18 Configuring NA T mode Configuring For an initial configuration, you must edit the factor y configured static defau lt route to specify a different defau lt gateway for the FortiGat e unit. This will enable the flow of data th rough the FortiGate unit. For details on add ing ad ...

  • Fortinet 3016B - page 23

    Configuring Configuring NA T mode FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 23 3 Set the following and select OK. Firewall policy configurati on is the same in NA T/Route mode and T ranspa rent mode. Note that these policies allo w all traffic throug h. No protection profiles have been applied. Ensure you create addition ...

  • Fortinet 3016B - page 24

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 24 01-30006-0458-200803 18 Configuring NA T mode Configuring T o set an interface to use PPPo E addressing config system interface edit external set mode pppoe set username <name_str> set password <psswrd> set ipunnumbered <ip_address> set disc-retry-timeout <integer_seconds> set ...

  • Fortinet 3016B - page 25

    Configuring Configuring T ransparent mode FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 25 For an initial configuration, you must edit th e factory configured st atic default route to specify a different default gateway for the FortiGate unit. This will enable the flow of data through the FortiGate unit. For details on ad di ...

  • Fortinet 3016B - page 26

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 26 01-30006-0458-200803 18 Configuring T ransparent mode Configuring Using the web-based manager After conn ecting to the web-based manager , you can use the following procedures to complete the ba sic configur ation of the FortiGate unit. Ensure you read the section “Connectin g to the web-based mana ...

  • Fortinet 3016B - page 27

    Configuring Configuring T ransparent mode FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 27 T o add an outgoing traffic firewall policy 1 Go to Firewall > Polic y . 2 Select Create New . 3 Set the following and select OK. T o add an incoming traffic firewall policy 1 Go to Firewall > Polic y . 2 Select Create New . 3 Se ...

  • Fortinet 3016B - page 28

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 28 01-30006-0458-200803 18 Configuring T ransparent mode Configuring Configure a DNS server A DNS server is a service that convert s symbolic node names to IP addresses. A domain name server (DNS server ) implemen ts the protocol. In simple te rms, it acts as a phone book for the Internet. A DNS server ...

  • Fortinet 3016B - page 29

    Configuring V erify the co nfiguration FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 29 V erify the configuration Y our FortiGate unit is now configured and connected to the network. T o verify the FortiGate unit is connected and configure d correctly , use your web browser to browse a web site, or use your ema il client to ...

  • Fortinet 3016B - page 30

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 30 01-30006-0458-200803 18 Restoring a configuration Configuring Restoring a configuration Should you need to restore the config uration file, use the following steps. T o restore the FortiGate co nfiguration 1 Go to System > Maintenance > Backup & Restore . 2 Select to uplo ad the restore f i ...

  • Fortinet 3016B - page 31

    Configuring Addition al configurat ion FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 31 T o change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select Change Password and enter a new p assword. 3 Select OK. Alternatively , you can also add ne w admini strator users by selecting Create New , h ...

  • Fortinet 3016B - page 32

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 32 01-30006-0458-200803 18 Additional confi guration Configuring ...

  • Fortinet 3016B - page 33

    Advanced configuration Protection profiles FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 33 Advanced configuration The FortiGate unit and the FortiOS o perating system provide a wide range of features that enable you to control netwo rk and internet traffic and pr otect your network. This chapter describes some of these opti ...

  • Fortinet 3016B - page 34

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 34 01-30006-0458-200803 18 Firewall p olicies Advanced configuration The best way to begin creating your own protection pr ofile is to open a predefined profile. This way you can see how a profile is set up, and th en modify it suit your requirement s. Y ou access Protecti on pr ofile options by going t ...

  • Fortinet 3016B - page 35

    Advanced configuration Antivirus options FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 35 Configuring firewall policies T o add or edit a firewall policy go to Firewa ll > Policy and select Edit on an existing policy , or select Create New to add a policy . The source and des tination Interface/Zone match the firewall pol ...

  • Fortinet 3016B - page 36

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 36 01-30006-0458-200803 18 AntiSpam options Advanced configuration • Graywar e - These ar e unsolicited co mmercial so ftware programs th at are installed on computer s, often without the user's consent or knowledge. Grayware progr ams are generally consider ed an annoyance, but the se programs c ...

  • Fortinet 3016B - page 37

    Advanced configuration Web fi ltering FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 37 Banned word lists are specific wor ds that may be typically found in email. The FortiGate u nit searches f or words or patterns in email messa ges. If matc hes are found, values assigned to the words are to ta lled. If the defined threshol ...

  • Fortinet 3016B - page 38

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 38 01-30006-0458-200803 18 Logging Advanced configuration T o configure content blocking, go to W eb Filter > Content Block . URL filter enables you to control additional web sites that you can block or allow . This enables you greater con trol over ce rtain URLs or sub-URLs. The Fo rtiGate unit allo ...

  • Fortinet 3016B - page 39

    AMC modules Installing AMC filler units FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-2008031 8 39 AMC modules FortiGate AMC module s enable you to ex pand your FortiGate unit an d network environment. These module s enable you to provide small p acket performance though optica l or copper t ransceivers. A har d disk module enables yo ...

  • Fortinet 3016B - page 40

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 40 01-30006-0458-200803 18 Removing modules AMC modules T o insert a module into a FortiGate chassis 1 Ensure the FortiGate unit is powered off before pro ceeding. 2 Remove the panel block on the FortiGate unit using the hot swa p latch. 3 Pull the latch on the module to the extend ed position. 4 Insert ...

  • Fortinet 3016B - page 41

    AMC modules Using the AMC modules FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 41 Formatting the hard disk When you first inst all the ASM-S08 in the FortiGate u nit, the hard disk may not be formatted. This will result in an error in the console wh en starting up the FortiGate unit, indicating that the hard drive could not ...

  • Fortinet 3016B - page 42

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 42 01-30006-0458-200803 18 Using the AMC modul es AMC modules Log configuration using the CLI Configure the FortiGate unit to log to the ASM-S08 using the CLI within the FortiAnalyzer command config log disk setting enable . For details on log configuration, see the FortiGate CLI Reference . Viewing log ...

  • Fortinet 3016B - page 43

    AMC modules Using the AMC modules FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 43 For these mu lti-mode SFP inte rfaces, SerD es is the default mode. Y ou can use a CLI command to change the inte rface to operate in SGMII mode. Depending on th e type of transceivers you inst all, you need to configure the FortiGate unit or ...

  • Fortinet 3016B - page 44

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 44 01-30006-0458-200803 18 Using the AMC modul es AMC modules T o change the media ty pe for the pr oper transceive r , enter the follo wing CLI command: config system interface edit <interface_number> set mediatype <sgmii-sfp | serdes-sfp> end For example : config system interface edit AMC- ...

  • Fortinet 3016B - page 45

    FortiGate Firmware Downloading firmware FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 45 FortiGate Firmware Fortinet periodically updates the For tiGat e firmware to include new featur es and address issues. After yo u have registered your FortiGate unit, you can download FortiGate firmware updates is available for download ...

  • Fortinet 3016B - page 46

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 46 01-30006-0458-200803 18 Using the web-based manage r FortiGate Firmware T o upgrade the firmware 1 Download the firmware ima ge file to your management computer . 2 Log into the web-ba sed manager as the admin administrative user . 3 Go to System > St atus . 4 Under System Information > Firmwar ...

  • Fortinet 3016B - page 47

    FortiGate Firmware Using the web-based manager FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 47 Backup and Restore from a USB key Use a USB key to either backup a configurat ion file or restore a configuration file. Y ou should always make sure a USB key is properly install befo re proceeding since the FortiGate unit must re ...

  • Fortinet 3016B - page 48

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 48 01-30006-0458-200803 18 Using the CLI FortiGate Firmware Using the CLI Installing firmware replaces your curren t antivirus and attack definitions, along with the definitions included with the firmware release you are in stalling. After you install new firm ware, make sure that antivi rus and att ack ...

  • Fortinet 3016B - page 49

    FortiGate Firmware Using the CLI FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 49 Reverting to a previous version This procedure revert s the FortiGate unit to its facto ry default configuration and deletes IPS custom signatures, web content lists, email filterin g lists, and change s to replacement messages. Before beginnin ...

  • Fortinet 3016B - page 50

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 50 01-30006-0458-200803 18 Installing firmware from a system reboot using the CLI FortiGate Firmware The FortiGate unit uploads the firmware image file. After th e file uploads, a message similar to the following appears: Get image from tftp server OK. Check image OK. This operation will downgrade the c ...

  • Fortinet 3016B - page 51

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 51 5 T o confirm the FortiGate unit can connect to the TFTP server , use the following command to ping the computer running the TFTP server . For example, if the IP address of the TF TP server is 192.168.1. ...

  • Fortinet 3016B - page 52

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 52 01-30006-0458-200803 18 Installing firmware from a system reboot using the CLI FortiGate Firmware 12 T ype D . The FortiGate unit installs the ne w firmware image and restart s. The installation might take a few minutes to complete. Restoring the previ ous configuration Change the internal inter face ...

  • Fortinet 3016B - page 53

    FortiGate Firmware T esting new firmware before installing FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 53 T o configure the USB Auto-Inst all using the CLI 1 Log into the CLI. 2 Enter the following command: config system auto-install set default-config-file <filename> set auto-intall-config {enable | disable} set def ...

  • Fortinet 3016B - page 54

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 54 01-30006-0458-200803 18 T esting new firmware before installing FortiGate Firmware T o test the new fi rmware image 1 Connect to the CLI using a RJ-45 to DB-9 or null mode m cable. 2 Make sure the TFTP server is running. 3 Copy the new firmware image file to th e root directory of the TFTP ser ver . ...

  • Fortinet 3016B - page 55

    FortiGate Firmware T esting new firmware before installing FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-20080 318 55 11 Enter the firmware image file name an d press Enter . The TFTP server uploads the firmware image file to the FortiGate unit an d the following appears. Save as Default firmware/Backup firmware/Run image without savi ...

  • Fortinet 3016B - page 56

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 56 01-30006-0458-200803 18 T esting new firmware before installing FortiGate Firmware ...

  • Fortinet 3016B - page 57

    Index FortiGate-3016B FortiOS 3.0 MR6 Install Guide 01-30006-0458-2008031 8 57 Index A adding a defa ult route 21, 24 additional resources 9 admin password 30 air flow 11 ambient te mperature 11 antispam options 36 antivirus options 35 auto-install 47 auto-install from CLI 52 B backing up 29 C certificate, security 19 CLI 19 upgrading the firmware ...

  • Fortinet 3016B - page 58

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 58 01-30006-0458-200803 18 Index P PADT timeout 21 password, changing 30 power off 15 PPPoE 24 protection profiles 33 R registering 7 restore 30 restoring previous firmware configuration 52 reverting firmware 46 S security certificate 19 shielded twisted pair 12 shut down 15 signatures, update 31 static ...

  • Fortinet 3016B - page 59

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 59 01-30006-0458-200803 18 Index ...

  • Fortinet 3016B - page 60

    FortiGate-3016B FortiOS 3.0 MR6 Install Guide 60 01-30006-0458-200803 18 Index ...

  • Fortinet 3016B - page 61

    www.fortinet.com ...

  • Fortinet 3016B - page 62

    www.fortinet.com ...

Fabbricante Fortinet Categoria Security Camera

I documenti che otteniamo dal fabbricante del dispositivoFortinet 3016B possono essere suddivisi in diversi gruppi. Questi sono tra gli altri:
- disegni tecnici Fortinet
- manuali per l’uso 3016B
- schede prodotto Fortinet
- opuscoli
- o etichette energetiche Fortinet 3016B
Tutti sono importanti, ma le informazioni più importanti dal punto di vista di utilizzo del dispositivo possono essere trovate nel manuale per l’uso Fortinet 3016B.

Un gruppo di documenti denominato manuali per l’uso, è anche suddiviso in tipi più specifici, come: Manuali di installazione Fortinet 3016B, manuali di manutenzione, brevi manuali o manuali utente Fortinet 3016B. A seconda delle esigenze, si dovrebbe cercare il documento necessario. Nel nostro sito web, puoi visualizzare il manuale più popolare per l'uso del prodotto Fortinet 3016B.

Manuali per l’uso simili

Manuale completo del dispositivo Fortinet 3016B, come deve essere?
Il manuale per l’uso, denominato anche istruzioni per l’uso, o semplicemente il manuale è un documento tecnico progettato per aiutare ad utilizzare Fortinet 3016B dagli utenti. I manuali sono di solito scritti da uno scrittore tecnico, ma in un linguaggio accessibile a tutti gli utenti Fortinet 3016B.

Il manuale per l’uso completo Fortinet, dovrebbe includere vari elementi di base. Alcuni di loro sono meno importanti, come ad esempio: copertina / pagina del titolo o pagina di autore. Tuttavia, la parte rimanente, dovrebbe fornire informazioni importanti dal punto di vista dell'utente.

1. Introduzione e la guida su come utilizzare il manuale Fortinet 3016B - All'inizio di ogni manuale, dovremmo trovare indizi su come utilizzare il documento. Dovrebbe contenere informazioni sulla posizione dell’indice Fortinet 3016B, FAQ o i problemi più comuni : i punti che sono più spesso cercati dagli utenti di ogni manuale
2. Indice - elenco di tutti i suggerimenti per Fortinet 3016B che possono essere trovati nel documento corrente
3. Suggerimenti su come utilizzare le funzioni di base del dispositivo Fortinet 3016B - che ci dovrebbe aiutare nei primi passi durante l'uso Fortinet 3016B
4. Troubleshooting - sequenza sistematica delle attività che vi aiuterà a diagnosticare e, successivamente, risolvere i problemi più importanti del Fortinet 3016B
5. FAQ - domande più frequenti
6. Dettagli di contatto Informazioni su dove cercare il contatto con il fabbricante / servizio Fortinet 3016B in un dato paese, se il problema non può essere risolto da noi stessi.

Hai una domanda su Fortinet 3016B?

Utilizza il modulo sottostante

Se non hai risolto il problema con Fortinet 3016B con l'aiuto del manuale che hai trovato, fai una domanda utilizzando il modulo sottostante. Se un utente ha avuto un problema simile con Fortinet 3016B è probabile che voglia condividere il modo di risolverlo.

Riscrivi il testo dall’immagine

Captcha
Nuova immagine

Commenti (0)