Fortinet FortiGate-101E Unified Threat Management Appliance User Manual

1. Wprowadzenie

The Fortinet FortiGate-101E is a unified threat management (UTM) appliance designed to provide comprehensive network security. This device integrates multiple security functions, including firewall, VPN, intrusion prevention, and content filtering, into a single platform. This manual provides instructions for the proper installation, configuration, and maintenance of your FortiGate-101E appliance.

2. Informacje dotyczące bezpieczeństwa

• Zawsze podłączaj urządzenie do uziemionego gniazdka elektrycznego.
• Zapewnij odpowiednią wentylację wokół urządzenia, aby zapobiec przegrzaniu. Nie blokuj otworów wentylacyjnych.
• Nie wystawiaj urządzenia na działanie wody ani nadmiernej wilgotności.
• Use only the power supply provided or specified by Fortinet.
• Wszelkie prace serwisowe należy powierzać wykwalifikowanemu personelowi.
• Before performing any maintenance, disconnect the power cable.

3. Zawartość opakowania

Sprawdź, czy w przesyłce znajdują się następujące elementy:

• FortiGate-101E Appliance
• Kabel zasilający
• Rackmount Kit (if applicable)
• Kabel Ethernet
• Szybki przewodnik

4. Koniec sprzętuview

4.1 Panel przedni

The front panel of the FortiGate-101E features various ports and LED indicators for status monitoring and connectivity.

Rysunek 4.1: Przód view of the FortiGate-101E appliance, showing the status LEDs, USB port, Console port, and various Ethernet and SFP ports for network connectivity.

• Diody LED stanu: Indicate power, system status, alarm, and HA (High Availability) status.
• Port USB: Do podłączania pamięci zewnętrznej lub innych urządzeń USB.
• Port konsoli: RJ45 serial port for direct command-line interface (CLI) access.
• Porty sieciowe: Multiple RJ45 Ethernet ports (WAN, HA, internal) and SFP ports for fiber optic connections.

4.2 Panel tylny

The rear panel includes the power input and additional ventilation.

Rysunek 4.2: Tył view of the FortiGate-101E appliance, showing the AC power input, DC input for remote power supply, and ventilation grilles.

• Wejście zasilania prądem zmiennym: Standard IEC C14 power connector.
• Wejście DC: For remote power supply, as specified in the manual.
• Wentylacja: Zapewnia właściwy przepływ powietrza w celu chłodzenia wewnętrznych podzespołów.

5. Konfiguracja

5.1 Fizyczna instalacja

The FortiGate-101E can be installed on a desktop or mounted in a standard 19-inch rack.

• Instalacja na komputerze: Place the appliance on a flat, stable surface with adequate ventilation.
• Instalacja w stojaku: Attach the provided rackmount ears to the sides of the appliance using the screws. Secure the appliance into a standard 19-inch equipment rack.

5.2 Podłączanie zasilania

1. Connect the power cable to the AC power input on the rear panel of the FortiGate-101E.
2. Podłącz drugi koniec kabla zasilającego do uziemionego gniazdka elektrycznego.
3. The power LED on the front panel should illuminate.

5.3 Podłączanie kabli sieciowych

Connect your network cables to the appropriate ports:

• Porty WAN: Connect to your internet service provider's modem or router.
• Internal/LAN Ports: Connect to your internal network switches or devices.
• HA Ports: For High Availability configurations, connect to another FortiGate appliance.
• Port zarządzania: A dedicated port for initial configuration and management access.

5.4 Dostęp do konfiguracji początkowej

To perform initial configuration, connect a computer to the FortiGate-101E:

• Web-based Manager: Connect an Ethernet cable from your computer to an internal or management port. Configure your computer's IP address to be in the same subnet as the FortiGate's default management IP (e.g., 192.168.1.99 for FortiGate 192.168.1.99). Open a web browser and navigate to the FortiGate's IP address.
• Interfejs wiersza poleceń (CLI): Connect a serial console cable from your computer's serial port to the FortiGate's Console port. Use a terminal emulator (e.g., PuTTY) with settings: 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control.

6. Instrukcja obsługi

6.1 Podstawowa konfiguracja

After initial access, you will need to configure basic network settings, including:

• Setting the administrator password.
• Configuring WAN interface IP address (DHCP or static).
• Defining internal network interfaces and DHCP servers.
• Creating firewall policies to allow traffic.

6.2 aktualizacji oprogramowania sprzętowego

Regularly update the FortiGate firmware to ensure optimal performance and security. Firmware files can be downloaded from the Fortinet support website. Always back up your configuration before performing a firmware upgrade.

6.3 FortiGuard Services

The FortiGate-101E supports various FortiGuard security services to enhance protection. These services provide real-time threat intelligence updates.

Rysunek 6.1: Nadview of FortiGuard subscription options, detailing services such as Next-Generation Application Control and IPS, Antivirus, Web Application Security Service, Antispam, Vulnerability Scan, Botnet IP and Domain Reputation, Database Security Control, Mobile Security Service, and Advanced Threat Protection (FortiSandbox Cloud).

Key FortiGuard services include:

• Next-Generation Application Control and IPS: Identifies and blocks threats based on application and intrusion patterns.
• Antywirus: Detects and removes malware, ransomware, and other malicious software.
• Web Filtracja: Blocks access to malicious or inappropriate webwitryny.
• Antispam: Filters unwanted email and protects against phishing attempts.
• Botnet IP and Domain Reputation: Prevents communication with known malicious botnet infrastructure.

For detailed configuration of these services, refer to the FortiGate Administration Guide available on the Fortinet support webstrona.

7. Konserwacja

• Regular Configuration Backup: Periodically back up your FortiGate configuration to an external storage device or management server.
• Monitor System Logs: Regularnie ponownieview system logs for any unusual activity or errors.
• Aktualizuj oprogramowanie sprzętowe: Ensure the device runs the latest stable firmware version.
• Czyszczenie fizyczne: Keep the appliance free from dust. Use a soft, dry cloth to clean the exterior. Do not use liquid cleaners.

8. Rozwiązywanie Problemów

8.1 Typowe problemy i rozwiązania

• Brak zasilania:
  • Check if the power cable is securely connected to both the appliance and the power outlet.
  • Sprawdź, czy gniazdko elektryczne jest sprawne.
  • Ensure the power LED on the front panel is illuminated.
• Brak połączenia sieciowego:
  • Check if Ethernet cables are properly connected to the correct ports.
  • Verify link/activity LEDs on the connected ports.
  • Ensure IP addresses and subnet masks are correctly configured on both the FortiGate and connected devices.
  • Check firewall policies to ensure traffic is allowed.
• Nie można uzyskać dostępu Web-based Manager:
  • Ensure your computer's IP address is in the same subnet as the FortiGate's management IP.
  • Spróbuj wyczyścić pamięć podręczną przeglądarki lub użyć innej przeglądarki.
  • Attempt to access via CLI using the console port.

8.2 Wskaźniki LED

Refer to the front panel LEDs for quick status checks:

• Dioda LED zasilania: Solid green indicates power is on.
• Dioda LED stanu: Indicates system operational status (e.g., solid green for normal operation, blinking for activity).
• Dioda alarmowa: Red indicates a system alarm or fault.
• HA LED: Indicates High Availability status (if configured).

9. Specyfikacje

10. Gwarancja i wsparcie

For detailed warranty information, please refer to the official Fortinet website or the warranty card included with your product. Fortinet provides technical support and resources for its products.

Zasoby internetowe:

• Fortinet Support Portal: https://support.fortinet.com
• Documentation Library: https://docs.fortinet.com

It is recommended to register your product on the Fortinet support portal to access firmware updates, technical documentation, and support services.