FortiGate Operator Learning Notes

FortiGate is a next-generation firewall (NGFW) that delivers industry-leading enterprise security with full visibility and threat protection.

Using FortiGate, organizations can achieve:

• Ultra-fast security throughout their network
• A consistent real-time defense
• An excellent user experience
• Operational efficiency and automated workflows

Note: training course - https://training.fortinet.com/course/view.php?id=39326
1. FortiGate Overview

FortiGate Overview

FortiGate Platform Structure

Models

LAN - DHCP

• Destination
• Gateway address
• Interface

Verify the route from Dashboard - Network - Static & Dynamic Routing widget - Click to expand

Policies

By default, the inspection mode of the new firewall policy is set to Flow Based.

Flow-based inspection

Proxy-based insepction

Change Inspection Mode:

From the CLI.

 

Use the below command to change the inspection mode:

 

config firewall policy

    edit # (ID of the policy)

    set inspection-mode <flow or proxy>  

end

Internet Access Policy Rule example:

Show Matching logs

Firewall Authentication

Local Password Auth

Remote Password Authentication

Steps:

• Create a user account
• Configure Remote auth
• Create a user group
• add authenication to a firewall policy
• verify and monitor firewall authentication

Inspect SSL Traffic

Blocking Malware

References