Document Outline

• Table of Contents
• Introduction
  • About FortiGate Antivirus Firewalls
    • Antivirus protection
    • Web content filtering
    • Spam filtering
    • Firewall
      • NAT/Route mode
      • Transparent mode
    • VLANs and virtual domains
    • Intrusion Prevention System (IPS)
    • VPN
    • High availability
    • Secure installation, configuration, and management
      • Web-based manager
      • Command line interface
      • Logging and reporting
  • Document conventions
  • FortiGate documentation
    • Fortinet Knowledge Center
    • Comments on Fortinet technical documentation
  • Related documentation
    • FortiManager documentation
    • FortiClient documentation
    • FortiMail documentation
    • FortiLog documentation
  • Customer service and technical support
• System status
  • Console access
  • Status
    • Viewing system status
      • System status
      • Unit Information
      • Recent Virus Detections
      • Content Summary
      • Interface Status
      • System Resources
      • History
      • Recent Intrusion Detections
    • Changing unit information
  • Session list
  • Changing the FortiGate firmware
    • Upgrading to a new firmware version
      • Upgrading the firmware using the web-based manager
      • Upgrading the firmware using the CLI
    • Reverting to a previous firmware version
      • Reverting to a previous firmware version using the web-based manager
      • Reverting to a previous firmware version using the CLI
    • Installing firmware images from a system reboot using the CLI
      • Restoring the previous configuration
    • Testing a new firmware image before installing it
    • Installing and using a backup firmware image
      • Installing a backup firmware image
      • Switching to the backup firmware image
      • Switching back to the default firmware image
• System network
  • Interface
    • Interface settings
      • Name
      • Interface
      • VLAN ID
      • Virtual Domain
      • Addressing mode
      • Manual
      • DHCP
      • PPPoE
      • DDNS
      • Ping server
      • Administrative access
      • MTU
      • Log
    • Configuring interfaces
  • Zone
    • Zone settings
  • Management
  • DNS
  • Routing table (Transparent Mode)
    • Routing table list
    • Transparent mode route settings
  • VLAN overview
    • FortiGate units and VLANs
  • VLANs in NAT/Route mode
    • Rules for VLAN IDs
    • Rules for VLAN IP addresses
    • Adding VLAN subinterfaces
  • VLANs in Transparent mode
    • Rules for VLAN IDs
    • Transparent mode virtual domains and VLANs
    • Transparent mode VLAN list
    • Transparent mode VLAN settings
  • FortiGate IPv6 support
• System DHCP
  • Service
    • DHCP service settings
  • Server
    • DHCP server settings
  • Exclude range
    • DHCP exclude range settings
  • IP/MAC binding
    • DHCP IP/MAC binding settings
  • Dynamic IP
• System config
  • System time
  • Options
  • HA
    • HA configuration
      • Standalone Mode
      • High Availability
      • Cluster Members
      • Mode
      • Group ID
      • Unit Priority
      • Override Master
      • Password
      • Schedule
      • Priorities of Heartbeat Device
      • Heartbeat device IP addresses
      • Monitor priorities
    • Configuring an HA cluster
    • Managing an HA cluster
  • SNMP
    • Configuring SNMP
    • SNMP community
    • FortiGate MIBs
    • FortiGate traps
    • Fortinet MIB fields
  • Replacement messages
    • Replacement messages list
    • Changing replacement messages
  • FortiManager
• System administration
  • Administrators
    • Administrators list
    • Administrators options
      • Using trusted hosts
  • Access profiles
    • Access profile list
    • Access profile options
• System maintenance
  • Backup and restore
    • Backing up and Restoring
  • Update center
    • Updating antivirus and attack definitions
    • Enabling push updates
      • Push updates when FortiGate IP addresses change
      • Enabling push updates through a NAT device
  • Support
    • Sending a bug report
    • Registering a FortiGate unit
  • Shutdown
• System virtual domain
  • Virtual domain properties
    • Exclusive virtual domain properties
    • Shared configuration settings
    • Administration and management
  • Virtual domains
    • Adding a virtual domain
    • Selecting a virtual domain
    • Selecting a management virtual domain
  • Configuring virtual domains
    • Adding interfaces, VLAN subinterfaces, and zones to a virtual domain
    • Configuring routing for a virtual domain
    • Configuring firewall policies for a virtual domain
    • Configuring IPSec VPN for a virtual domain
• Router
  • Static
    • Static route list
    • Static route options
  • Policy
    • Policy route list
    • Policy route options
  • RIP
    • General
    • Networks list
    • Networks options
    • Interface list
    • Interface options
    • Distribute list
    • Distribute list options
    • Offset list
    • Offset list options
  • Router objects
    • Access list
    • New access list
    • New access list entry
    • Prefix list
    • New Prefix list
    • New prefix list entry
    • Route-map list
    • New Route-map
    • Route-map list entry
    • Key chain list
    • New key chain
    • Key chain list entry
  • Monitor
    • Routing monitor list
  • CLI configuration
    • get router info ospf
      • Command syntax
      • Examples
    • get router info protocols
      • Command syntax
    • get router info rip
      • Command syntax
      • Examples
    • config router ospf
      • Command syntax pattern
      • Example
      • config area
      • config area command syntax pattern
      • Example
      • config filter-list
      • config filter-list command syntax pattern
      • Example
      • config range
      • config range command syntax pattern
      • Example
      • config virtual-link
      • config virtual link command syntax pattern
      • Example
      • config distribute-list
      • config distribute-list command syntax pattern
      • Example
      • config neighbor
      • config neighbor command syntax pattern
      • Example
      • config network
      • config network command syntax pattern
      • Example
      • config ospf-interface
      • config ospf-interface command syntax pattern
      • Example
      • config redistribute
      • config redistribute command syntax pattern
      • Example
      • config summary-address
      • config summary-address command syntax pattern
      • Example
    • config router static6
      • Command syntax pattern
      • Example
• Firewall
  • Policy
    • How policy matching works
    • Policy list
    • Policy options
    • Advanced policy options
      • Authentication
      • Traffic Shaping
      • Differentiated Services
      • Comments
    • Configuring firewall policies
    • Policy CLI configuration
      • Command syntax pattern
  • Address
    • Address list
    • Address options
    • Configuring addresses
    • Address group list
    • Address group options
    • Configuring address groups
  • Service
    • Predefined service list
    • Custom service list
    • Custom service options
      • TCP and UDP custom service options
      • ICMP custom service options
      • IP custom service options
    • Configuring custom services
    • Service group list
    • Service group options
    • Configuring service groups
  • Schedule
    • One-time schedule list
    • One-time schedule options
    • Configuring one-time schedules
    • Recurring schedule list
    • Recurring schedule options
    • Configuring recurring schedules
  • Virtual IP
    • Virtual IP list
    • Virtual IP options
    • Configuring virtual IPs
  • IP pool
    • IP pool list
    • IP pool options
    • Configuring IP pools
    • IP Pools for firewall policies that use fixed ports
    • IP pools and dynamic NAT
  • Protection profile
    • Protection profile list
    • Default protection profiles
    • Protection profile options
      • Configuring antivirus options
      • Configuring web filtering options
      • Configuring web category filtering options
      • Configuring spam filtering options
      • Configuring IPS options
      • Configuring content archive options
    • Configuring protection profiles
    • Profile CLI configuration
      • Command syntax pattern
• Users and authentication
  • Setting authentication timeout
  • Local
    • Local user list
    • Local user options
  • RADIUS
    • RADIUS server list
    • RADIUS server options
  • LDAP
    • LDAP server list
    • LDAP server options
  • User group
    • User group list
    • User group options
  • CLI configuration
    • peer
      • Command syntax pattern
      • Example
    • peergrp
      • Command syntax pattern
      • Example
• VPN
  • Phase 1
    • Phase 1 list
    • Phase 1 basic settings
    • Phase 1 advanced settings
  • Phase 2
    • Phase 2 list
    • Phase 2 basic settings
    • Phase 2 advanced options
  • Manual key
    • Manual key list
    • Manual key options
  • Concentrator
    • Concentrator list
    • Concentrator options
  • Ping Generator
    • Ping generator options
  • Monitor
    • Dialup monitor
    • Static IP and dynamic DNS monitor
  • PPTP
    • PPTP range
  • L2TP
    • L2TP range
  • Certificates
    • Local certificate list
    • Certificate request
    • Importing signed certificates
    • CA certificate list
    • Importing CA certificates
  • VPN configuration procedures
    • IPSec configuration procedures
      • Adding firewall policies for IPSec VPN tunnels
    • PPTP configuration procedures
    • L2TP configuration procedures
  • CLI configuration
    • ipsec phase1
      • Command syntax pattern
      • Example
    • ipsec phase2
      • Command syntax pattern
    • ipsec vip
      • Command syntax pattern
      • Example
      • Configuring IPSec virtual IP addresses
• IPS
  • Protection profile configuration
  • IPS updates and information
  • Signature
    • Predefined
      • Predefined signature list
      • Configuring predefined signatures
      • Configuring parameters for dissector signatures
    • Custom
      • Custom signature list
      • Adding custom signatures
      • Backing up and restoring custom signature files
  • Anomaly
    • Anomaly list
    • Configuring an anomaly
    • Anomaly CLI configuration
      • (config ips anomaly) config limit
      • Command syntax pattern
      • Example
  • Configuring IPS logging and alert email
  • Default fail open setting
• Antivirus
  • Protection profile configuration
  • Order of antivirus operations
  • Virus list updates and information
  • File block
    • File block list
    • Configuring the file block list
  • Quarantine
    • Quarantined files list
    • Quarantined files list options
    • AutoSubmit list
    • AutoSubmit list options
    • Configuring the AutoSubmit list
    • Config
  • Config
    • Virus list
    • Config
    • Grayware
    • Grayware options
  • CLI configuration
    • config antivirus heuristic
      • Command syntax pattern
      • Example
    • config antivirus quarantine
      • Command syntax pattern
      • antivirus quarantine command keywords and variables
    • config antivirus service http
      • Command syntax pattern
      • How file size limits work
      • Example
    • config antivirus service ftp
      • Command syntax pattern
      • How file size limits work
      • Example
    • config antivirus service pop3
      • Command syntax pattern
      • How file size limits work
      • Example
    • config antivirus service imap
      • Command syntax pattern
      • How file size limits work
      • Example
    • config antivirus service smtp
      • Command syntax pattern
      • How file size limits work
      • Example
• Web filter
  • Protection profile configuration
  • Order of web filter operations
  • Content block
    • Web content block list
    • Web content block options
    • Configuring the web content block list
  • URL block
    • Web URL block list
    • Web URL block options
    • Configuring the web URL block list
    • Web pattern block list
    • Web pattern block options
    • Configuring web pattern block
  • URL exempt
    • URL exempt list
    • URL exempt list options
    • Configuring URL exempt
  • Category block
    • FortiGuard managed web filtering service
      • FortiGuard categories and ratings
      • FortiGuard Service Points
      • FortiGuard licensing
      • FortiGuard configuration
    • Category block configuration options
    • Configuring web category block
    • Category block reports
    • Category block reports options
    • Generating a category block report
    • Category block CLI configuration
      • Command syntax pattern
      • Example
  • Script filter
    • Web script filter options
• Spam filter
  • Protection profile configuration
  • Order of spam filter operations
  • FortiShield
    • FortiShield options
    • Configuring the FortiShield cache
  • IP address
    • IP address list
    • IP address options
    • Configuring the IP address list
  • RBL & ORDBL
    • RBL & ORDBL list
    • RBL & ORDBL options
    • Configuring the RBL & ORDBL list
  • Email address
    • Email address list
    • Email address options
    • Configuring the email address list
  • MIME headers
    • MIME headers list
    • MIME headers options
    • Configuring the MIME headers list
  • Banned word
    • Banned word list
    • Banned word options
    • Configuring the banned word list
  • Using Perl regular expressions
    • Regular expression vs. wildcard match pattern
    • Word boundary
    • Case sensitivity
    • Examples
• Log & Report
  • Log config
    • Log Setting options
      • FortiLog settings
      • Disk settings
      • Memory settings
      • Syslog settings
      • WebTrends settings
    • Alert E-mail options
    • Log filter options
      • Traffic log
      • Event log
      • Anti-virus log
      • Web filter log
      • Attack log
      • Spam filter log
    • Configuring log filters
    • Enabling traffic logging
  • Log access
    • Viewing log messages
      • Choosing columns
    • Searching log messages
  • CLI configuration
    • fortilog setting
      • Command syntax pattern
      • Example
    • syslogd setting
      • Command syntax pattern
      • Example
• FortiGuard categories
• Glossary
• Index