Getting Started with FortiGate
eBook - ePub

Getting Started with FortiGate

  1. 126 pages
  2. English
  3. ePUB (mobile friendly)
  4. Available on iOS & Android
eBook - ePub

Getting Started with FortiGate

Book details
Book preview
Table of contents
Citations

About This Book

In Detail

FortiGate from Fortinet is a highly successful family of appliances enabled to manage routing and security on different layers, supporting dynamic protocols, IPSEC and VPN with SSL, application and user control, web contents and mail scanning, endpoint checks, and more, all in a single platform. The heart of the appliance is the FortiOS (FortiOS 5 is the latest release) which is able to unify a friendly web interface with a powerful command line to deliver high performance. FortiGate is able to give users the results they usually achieve at a fraction of the cost of what they would have to invest with other vendors.

This practical, hands-on guide addresses all the tasks required to configure and manage a FortiGate unit in a logical order. The book starts with topics related to VLAN and routing (static and advanced) and then discusses in full the UTM features integrated in the appliance. The text explains SSL VPN and IPSEC VPN with all the required steps you need to deploy the aforementioned solutions. High availability and troubleshooting techniques are also explained in the last two chapters of the book.

This concise, example-oriented book explores all the concepts you need to administer a FortiGate unit. You will begin by covering the basic tools required to administer a FortiGate unit, including NAT, routing, and VLANs. You will then be guided through the concepts of firewalling, UTM inside the appliance, tunnelling using SSL, and IPSEC and dial-up configurations. Next, you will get acquainted with important topics like high availability and Vdoms. Finally, you will end the book with an overview of troubleshooting tools and techniques.

Approach

This book is a step-by-step tutorial that will teach you everything you need to know about the deployment and management of FortiGate, including high availability, complex routing, various kinds of VPN working, user authentication, security rules and controls on applications, and mail and Internet access.

Who this book is for

This book is intended for network administrators, security managers, and IT pros. It is a great starting point if you have to administer or configure a FortiGate unit, especially if you have no previous experience. For people that have never managed a FortiGate unit, the book helpfully walks through the basic concepts and common mistakes. If your work requires assessing the security of a corporate network or you need to interact with people managing security on a Fortinet product, then this book will be of great benefit. No prior knowledge of Fortigate is assumed.

Frequently asked questions

Simply head over to the account section in settings and click on “Cancel Subscription” - it’s as simple as that. After you cancel, your membership will stay active for the remainder of the time you’ve paid for. Learn more here.
At the moment all of our mobile-responsive ePub books are available to download via the app. Most of our PDFs are also available to download and we're working on making the final remaining ones downloadable now. Learn more here.
Both plans give you full access to the library and all of Perlego’s features. The only differences are the price and subscription period: With the annual plan you’ll save around 30% compared to 12 months on the monthly plan.
We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 1000+ topics, we’ve got you covered! Learn more here.
Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more here.
Yes, you can access Getting Started with FortiGate by Rosato Fabbri, Fabrizio Volpe in PDF and/or ePUB format, as well as other popular books in Informatique & Cybersécurité. We have over one million books available in our catalogue for you to explore.

Information

Publisher
Packt Publishing
Year
2013
ISBN
9781782178200
Edition
1
Topic
Informatique
Subtopic
Cybersécurité

Getting Started with FortiGate

Table of Contents

Getting Started with FortiGate
Credits
Foreword
About the Authors
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers and more
Why Subscribe?
Free Access for Packt account holders
Instant Updates on New Packt Books
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Errata
Piracy
Questions
1. First Steps
Administering a FortiGate
Unboxing the FortiGate and license options
First access to a FortiGate
Changing the admin password, name of the host, time, and time zone
Selecting the operation mode and configuring the internal and external interfaces
Registering your FortiGate
Updating the system firmware
Restoring a device
Updating definitions and services
VLANs and logical interfaces
Static routing
Policy routing
Dynamic routing
Introducing OSPF
Configuring OSPF on a FortiGate
OSPF router ID
OSPF area
Network
Interfaces
Monitoring OSPF routes
Summary
2. Filters, Policies, and Endpoint Security
Processing a data packet inside a FortiGate
Firewall features
Interfaces and zones
Firewall objects
Addresses
Services
Schedules
UTM profiles
Antivirus
Intrusion protection
Web filter
Client reputation
Traffic shaping
Security policies
FortiClient
FortiClient management
Bring Your Own Device (BYOD)
Summary
3. VPNs and Tunneling
SSL VPN
Introduction to SSL VPN portal with web-only mode
Introduction to SSL VPN portal with tunnel mode
Configuring the SSL VPN portal
Configuring the SSL VPN settings
Configuring the SSL VPN portal
Configuring users and groups for the SSL VPN portal
Configuring a policy for the SSL VPN portal
FortiGate IPsec VPN
Configuring an IPsec VPN
Designing a Gateway-to-Gateway VPN
Hub-and-Spoke VPN
Dialup VPN
FortiClient dialup client
L2TP VPN
Summary
4. High Availability
Link aggregation
Virtual MAC addresses
FortiGate Cluster Protocol
Active-Passive and Active-Active Clusters
FortiGate Session Life Support Protocol
Virtual Router Redundancy Protocol
Full mesh high availability
Introducing virtual domains
VDOMs and virtual clustering
Summary
5. Troubleshooting
Base system diagnostics
Troubleshooting routing
Layer 2 and layer 3 TCP/IP diagnostics
Troubleshooting security policies and profiles
FortiOS packet sniffer
Firewall session lists information
Debugging URL and anti-spam filters
Troubleshooting virtual domains
Troubleshooting VPN
Troubleshooting High Availability (HA)
Troubleshooting HA clusters
Troubleshooting virtual clustering
Summary
Index

Getting Started with FortiGate

Copyright © 2013 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.
First published: November 2013
Production Reference: 1181113
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham B3 2PB, UK.
ISBN 978-1-78217-820-0
www.packtpub.com
Cover Image by Aniket Sawant ()

Credits

Authors
Rosato Fabbri
Fabrizio Volpe
Reviewers
Marco Alamanni
Andreas Felder
Sebastian Knoop-Troullier
Acquisition Editor
Kevin Colaco
Commissioning Editor
Sharvari Tawde
Technical Editors
Faisal Siddiqui
Sonali S Vernekar
Project Coordinator
Sageer Parkar
Proofreader
Bernadette Watkins
Indexer
Priya Subramani
Production Coordinator
Adonia Jones
Cover Work
Adonia Jones

Foreword

I believe that technology, even the best, is only an ornament without adequate knowledge. Training is the key point in transforming high-quality technology into an excellent product. It is important to underline that only a fine product can become a market leader. But the way to leadership is not practicable without sufficient training. For these reasons, every admin guide, doc, and technical forum, if opportunely given, can help a technological solution reach and consolidate the world-wide distribution, and it is exactly with this intention that I decided to write this foreword.
The FortiGate system was born following a simple philosophy: impl...

Table of contents

  1. Getting Started with FortiGate