Fortinet FortiGate-101E Unified Threat Management Appliance User Manual

1. Uvod

The Fortinet FortiGate-101E is a unified threat management (UTM) appliance designed to provide comprehensive network security. This device integrates multiple security functions, including firewall, VPN, intrusion prevention, and content filtering, into a single platform. This manual provides instructions for the proper installation, configuration, and maintenance of your FortiGate-101E appliance.

2. Sigurnosne informacije

• Uvijek priključite uređaj na uzemljenu utičnicu.
• Ensure proper ventilation around the device to prevent overheating. Do not block ventilation openings.
• Ne izlažite uređaj vodi ili prekomjernoj vlazi.
• Use only the power supply provided or specified by Fortinet.
• Sav servis prepustite kvalifikovanom serviseru.
• Before performing any maintenance, disconnect the power cable.

3. Sadržaj paketa

Provjerite da li vaš paket sadrži sljedeće stavke:

• FortiGate-101E Appliance
• Power Cable
• Komplet za montažu u rack (ako je primjenjivo)
• Ethernet kabl
• Vodič za brzi početak

4. Hardver je gotovview

4.1 Prednja ploča

The front panel of the FortiGate-101E features various ports and LED indicators for status monitoring and connectivity.

Slika 4.1: Front view of the FortiGate-101E appliance, showing the status LEDs, USB port, Console port, and various Ethernet and SFP ports for network connectivity.

• Statusne LED diode: Indicate power, system status, alarm, and HA (High Availability) status.
• USB port: For connecting external storage or other USB devices.
• Konzolni port: RJ45 serial port for direct command-line interface (CLI) access.
• Mrežni portovi: Multiple RJ45 Ethernet ports (WAN, HA, internal) and SFP ports for fiber optic connections.

4.2 Zadnja ploča

The rear panel includes the power input and additional ventilation.

Slika 4.2: Pozadi view of the FortiGate-101E appliance, showing the AC power input, DC input for remote power supply, and ventilation grilles.

• Ulaz za izmjeničnu struju: Standard IEC C14 power connector.
• DC ulaz: For remote power supply, as specified in the manual.
• ventilacija: Ensures proper airflow for cooling the internal components.

5. Podešavanje

5.1 Fizička instalacija

The FortiGate-101E can be installed on a desktop or mounted in a standard 19-inch rack.

• Desktop instalacija: Place the appliance on a flat, stable surface with adequate ventilation.
• Instalacija u rackmount: Attach the provided rackmount ears to the sides of the appliance using the screws. Secure the appliance into a standard 19-inch equipment rack.

5.2 Povezivanje napajanja

1. Connect the power cable to the AC power input on the rear panel of the FortiGate-101E.
2. Uključite drugi kraj kabla za napajanje u uzemljenu električnu utičnicu.
3. The power LED on the front panel should illuminate.

5.3 Povezivanje mrežnih kablova

Connect your network cables to the appropriate ports:

• WAN portovi: Connect to your internet service provider's modem or router.
• Internal/LAN Ports: Povežite se sa svojim internim mrežnim prekidačima ili uređajima.
• HA Ports: For High Availability configurations, connect to another FortiGate appliance.
• Port za upravljanje: A dedicated port for initial configuration and management access.

5.4 Pristup početnoj konfiguraciji

To perform initial configuration, connect a computer to the FortiGate-101E:

• WebMenadžer sa sjedištem u: Connect an Ethernet cable from your computer to an internal or management port. Configure your computer's IP address to be in the same subnet as the FortiGate's default management IP (e.g., 192.168.1.99 for FortiGate 192.168.1.99). Open a web browser and navigate to the FortiGate's IP address.
• Interfejs komandne linije (CLI): Connect a serial console cable from your computer's serial port to the FortiGate's Console port. Use a terminal emulator (e.g., PuTTY) with settings: 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control.

6. Uputstvo za upotrebu

6.1 Osnovna konfiguracija

After initial access, you will need to configure basic network settings, including:

• Setting the administrator password.
• Configuring WAN interface IP address (DHCP or static).
• Defining internal network interfaces and DHCP servers.
• Creating firewall policies to allow traffic.

6.2 Ažuriranja firmvera

Regularly update the FortiGate firmware to ensure optimal performance and security. Firmware files can be downloaded from the Fortinet support website. Always back up your configuration before performing a firmware upgrade.

6.3 FortiGuard Services

The FortiGate-101E supports various FortiGuard security services to enhance protection. These services provide real-time threat intelligence updates.

Slika 6.1: Gotovoview of FortiGuard subscription options, detailing services such as Next-Generation Application Control and IPS, Antivirus, Web Usluga sigurnosti aplikacija, zaštita od neželjene pošte, skeniranje ranjivosti, reputacija IP adresa i domena botneta, kontrola sigurnosti baze podataka, usluga mobilne sigurnosti i napredna zaštita od prijetnji (FortiSandbox Cloud).

Key FortiGuard services include:

• Next-Generation Application Control and IPS: Identifies and blocks threats based on application and intrusion patterns.
• Antivirus: Detects and removes malware, ransomware, and other malicious software.
• Web Filtriranje: Blocks access to malicious or inappropriate webweb stranice.
• Zaštita od neželjene pošte: Filters unwanted email and protects against phishing attempts.
• IP adresa i reputacija domene botneta: Prevents communication with known malicious botnet infrastructure.

For detailed configuration of these services, refer to the FortiGate Administration Guide available on the Fortinet support website.

7. Održavanje

• Regular Configuration Backup: Periodically back up your FortiGate configuration to an external storage device or management server.
• Monitor System Logs: Redovno review system logs for any unusual activity or errors.
• Održavajte firmver ažuriranim: Ensure the device runs the latest stable firmware version.
• Fizičko čišćenje: Keep the appliance free from dust. Use a soft, dry cloth to clean the exterior. Do not use liquid cleaners.

8. Otkrivanje problema

8.1 Uobičajeni problemi i rješenja

• Nema napajanja:
  • Check if the power cable is securely connected to both the appliance and the power outlet.
  • Provjerite je li utičnica funkcionalna.
  • Ensure the power LED on the front panel is illuminated.
• Nema mrežne veze:
  • Check if Ethernet cables are properly connected to the correct ports.
  • Verify link/activity LEDs on the connected ports.
  • Ensure IP addresses and subnet masks are correctly configured on both the FortiGate and connected devices.
  • Provjerite pravila zaštitnog zida kako biste bili sigurni da je promet dozvoljen.
• Ne mogu pristupiti WebMenadžer sa sjedištem u:
  • Ensure your computer's IP address is in the same subnet as the FortiGate's management IP.
  • Pokušajte obrisati keš memoriju preglednika ili koristiti drugi preglednik.
  • Attempt to access via CLI using the console port.

8.2 LED indikatori

Refer to the front panel LEDs for quick status checks:

• LED za napajanje: Neprekidno zeleno svjetlo označava da je napajanje uključeno.
• Statusna LED: Indicates system operational status (e.g., solid green for normal operation, blinking for activity).
• Alarm LED: Red indicates a system alarm or fault.
• HA LED: Indicates High Availability status (if configured).

9. Specifikacije

10. Garancija i podrška

For detailed warranty information, please refer to the official Fortinet website or the warranty card included with your product. Fortinet provides technical support and resources for its products.

Online resursi:

• Fortinet portal za podršku: https://support.fortinet.com
• Documentation Library: https://docs.fortinet.com

It is recommended to register your product on the Fortinet support portal to access firmware updates, technical documentation, and support services.