Академический Документы
Профессиональный Документы
Культура Документы
Management
Module Objectives
By the end of this module participants will be
able to:
Identify the major features of the FortiGate Unified
Threat Management appliance
Access and use the FortiGate administration interfaces
Create administrators
Configure the FortiGate unit for the lab environment
used to complete the hands-on exercises
VPN
Intrusion Prevention
Applicationsystems
Control
Many single purpose
Filtering
needed to copeWeb
with
a variety
WAN Optimization
threats
Antispam
Antivirus
Firewall
of
Fortinet Solution
and more
VPN
Intrusion Prevention
Application Control
Web Filtering
WAN Optimization
Antispam
Antivirus
Firewall
Fortinet Solution
and more
VPN
Intrusion Prevention
Application Control
Web Filtering
One device provides
a
WAN Optimization
comprehensive security
and
Antispam
networking solution
Antivirus
Firewall
Fortinet Solution
Hardware
Purpose-driven hardware
Fortinet Solution
FortiOS
Hardware
Specialized operating system
Fortinet Solution
Firewall
AV
Web
Filter
IPS
FortiOS
Hardware
Security and network-level services
Fortinet Solution
FortiGuard Subscription Services
Firewall
AV
Web
Filter
IPS
FortiOS
Hardware
Automated update service
Click here to read more about the Fortinet solution
Fortinet Solution
Headquarters
Branch office
Home office
Fortinet Solution
Headquarters
Branch office
Home office
Fortinet Solution
Headquarters
Branch office
FortiGate platform
Management, reporting and
analysis appliances
FortiGuard Subscription Services
Home office
FortiGate Capabilities
Firewall
FortiGate Capabilities
Antivirus
FortiGate Capabilities
Email filtering
FortiGate Capabilities
Web filtering
FortiGate Capabilities
Intrusion prevention
FortiGate Capabilities
Application control
FortiGate Capabilities
FortiGate Capabilities
WAN optimization
FortiGate Capabilities
Secure VPN
FortiGate Capabilities
Wireless
FortiGate Capabilities
Dynamic routing
FortiGate Capabilities
Endpoint compliance
FortiGate Capabilities
Virtual domains
FortiGate Capabilities
Traffic shaping
FortiGate Capabilities
High availability
FortiGate Capabilities
FortiGate Capabilities
Authentication
Click here to read more about the capabilities of the FortiGate device
Intel CPU
FortiOS 4.0
Hard disk
Interfaces
Console port
USB port
Wireless
PC card slot
Fortinet Appliances
FortiAnalyzer
FortiBridge
FortiWifi
FortiAP
FortiMail
FortiCarrier
FortiWeb
FortiGate-ONE
FortiManager
FortiDB
FortiSwitch
FortiScan
FortiClient
FortiVoice
Device Administration
Web Config
CLI
Administrators
Full access
Read-only access
Customized access
Admin Profiles
Read Read-Write
System Configuration
Network Configuration
Firewall Configuration
UTM Configuration
VPN Configuration
etc
Admin
Profile
Administrators
Full access
Custom access
super-admin
profile
custom
profile
prof-admin
profile
Administrator Authentication
Device Configuration
Setting
Setting
Setting
Setting
Setting
Setting
Setting
Setting
*.conf
Device Configuration
Device configuration settings can be
saved to an external file
Optional encryption
The file can be restored to rollback
device to a previous configuration
SCP supported for configuration restore
FortiGate unit acts as SCP server
set admin-scp enable
Example
- Restore from Linux
*.conf
scp <local config filename>
<admin_username>@<FGT
IP_Addr>:fgt-restore-config
DNS Service
Add a new DNS Service to an interface and
select a mode:
Recursive
Non-recursive
Forward to System DNS (forward-only)
CLI equivalent:
config system dns-server
edit wan1
set mode recursive
DNS Zones
Create a new zone (Master)
DNS Zones
Create a new zone (Slave)
DNS Records
Add DNS entries
Labs
Lab Virtual Lab Environment Basics
Logging in to the Virtual Lab Environment
Click here for instructions on accessing the virtual lab
environment
Student Resources
Click here to view the list of resources used in
this module