Fortinet 224Bの取扱説明書

54ページ 1.51 mb
ダウンロード

ページに移動 of 54

Summary
  • Fortinet 224B - page 1

    www.fortinet.com For tiGate-224B FortiO S 3 . 0 MR 6 INST ALL GUIDE ...

  • Fortinet 224B - page 2

    FortiGate-224B Install Guide FortiOS 3.0 MR6 15 August 2008 01-30006-04 51-20080815 © Copyright 2008 Fortine t, Inc. All rights reserved. No part of this publication including text, examples , diagrams or illustrations may be reproduced, tra nsmitted, or translated in any form or by any means, electronic, mechanical, manual, op tical or otherwise, ...

  • Fortinet 224B - page 3

    Contents FortiGate-224B FortiOS 3.0 MR6 Install Guide 01-30006-0451-2008081 5 3 Content s Contents...................................................................... .............. .......... 3 Introduction ............... ................................. .............................. .......... 7 Register your FortiGate unit ................ ...

  • Fortinet 224B - page 4

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 4 01-30006-0451-200808 15 Contents Configure a DNS server ................ ................... ................ ................... . 22 Adding a default route and gateway . ......... ................. ................ .......... 22 Adding firewall policies .............. ....... ......... .............. ...

  • Fortinet 224B - page 5

    Contents FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 5 Installing firmware from a system reboot using the CLI...... ................ ........ 42 Restoring the previous configuration ............................. ................ .............. 44 Backup and Restore from a USB key .... ............. ................ ....... ...

  • Fortinet 224B - page 6

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 6 01-30006-0451-200808 15 Contents ...

  • Fortinet 224B - page 7

    Introduction Register your FortiGate unit FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 7 Introduction Welcome an d thank you for selecting Fortinet product s for your real-time network protection. The FortiGate Unified Threat Man agement System improves network security , reduces network misuse and abuse, and help s you use ...

  • Fortinet 224B - page 8

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 8 01-30006-0451-200808 15 About the FortiGate-224B Introduction About the FortiGate-224B The FortiGa te-224B conv erges network and security products th at uniquely integrate multiple layers of threat protection with granular network access controls. The For tiGate-224B delivers configurable port-leve l ...

  • Fortinet 224B - page 9

    Introduction Further Reading FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 9 Typographic conventions FortiGate document ation uses the fo llowing typographical co nventions: Further Reading The most up-to-date publication s and pr evious rele ases of Fortin et product documentation are available from the Fortinet T echnical ...

  • Fortinet 224B - page 10

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 10 01-30006-0451-200808 15 Customer service and technical support Introduction • FortiGate Log Message Refe rence Available exclusively from the Fortinet Knowledge Center , the FortiGat e Log Message Reference describes the str uct ure of FortiGate log messages and provides information about the log me ...

  • Fortinet 224B - page 11

    Installing Environmental specifications FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 11 Inst alling This chapter describes in stalling your FortiGate unit in your server room, environmental specifications and how to mount the FortiGate in a rack if applicable. This chapter contains the follow ing topics: • Environmenta l ...

  • Fortinet 224B - page 12

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 12 01-30006-0451-200808 15 Cautions and warnings Installing • Connect the equipment into an outlet on a circuit differen t from that to which the receiver is connecte d. • Consult the dealer or an experien ced radio/TV technician for help. The equipm ent compliance with FCC radiation exposu re limit ...

  • Fortinet 224B - page 13

    Installing Cautions and warni ngs FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 13 When placing the For tiGate unit on an y flat , st able surface, ensure the unit has at least 1.5 inches (3.75 cm) of clearance on each side to ensure adequate airflow for cooling. For rack mounting, use the moun ting brackets and screws inclu ...

  • Fortinet 224B - page 14

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 14 01-30006-0451-200808 15 Plugging in the FortiGa te Installing Figure 3: Mounting in a rack Plugging in the FortiGate Use the following steps to conne ct the power supply to the FortiGate unit. T o power on the FortiGate unit 1 Ensure the power switch, located at the ba ck of the FortiGate unit is in t ...

  • Fortinet 224B - page 15

    Configuring NA T vs. T ransparent mode FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 15 Configuring This section provides an overview of t he operating modes of the FortiGate unit, NA T/Route and T ransp arent, and how to configure the FortiGate unit for e ach mode. There are two ways you can configure the FortiGa te unit, u ...

  • Fortinet 224B - page 16

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 16 01-30006-0451-200808 15 Connecting to the FortiGate unit Configuring Transparent mode In T ransparent m ode, the Fo rtiGate unit is invisible to the network . Similar to a network bridge, all FortiGate interfaces must be on the same subnet. Y ou only have to configure a mana gement IP address to make ...

  • Fortinet 224B - page 17

    Configuring Connecting to the FortiGate unit FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 17 T o support a secure HTTPS authentication method, the For tiGate unit ships with a self-signed security certific ate, which is offered to remote clients whenever they initiate a HTTPS connecti on to the FortiGate unit. When you conn ...

  • Fortinet 224B - page 18

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 18 01-30006-0451-200808 15 Configuring NA T mode Configuring Configuring NA T mode Configuring NA T mode involves defining interface addresses and defa ult routes, and simple firewall policies. Y ou can use the web-based m anager or the CLI to configure the FortiGate unit in NA T/Route mode. Using the we ...

  • Fortinet 224B - page 19

    Configuring Configuring NA T mode FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 19 4 Select OK. 5 Repeat this procedure for each interf ace as required. Configure a DNS server A DNS server is a service that conver ts symbolic node names to IP addresses. A domain name server (DNS server) impl ements the protoc ol. In simple t ...

  • Fortinet 224B - page 20

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 20 01-30006-0451-200808 15 Configuring NA T mode Configuring For an initial configuration, you must edit the factor y configured static d efault route to specify a different defau lt gateway for the FortiGat e unit. This will enable the flow of data th rough the FortiGate unit. For details on add ing add ...

  • Fortinet 224B - page 21

    Configuring Configuring NA T mode FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 21 3 Set the following and select OK. Firewall policy configurati on is the same in NA T/Route mode and T ransp arent mode. Note that these policies allo w all traffic throug h. No protection profiles have been applied. Ensure you create additio ...

  • Fortinet 224B - page 22

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 22 01-30006-0451-200808 15 Configuring NA T mode Configuring T o set an interface to use PPPo E addressing config system interface edit external set mode pppoe set username <name_str> set password <psswrd> set ipunnumbered <ip_address> set disc-retry-timeout <integer_seconds> set ...

  • Fortinet 224B - page 23

    Configuring Configuring NA T mode FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 23 In the factory default configuration, entr y number 1 in the S tatic Route list is associated with a destination address of 0.0.0.0/0.0.0.0, which means any/all destinations. This route is called the "sta tic default rout e". If no o ...

  • Fortinet 224B - page 24

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 24 01-30006-0451-200808 15 Configuring T ransparent mod e Configuring Configuring T ra nsp arent mode Configuring T ransparent mode in volves switchin g to T ransparent mode, configurin g the management IP ad dress, default routes, and simple firewa ll policies. Y ou can use the web-based man ager or the ...

  • Fortinet 224B - page 25

    Configuring Configuring T r ansparent mode FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 25 For the initial installation, a single firewa ll policy that enables all traffic through will enable you to verify your configur ation is working. On lower-end unit s such a default firewall policy is already in plac e. For the higher ...

  • Fortinet 224B - page 26

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 26 01-30006-0451-200808 15 Configuring T ransparent mod e Configuring T o switch to T ransparent mode config system settings set opmode transparent set manageip <address_ip> <netmask> set gateway <address_gateway> end Configure a DNS server A DNS server is a service that convert s symbo ...

  • Fortinet 224B - page 27

    Configuring V erify the conf iguration FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 27 Note that these policies allo w all traffic throug h. No protection profiles have been applied. Ensure you create additio nal firewall policies to accommodate you r network requirement s. V erify the configuration Y our FortiGate unit is ...

  • Fortinet 224B - page 28

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 28 01-30006-0451-200808 15 Restoring a configuration Configuring Restoring a configuration Should you need to restore the config uration file, use the following steps. T o restore the FortiGat e configuration 1 Go to System > Maintenance > Backup & Restore . 2 Select to uplo ad the restor e f i ...

  • Fortinet 224B - page 29

    Configuring Addition al configurat ion FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 29 T o change the administrator p assword 1 Go to System > Admin > Administrators . 2 Select Change Password and enter a new p assword. 3 Select OK. Alternatively , you can also a dd new admini strator users by selecting Create New , h ...

  • Fortinet 224B - page 30

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 30 01-30006-0451-200808 15 Additional confi guration Configuring ...

  • Fortinet 224B - page 31

    Advanced configuration Protection profiles FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 31 Advanced configuration The FortiGate unit and the FortiOS o perating system provide a wide range of features that enable you to control netwo rk and internet traffic and pr otect your network. This chapter describes some of these opti ...

  • Fortinet 224B - page 32

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 32 01-30006-0451-200808 15 Firewall p olicies Advanced configuration The best way to begin creating your own protection pr ofile is to open a predefined profile. This way you can see how a profile is set up, an d then modify it suit your requirement s. Y ou access Protecti on profile options by going to ...

  • Fortinet 224B - page 33

    Advanced configuration Antivirus options FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 33 Configuring firewall policies T o add or edit a firewall policy go to Firewall > Policy and select Edit on an existing policy , or select Create New to add a policy . The source and des tination Interface/Zone match the firewall poli ...

  • Fortinet 224B - page 34

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 34 01-30006-0451-200808 15 AntiSpam options Advanced configuration • Graywar e - These are unsolicited commercial software programs that are installed on computer s, often without the user's consent or knowledge. Grayware progr ams are generally consider ed an annoyance, b ut these programs can ca ...

  • Fortinet 224B - page 35

    Advanced configuration Web fi ltering FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 35 Banned word lists are specific wor ds that may be typically found in email. The FortiGate u nit searches f or words or patter ns in email me ssages. If m atches are found, values assigned to the words are to ta lled. If the defined thresho ...

  • Fortinet 224B - page 36

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 36 01-30006-0451-200808 15 Logging Advanced configuration T o configure content blocking, go to W eb Filter > Content Block . URL filter enables you to control additional web sites that you can block or allow . This enables you greater con trol over ce rtain URLs or sub-URLs. The FortiGate unit allows ...

  • Fortinet 224B - page 37

    FortiGate Firmware Downloading firmware FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 37 FortiGate Firmware Fortinet periodically updates the For tiGat e firmware to include new featur es and address issues. After yo u have registered yo ur FortiGate unit, you can download FortiGate firmware updates is available for download ...

  • Fortinet 224B - page 38

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 38 01-30006-0451-200808 15 Using the web-based manage r FortiGate Firmware T o download firmware 1 Log into the site using your user n ame and password. 2 Go to Firmware Images > FortiGate . 3 Select the most recent FortiOS version, and MR release and p atch release. 4 Locate the firmware for your For ...

  • Fortinet 224B - page 39

    FortiGate Firmware Using the web-based manager FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 39 T o revert to a previous firmwar e version 1 Copy the firmware image file to the managem ent computer . 2 Log into the FortiGate web- based manager . 3 Go to System > St atus . 4 Under System Information > Firmware V ersion ...

  • Fortinet 224B - page 40

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 40 01-30006-0451-200808 15 Using the CLI FortiGate Firmware T o configure the USB Au to-Inst all 1 Go to System > Maintenance > Backup and Restore . 2 Select the blue arrow to expa nd the Advanced options. 3 Select the following: • On system restart, auto matically update FortiGate configuration ...

  • Fortinet 224B - page 41

    FortiGate Firmware Using the CLI FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 41 5 Enter the fo llowing command to copy the firmwar e image from the TFTP se rver to the FortiGate unit: execute restore image <name_str> <tftp_ip4> Where <name_str> is the nam e of the firmware image file an d <tftp_ip4> ...

  • Fortinet 224B - page 42

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 42 01-30006-0451-200808 15 Installing firmware from a system reboot using the CLI FortiGate Firmware 4 Make sure the FortiGate unit can connect to th e TFTP server . Y ou can use the following comm and to pin g the comput er running th e TFTP server . For example, if the TFTP serv er ’s IP address is 1 ...

  • Fortinet 224B - page 43

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 43 If you are revert ing to a previou s FortiOS version, you might not be able to restore the previous configuration from the backup configuration file . T o inst all firmware from a syste m reboot 1 Connec ...

  • Fortinet 224B - page 44

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 44 01-30006-0451-200808 15 Installing firmware from a system reboot using the CLI FortiGate Firmware 9 T ype the address of the TFTP server and press Enter : The following message appears: Enter Local Address [192.168.1.188]: 10 T ype an IP address the FortiGate unit can use to connect to the TFTP server ...

  • Fortinet 224B - page 45

    FortiGate Firmware Installing firmware from a system reboot using the CLI FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 45 T o restore configuration us ing the CLI 1 Log into the CLI. 2 Enter the following command to re store the configuration files: exec restore image usb <filename> The FortiGate unit responds with th ...

  • Fortinet 224B - page 46

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 46 01-30006-0451-200808 15 T esting new firmware before installing FortiGate Firmware T esting new firmware before inst alling Y ou can test a new fi rmware image by installing the firmware image from a system reboot and saving it to system memory . After completing this procedu re, the FortiGate unit op ...

  • Fortinet 224B - page 47

    FortiGate Firmware T esting new firmware before installing FortiGate-224B Forti OS 3.0 MR6 Install Guide 01-30006-0451-20080 815 47 8 T ype G to get t he new firm ware image from the TF TP server . The following m essage appears: Enter TFTP server address [192.168.1.168]: 9 T ype the address of the TFTP ser ver and press Enter: The following m essa ...

  • Fortinet 224B - page 48

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 48 01-30006-0451-200808 15 T esting new firmware before installing FortiGate Firmware ...

  • Fortinet 224B - page 49

    Index FortiGate-224B FortiOS 3.0 MR6 Install Guide 01-30006-0451-2008081 5 49 Index A adding a defa ult route 19, 22 additional resources 9 admin password 28 air flow 11 ambient te mperature 11 antispam options 34 antivirus options 33 auto-install 39 auto-install from CLI 45 B backing up 27 C certificate, security 17 CLI 17 upgrading the firmware 4 ...

  • Fortinet 224B - page 50

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 50 01-30006-0451-200808 15 Index P PADT timeout 19 password, changing 28 power off 14 PPPoE 22 protection profiles 31 R registering 7 restore 28 restoring previous firmware configuration 44 reverting firmware 38 S security certificate 17 shielded twisted pair 12 shut down 14 signatures, update 29 static ...

  • Fortinet 224B - page 51

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 51 01-30006-0451-200808 15 Index ...

  • Fortinet 224B - page 52

    FortiGate-224B FortiOS 3.0 MR6 Install Guide 52 01-30006-0451-200808 15 Index ...

  • Fortinet 224B - page 53

    www.fortinet.com ...

  • Fortinet 224B - page 54

    www.fortinet.com ...

メーカー Fortinet カテゴリー Network Card

Fortinet 224Bのメーカーから受け取ることができるドキュメントは、いくつかのグループに分けられます。その一部は次の通りです:
- #BRANDの図面#
- 224Bの取扱説明書
- Fortinetの製品カード
- パンフレット
- またはFortinet 224Bの消費電力シール
それらは全部重要ですが、デバイス使用の観点から最も重要な情報は、Fortinet 224Bの取扱説明書に含まれています。

取扱説明書と呼ばれる文書のグループは、Fortinet 224Bの取り付け説明書、サービスマニュアル、簡易説明書、またはFortinet 224Bのユーザーマニュアル等、より具体的なカテゴリーに分類されます。ご必要に応じてドキュメントを検索しましょう。私たちのウェブサイトでは、Fortinet 224Bの製品を使用するにあたって最も人気のある説明書を閲覧できます。

関連する取扱説明書

Fortinet 224Bデバイスの取扱説明書はどのようなものですか?
取扱説明書は、ユーザーマニュアル又は単に「マニュアル」とも呼ばれ、ユーザーがFortinet 224Bを使用するのを助ける技術的文書のことです。説明書は通常、全てのFortinet 224Bユーザーが容易に理解できる文章にて書かれており、その作成者はその分野の専門家です。

Fortinetの取扱説明書には、基本的な要素が記載されているはずです。その一部は、カバー/タイトルページ、著作権ページ等、比較的重要度の低いものです。ですが、その他の部分には、ユーザーにとって重要な情報が記載されているはずです。

1. Fortinet 224Bの説明書の概要と使用方法。説明書にはまず、その閲覧方法に関する手引きが書かれているはずです。そこにははFortinet 224Bの目次に関する情報やよくある質問、最も一般的な問題に関する情報を見つけられるはずです。つまり、それらはユーザーが取扱説明書に最も期待する情報なのです。
2. 目次。Fortinet 224Bに関してこのドキュメントで見つけることができる全てのヒントの目次
3. Fortinet 224Bデバイスの基本機能を使うにあたってのヒント。 Fortinet 224Bのユーザーが使い始めるのを助けてくれるはずです。
4. トラブルシューティング。Fortinet 224Bに関する最も重要な問題を診断し、解決するために役立つ体系化された手続き
5. FAQ。よくある質問
6. 連絡先。一人では問題を解決できない場合に、その国におけるFortinet 224Bのメーカー/サービスへの連絡先に関する情報。

Fortinet 224Bについてご質問がありますか?

次のフォームを使用してください

見つけた説明書を読んでもFortinet 224Bの問題を解決できない場合、下記のフォームを使用して質問をしましょう。ユーザーのどなたかがFortinet 224Bで同様の問題を抱えていた場合、その解決方法を共有したいと考えるかもしれません。

画像のテキストを入力してください

コメント (0)