FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
1. Policy Firewall Policy Address ,User Identify ,Device Indentify
2. Policy FortiGate Option
a. Session View Policy Interface Intrenal => Wan1
b. Global View Policy Sequent Firewall
: View 2 Filed ID ,Count ,Status
mc
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Firewall Objects ( Address )
1. Object Address Firewall Policy
a. FQDN Fully Qualified Domain Name facebook.com ,youtube.com
b. Geography IP Address Assign
c. IP-Range IP Address . . . - . . .d. Subnet IP Address Subnet . . . /
:
Interface Object Address Interface Firewall Policy “Any”
ce e
9itco
m.com
FF
Domain Namemain Name
Assign Assign
IP Address IP Address
IP AIP A
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Firewall Objects ( Service )
Object Service FortiGate Service
Pre-Define Custom Service Service Object
Protocol Source Port ,Destination Port
Custom Service Service Group
Create “Group Service” Service
9itco
m ( Service ) ( Service
ect ServServ
m
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Firewall Objects ( Schedule )
Object Schedule FortiGate “Always”
Schedule Firewall
Policy FortiGate
Schedule “Recurring” One-Time
Object Schedule Group
OObject ject 9itcbjects ( Scheduects ( Sched
om
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Firewall Objects ( Traffic Shaper )
Object Traffic Shaper “Shared ,Per IP”
Shared “Per Policy” Traffic
Policy “For All Policy” Traffic Shaper Policy Object Traffic Shaper Policy Per IP Object Traffic Shaper IP Traffic Maximum
Object Traffic Shaper “Per IP” Firewall Policy
9itco
m ( Traffic Shap ( Traffic Sha
ect TraffTraf
“
m
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Firewall Objects ( VIP )
Object VIP “Static NAT 1:1” Real IP Private IP “Static NAT 1:1”
Forward Port Private IP IP Port Port Forward Port Private IP Apps Server
Real IP Assign
Objj
ewall wall Object Object 9it
com.co
m
cts (
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Security Profile ( UTM Profile )
Security Profile FortiGate Flow Based ,Proxy Based
Flow Based Packets Proxy Based Complete Content
Security Profile
m
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
Packets Flow FortiGate 9
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
AntiVirus Security Profile Scan 2 Flow Base Proxy Base Scan Protocol
WebFilter FortiGuard Categories URL
WebSite Filter WebSite Filter
mm.co
m2 FloFl
FortiGate Quick Install Guide by ITDC
FortiOS 5.x ,Rev.01
FortiGuard Block WebSite Categories
WebSite Alcohol Action = Block (http://www.johnniewalker.com)
m.coon = Block (htt = Block (httcom