Fortinet Ürünleri için Eğitimler ve Kılavuzlar (Video Kütüphanesi)

This video shows how to set up FortiAuthenticator to function as a RADIUS server for FortiGate SSL VPN authentication. It involves adding users to FortiAuthenticator, setting up the RADIUS client, and then configuring the FortiGate to use the FortiAuthenticator as a RADIUS server.

Learn to configure WAN Link Load Balancing in FortiOS 5.2.3 with the Weighted Round Robin method for redundant internet connections.

 

Learn how to prevent your users from getting security errors when you have full SSL inspection enabled. You will create a custom self-signed certificate with OpenSSL and then install it on your FortiGate. Unalike the FortiGate’s default certificate; this custom certificate will provide a chain of trust that allows network users to trust the FortiGate as a CA in its own right. Once the FortiGate is trusted, your users should not see any more certificate warnings. Note: This video uses OpenSSL Version 0.9.8h-1.

 

Learn to create a captive portal to control access to your wireless network. Captive portals capture all users connecting to your FortiAP’s wireless network, and redirect their traffic to the portal page. On the portal page, you can display information, provide a disclaimer for an open or public network, or ask for authentication credentials. Captive portals provide security and information to your users, without compromising ease of access. In this example, a captive portal will be used to secure an open network for company employees.

 

Learn how to set up a wireless connection to your FortiAP unit. FortiAP, or Forti-Access-Point, Fortinet’s wireless LAN solution, designed to work with the FortiGate network security platform. In this example, the FortiAP is connected to, and managed by, a FortiGate in Tunnel Mode, allowing wireless access to the network.

 

In this example, you will use FortiCloud, an online logging service provided by Fortinet, to store the logs of your FortiGate unit’s traffic. You will also access logs using the FortiCloud website: http://www.forticloud.com/. Before you can use FortiCloud you must register your FortiGate, for more information see: http://cookbook.fortinet.com/fortigate-registration-basic-settings/.

 

In this example, you will enable logging to capture the details of the network traffic processed by your FortiGate unit. Capturing log details will provide you with detailed traffic information that you can use to asses any network issues.

 

In this video, you will use FortiGate web filtering to apply SafeSearch to all Google results and also block access to websites in the adult/mature content FortiGuard category. In order to block encrypted traffic, you will also either use full SSL inspection or change your network’s DNS settings. By doing this, you can make sure that unsuitable content is blocked for all users on your network, even Google search results. This recipe requires an active FortiGuard web filtering licence.

 

A demonstration of the Smart Control capabilities in FortiADC-E, using two common examples: provisioning a new server automatically in response to high traffic and powering up a new server using IPMI when an existing server becomes unavailable.

 

Fortinet Japan team created a animated explanation video for our wireless solution.

 

Learn how to override a website’s FortiGuard Category rating. FortiGuard Categories are up-to-date lists of websites, which you can use to easily filter certain types of content. By overriding a site’s web rating, you can block a website that is in an allowed category, or allow a website that is in a blocked category. In this example, you will create a custom category for Allowed Sites, and add the Fortinet Cookbook website to it.

 

Learn how to configure FortiGate to send system event notifications. We demonstrate notifications for IPS intrusion detection and Web Filter policy violation.

 

In this episode of Fortinet Stories, Nathan gets connected to FortiGuard and finds out how easy it is to secure his network. Learn about the FortiGate here: http://www.fortinet.com/products/fortigate/index.html Visit the FortiGuard Center here: http://www.fortiguard.com.

 

In this video, we will introduce you to FortiClient EMS Beta and how you can use it to easily deploy FortiClient to multiple workstations, and then monitor the workstations throughout your network while FortiGate enforced compliance.

 

Learn how to use Application Control to block web traffic from devices running Windows operating systems in the NT5 category, including Windows XP and Windows Server 2003, and virtual machines of these OSs. When an operating system is no longer supported, it becomes a threat to the network because newly discovered exploits will never be patched. Using the FortiGate unit’s Application Control, you can restrict these computers from accessing external resources and putting the network at risk. This recipe only blocks web traffic from NT5 devices. It does not prevent them from connecting to the network, but the logs generated by this recipe can be used to identify devices so they can be blocked completely.

 

See how you can join the Fortinet Beta Program to get early access to new products and features, and share your feedback using the Fortinet beta forums.

 

Learn how to configure a DMZ network to protect a public web server from unauthorized access. A DMZ network is a secure network connected to the FortiGate that only grants access if it has been explicitly allowed. In this example the DMZ network will allow access to a web server using different addresses for internal and external users, while preventing access to the internal network if the web server is compromised.

 

Learn how to use remote IPsec and SSL VPN tunnels to bypass internet access restrictions. A VPN tunnel is an encrypted traffic passage between two endpoints. In this example, the VPN tunnel is between a local user running FortiClient with restricted internet access, and a remote FortiGate with unrestricted internet access. Restricted internet access will be simulated with a Web Filtering Profile that blocks google.com. You can create an SSL VPN tunnel or an IPsec VPN tunnel to connect to the remote FortiGate unit, and you will be able to bypass the web filter and browse to google.com.

 

This video provides an overview of new ‘Application Risk and Control’ report available in FortiAnalyzer v5.2.2. It includes new layout and chart types.

 

In this episode of Fortinet Stories, Fiona helps Nathan get started with his FortiGate.

 

In this video, you will grant a Tor Browser user access to the internet, while monitoring the user’s activity. Use of the Tor Browser will be blocked for all other users. Tor, or The Onion Router, allows users to bounce their traffic around a distributed network of worldwide relays, in order to make it difficult to track the traffic back to the origin. This example uses two pre-existing user accounts, jack and jill, whose Tor use will be blocked and monitored respectively.

 

This video shows how to install and enable an SSL Certificate for Web UI Administration on a FortiGate.

 

This video shows how to purchase a publicly signed SSL certificate and install it for use with a FortiGate’s SSL VPN (Web and Tunnel modes).

 

Introduction to the new WYSIWYG Report Editor in FortiAnalyzer versions 5.2 and above, with demonstration of table based layout and advanced formatting features.

 

Learn how to block access to Google services such as Gmail for consumer accounts, while still allowing access for corporate accounts. If your organization has set up a Google corporate account to use Google service such as Gmail or Google Docs, you can block users from accessing their personal Google accounts through your network, while allowing access to the corporate accounts.

 

Learn how to configure priority VoIP traffic shaping with your FortiGate. You will give VoIP communications a high traffic priority with a guaranteed bandwidth to ensure Quality of Service. To achieve high quality real-time voice transmissions, VoIP traffic requires priority over other types of traffic, minimal packet loss, and jitter buffers. You will use a traffic shaper to limit bandwidth consuming services, like FTP, and another shaper to provide a consistent bandwidth for day-to-day email, web, and other traffic. First, you will customize three existing traffic shapers—high priority, medium priority, and low priority—and then create a separate security policy for each service type.

 

How to setup an IPSec VPN between an Apple MacBook and a FortiGate, using the native Mac OS VPN client.

 

Learn how to limit mobile device access to a wireless network by setting up a schedule. By using a schedule group and a BYOD device policy, you can limit mobile device internet usage outside of set hours. BYOD, or Bring Your Own Device, is the practice of allowing network users to access the network with their personal wireless devices, such as smartphones and tablets. In this example, a school offers Wifi to students, but only allows devices to access it before class, during lunch, and after class.

 

In this video, we will show you how to manage a FortiSwitch from a FortiGate, examples include setting up VLAN’s applying policies and authentication methods to them.

 

Learn how to add device definitions to your FortiGate using Media Access Control addresses, or MAC addresses. These definitions form a whitelist that allow you to control the devices that can access your wireless network. MAC address identification also allows you to assign a reserved IP for exclusive use of a device when it connects to the wireless network.

 

This video explains how to share your calendar in Mozilla Thunderbird.

 

This video is a brief tutorial on how to use FortiRecorder Mobile on an iOS device.

 

This video provides a brief tutorial on how to configure and use FortiRecorder Mobile on Android.

 

The new Fortinet Cookbook Website is now available, at cookbook.fortinet.com. The Cookbook is a collection of clear step-by-step recipes on how to get things done with your FortiGate.

 

In this video, you will use FortiToken Mobile to add two-factor authentication to a user account. Two-factor authentication requires users to enter an additional piece of information after their username and password is accepted. In this case, you’ll use a one-time password generated by the FortiToken app.

 

Learn how to use packet capture to monitor traffic passing through your FortiGate. Intercepting and capturing packets can be a useful troubleshooting tool, allowing you to analyze traffic in detail that has passed through your FortiGate. You can easily create customized packet filters and run them when you need more information.

 

We show how to upgrade FortiAnalyzer firmware from 5.0.6 to 5.0.10. Improved handing of HA Clusters, migration of existing logs, and new GUI widgets are shown.

 

Learn how to protect a web server against external attacks, using a FortiGate with an Intrusion Prevention System (IPS) profile and a Denial of Service (DoS) policy. This will defend your server against a variety of attacks. Before performing any test attacks, always ensure you are targeting the correct IP.

 

Learn to apply a web filter quota to an IPv4 policy with user or device authentication configured. You will set a 5 minute time limit, or quota, on visiting any websites in the General – Personal Interest category. This accommodates users by allowing them the flexibility to visit websites of a personal nature when necessary.

 

Learn how to run FortiMail in server mode.

 

In this video, you will create a route-based IPsec VPN to allow transparent communication between two different networks, each located behind a FortiGate. The VPN will be created on both FortiGates by using the VPN Wizard’s Site to Site FortiGate template.

 

A quick look at FortiRecorder Central’s user interface.

 

A quick look at how to view live and recorded video in FortiRecorder Central.

 

This video demonstrates the powerful new FSSO features introduced in FortiOS v5.2.2 which can help create new FSSO groups in a few clicks.

 

A remote FortiGate having unrestricted internet access can be tunneled to via SSL VPN to gain access to locally restricted resources.

 

Learn how to connect and configure a new FortiGate unit in NAT/Route mode to securely connect a private network to the Internet. In NAT/Route mode, a FortiGate unit is installed as a gateway or router between two networks. In most cases, it is used between a private network and the Internet. This allows the FortiGate to hide the IP addresses of the private network using network address translation (NAT).

 

This video shows how to setup, manage, and monitor your FortiAP wireless access points from FortiCloud. This step-by-step video also covers set-up for a FortiAP 221C.

 

Learn how configure Fortinet Single Sign On directly in the security policy using the new FSSO wizard, introduced in FortiOS 5.2.2.

 

Learn how to set up a secondary backup FortiGate unit that will provide redundancy if the primary FortiGate unit fails. This setup is known as High Availability, and improves network reliability.

 

Learn how to provide a group of remote users with secure encrypted access to the corporate network using the IPsec VPN Wizard. The tunnel provides group members with encrypted access to the internal network, and forces them through the FortiGate unit for secure Internet access.

 

Learn how to add an explicit proxy with web caching to your wireless network. An explicit proxy requires all devices on the wireless network to connect to the proxy at port 8080 before they can browse content on the Internet. WAN Optimization web caching can be added to reduce bandwidth use and improve performance.

 

Learn how to set up guest WiFi access to a FortiAP in tunnel mode. You will set up a temporary guest WiFi user account that expires in 5 minutes and then create an optional admin account to manage guest accounts. (5.2).

 

A FortiGate in one arm sniffer mode provides visibility into network traffic without interfering with network traffic, permitting safe demonstration of the flow-based detection services of FortiGuard.

 

This video covers an overview and common use-cases of the new FortiView feature available on many FortiGate models.

 

Learn how malicious hackers use advanced threats to bypass traditional security measures from key FortiGuard Labs security analyst Derek Manky. And get tips on how to improve your defense strategy to protect your organization against these types of attacks.

 

Get an overview of an advanced attack and learn how next generation firewall, secure email gateway and sandboxing technologies can break that kill chain.

 

If your Firewall ran 10x faster than it does today, it would transform your business. Check out this 1 minute video to see how!

 

Learn how to create a site-to-site IPsec VPN tunnel between a FortiGate-protected network and a site hosted on Microsoft Azure. Using FortiOS 5.2, you can create a tunnel between the FortiGate and Azure VPN sites, so that a secure tunnel can be established with the desired security profiles applied by the FortiGate.

 

Learn how to use application control to track applications on your network and enhance security by restricting certain applications. The FortiGate database categorizes applications by Category, Technology, Popularity and Risk. In this example, you will block BitTorrent, a high risk file sharing application that is part of the peer to peer category. You will also block access to the most popular application, YouTube.

 

Demonstration of using FortiClient–registered to a Fortigate DHCP Server–to enforce auto-connecting, always-up (IPsec) VPN on Windows PC endpoints. You’ll see how to export FortiClient XML settings, modify them, and add them into a FortiClient profile on the FortiGate.

 

Learn how to remove certificate warnings for your users when using SSL Inspection on your FortiGate. 

 

Learn how to set up an IPsec VPN using the new VPN Wizard in FortiOS 5.2. Using IPsec VPN, you can provide remote iOS users with secure, encrypted access to an internal network, and routes their Internet traffic through the FortiGate so it abides by your security and firewall policies. This example uses iOS, but you can adapt it for any VPN-capable device. 

 

Learn how to add a FortiGate in Transparent Mode to your existing network configuration, adding security with no added complexity. A FortiGate in Transparent Mode performs no routing or network address translation (NAT), but can still filter and scan traffic. It will silently log traffic and apply security profiles like Application Control, Antivirus and Web Filtering with no indication that the FortiGate is there, giving you an invisible line of security between the internet and your network. 

 

Learn how to use port forwarding to limit access to an internal server. By using virtual IPs to configure port forwarding on your FortiGate unit, you can allow remote connections with a server behind the FortiGate’s firewall, but only through ports that you choose. This example allows TCP port 80 for HTTP traffic, port 22 for SSH traffic, and port 21 for FTP traffic.

 

Learn how to use a URL filter to block access to a specific website: Facebook, and it’s subdomains. When you enable the FortiGuard Categories to allow access to a particular type of content, such as Social Networking, you can still prohibit the use of specific websites within that category.

 

This video shows few GUI tips & tricks that will make it easier to configure and modify firewall policies. (FortiOS v5.2).

 

This video shows how to setup IPsec VPN access (using FortiGate and FortiClient v5.2 ) for remote users so that they can securely connect and access corporate resources..

 

Learn how to configure SSL VPN for a remote worker to connect to a FortiGate-protected network, and enforce your security policies. You will create a remote worker named Jack. When Jack works at home, or on his travels, he can go to the web portal using any device with Internet access and FortiClient. The SSL VPN tunnel provides an encrypted communication path for Jack to connect to internal network connections and protected Internet access.

 

Fortinet Corporate Video 2014.

 

Site-to-Site IPsec VPN set-up using the improved VPN Creation Wizard in FortiOS v5.2.

 

Learn how to create schedules that restrict internet access based on time and user account info, allowing you more control over what content users can access and how much bandwidth is used. This example involves a full-time employee with unlimited access, a part-time employee with limited access, and a restriction on mobile devices.

 

Learn how to prevent your users from getting security certificate errors when you have full SSL inspection (also known as deep inspection) enabled. By providing users with the FortiGate SSL CA certificate, you will discourage them from selecting ‘Continue’ to circumvent SSL errors, a habit that can put them at risk.

 

This video shows how to setup site-to-site IPSec VPN between two FortiGate units (running FortiOS v5.0) when one of the unit is behind a NAT device.

 

 

Learn how to create a virtual Wide Area Network link that provides your FortiGate unit with redundant Internet connections from two Internet Service Providers or ISPs. The virtual WAN link combines both connections into a single interface. This example uses weighted load balancing set up so that one primary ISP handles most of your Internet traffic, and the secondary ISP provides automatic failover if your primary ISP connection fails.

 

 

Learn how to create and order multiple IPv4 policies in the policy table. In this example, three policies will be configured: PolicyA allows Internet access to the local area network, PolicyB allows Internet access to mobile devices connecting while applying additional security features and PolicyC: allows the system administrator’s PC to have full access. In this example, a wireless network has already been configured that is in the same subnet as the wired LAN.

 

 

This video summarizes all the new features introduced in FortiOS v5.2.

 

This third-party video shows how to configure and setup an High-Availability (HA) cluster using two FortiGate devices running FortiOS v5.0.

 

This video shows step-by-step configuration of site-to-site IPsec VPN (using FortiGate running FortiOS v5.0) where one host uses a dynamic IP address on a PPPoE connection with the FortiOS Dynamic DNS feature.

 

Learn how to apply the YouTube for Education filter, and prevent users on your network from accessing video content that is not on YouTube’s Educational Portal. Users often try to bypass web filters, so you will also learn to prevent common workarounds, such as using HTTPS access or going to a direct link.

 

This video will show you a few pointers regarding navigating and understanding the FortiRecorder’s event monitor feature.

 

This video covers how to connect your FortiCam to your FortiRecorder for the first time using the direct connection method.

 

Learn how to block files that are over 10Mb in size, since by default these files will not be scanned by your FortiGate’s AntiVirus. You will also customize the replacement message that appears when an oversize file is blocked. By blocking oversize files, you can keep potentially malicious files out of your network, while the replacement message educates users about your internet use policy.

 

This video shows how to setup a basic site-to-site IPsec VPN between headquarters and branch office using FortiGate’s running FortiOS v5.0.

 

The heartbleed vulnerability is a programming error found in the popular OpenSSL library that if exploited will allow an attacker to steal pieces of information from the memory of a server. This video shows how to protect your servers and other network resources behind the FortiGate from heartbleed vulnerability. This video shows steps that should be taken by all FortiGate administrators to protect their network against attacks and vulnerabilities like Heartbleed.

 

FortiAP are cost-effective IEEE 802.11ac and 802.11n “Thin” Wireless Access Points (AP) that provide Integrated Network Security and WiFi client access. This video shows a basic setup to get AP connected with FortiGate and demonstrate how wireless controller manages it. It does not intend to cover full enterprise scenarios (with remote authenticate), these will be covered in other videos.

 

FortiSandbox is an Advanced Threat Protection Appliance designed to identify the highly targeted and tailored attacks that increasingly bypass traditional defenses and lurk within networks. Offering a unique dual-level Sandbox, inspection of all protocols and functions in one appliance and optional integration with your existing FortiGate infrastructure. This video shows how to deploy and setup FortiSandbox device in both standalone and FortiGate/FortiMail integrated mode.

 

FortiAP Thin Wireless Access Points provide Integrated, Secure Wireless LAN Access for your Enterprise. Enabling simple, cost-effective Wireless Network Access, FortiAPs are an ideal solution for extending your FortiGate Connected UTM. This video gives an overview of various FortiAP features.

 

An SSL VPN connection can use two-factor user authentication for enhanced security, requiring the user to present a secondary credential to verify their identity. Once two-factor authentication is enabled on a VPN user’s account in the FortiGate, the user must have a temporary code generated by a FortiToken device or the FortiToken mobile app to log in to the SSL VPN portal.

 

This video show how to setup Fortinet Single Sign-On (FSSO) in Polling mode where FortiGate itself polls Active Directory (AD) server for group information and no third party software needs to be installed on customer’s server.

 

This video shows how to deploy FortiDDoS. FortiDDoS learns your unique network traffic patterns to flag zombies on your network, and to protect more accurately from denial of service (DoS) attacks.

 

Learn how to control which Internet websites users can access, by specifying web filtering profiles. Web filtering profiles let you identify and monitor all users accessing the Internet through your FortiGate unit by requiring them to authenticate to connect. You will learn how to easily set up different access types or levels. You can choose which types of websites you want to block using FortiGuard Categories, or you can use URL filtering to block specific web addresses.

 

Learn how to set up a basic Virtual Domain (or VDOM) configuration with two individually-managed VDOMs in one FortiGate. With Virtual Domains you can divide a single FortiGate into multiple distinct instances, each capable of separate firewalling, routing, and administration. Each virtual domain can also apply completely different UTM, ACP, and Next Generation Firewall features. This example is based on setting up VDOMs for departments within a company: R&D, and Marketing.

 

This Video shows how to create and add a custom IPS signature to a FortiGate (FortiOS v5.0). The signatures can be used to Monitor Traffic, Block Attacks and Detect Applications. In this video we create custom signatures for the following: – Microsoft RDP – SnapChat – SAP

 

Inside FortiOS is a new Fortinet video series looking at the features and functions of FortiOS 5 and beyond. Today’s topic is Virtual Domains, or VDOMs: multiple virtual independently-operating firewalls within a single FortiGate device.

 

This video shows how to distribute traffic between data centers worldwide via DNS load balancing with FortiDirector.

Learn how to use Fortinet Single Sign On (FSSO) to integrate a FortiGate unit into a Windows Active Directory network to provide single-sign-on (SSO) access to the Internet.

 

This video demonstrates how a user can use the FortiClient Configurator tool to create a custom FortiClient installer. A FortiClient installer can be customized to include the following: – VPN Only feature (SSL and IPSec) – All features – Pre-configured with a configuration file – Enable/Disable software updates.

 

Learn how to configure your SSL VPN setup to work with Citrix Networks and grant remote access to an Outlook Web email service on an internal network. By configuring your FortiGate and the SSL VPN portal, you can make it easy to securely connect to internal network servers and services. Basic SSL VPN configuration is covered in a previous Cookbook Video, located here: http://www.youtube.com/watch?v=vPHua3jFAzA

 

This Video shows how to create and modify a table chart in FortiAnalyzer 5.0 that looks as presentable as pre-defined charts. User’s can now add icons, bar graphics, formatted text in a table chart. There is also an option to merge multiple columns together to make table charts look more presentable.

 

Learn how to use web filtering quotas to limit user access to Youtube and other streaming media sites. Quotas are more flexible than schedules, as they allow users to control when they access the affected sites. In order to use quotas, an active FortiGuard license is required.

 

Learn how to override FortiGuard web filters to control access to websites. Overrides allow you to add exceptions to web filtering rules that would otherwise be applied to your FortiGate traffic. There are two override methods: one that is applied to all traffic accepted by a policy and one that is applied to specific traffic based on user identity. In this video, fortinet.com will be used as a test site and access to it will be controlled using both methods. Because these overrides are based on FortiGuard classifications, an active FortiGuard licence is required.

 

Set-up the FortiMail 5.0 Email Security Appliance in Transparent Mode using the Quick Start Wizard to protect an email domain server.

 

This video gives an overview of FortiToken Mobile v2 App (Available on Google Play Store). The video shows how to install, open, add FortiToken, and other thrid-party tokens to the App.

 

Learn how to perform basic firewall configuration, creating addresses, policies, and security profiles. You can use firewall policies and security profiles to secure network user traffic and limit it to approved services and activities. By creating a special address and policy for your administrator PC, you can grant it unrestricted internet access.

 

Learn how to create a custom report in FortiAnalyzer v5.0. It also shows the following: – how to add headings, text, charts, etc in the custom report – set report schedule – set filters in report (i.e report for a particular user, etc) – run and download a copy of the report.

 

After an initial basic set-up of gateway mode using the Quick Start Wizard, this video shows some examples of customizing your FortiMail 5.0 Email Security Appliance configuration.

 

FortiOS 5.0 Patch 4 is now available! This video will show you some of the new features: FortiSandbox, the VPN Wizard, the Wireless Health Dashboard, and new functions for managed FortiAPs.

 

This FortiAnalyzer 5.0 video shows how to use the “Chart Builder” wizard to create a custom chart. The video also shows how to create a custom report and insert charts in it.

 

Learn how to set up a VPN tunnel for users with iOS devices to securely access internal networks and the web. Portable devices such as the iPhone and iPad allow users to stay in touch with the office without actually being there. However, these devices can be vulnerable when they leave protected networks. IPsec VPN allows you to extend the protection of your safe internal network to these devices so users outside of the physical office remain virtually connected to the internal network.

 

Set-up your FortiMail 5.0 Email Security Appliance in gateway mode using the Quick Start Wizard.

 

Learn how to set up a FortiGate and FortiAP to provide wired and wireless (LAN and Wifi) internet access. A FortiAP can add a wireless network to any FortiGate unit, but by properly configuring your FortiGate, you can assign both wired and wireless clients to the same IP subnet, sharing network resources, simplifying the FortiGate configuration, and making it easy to identify computers and devices.

 

DDNS (Dynamic DNS) can be used to provide a domain name for a device with a changing IP address, for example a FortiGate WAN interface connected to the Internet and configured using DHCP IP. If you use DDNS to create a fully qualified domain name (FQDN) for this interface then users can connect to it over the Internet even if the IP address changes. This video shows how to use the FortiGuard DDNS feature to configure a Free DDNS domain name to associate with FortiGate interface.

 

A short video datasheet for the FortiMail 5.0 Email Security Appliance from Fortinet.

 

This video shows how to fix commonly seen logging issues on FortiGate and FortiAnalyzer devices. Following issues are covered in the video: – Logs are not generated for events on FortiGate device – Cannot view Disk or FortiCloud logs from FortiGate GUI – Disk Logs are generated but reports generated using SQL Logs are empty – Cannot see historical logs on FortiAnalyzer device.

 

Learn how to configure SSL-VPN to allow a remote user to safely connect to a FortiGate-protected network, while enforcing the FortiGate’s security policies for this user. An SSL-VPN tunnel allows users to remotely access a network or the internet, requiring their traffic to pass through the FortiGate unit and enforcing the use of antivirus software. It can grant extra security to remote users accessing the web, or allow employees to access a corporate network while working from home or travelling.

 

Learn how to prevent documents and files passing through your FortiGate firewall, using Data Leak Prevention and File Filtering.

 

This video shows how to Activate, Access, and Upgrade Fortinet’s FortiCloud service from your FortiGate/FortiWifi device running FortiOS v5.0. FortiCloud is a free (1 GB) cloud based logging and reporting service. With FortiCloud you can easily store and access FortiGate logs and reports that can give you valuable insight into the prospective threats and traffic patterns of your network.

 

Learn how to block HTTP and HTTPS access to a website of your choice and to all subdomains of that site.

 

This video shows how to copy a report template (with chart config) from One FortiAnalyzer to Other in two easy steps.

 

An introduction to FortiAnalyzer Log Arrays.

 

In this video, you’re going to learn how to set up a captive guest portal for wifi users. A captive portal brings security (or access control) to an otherwise open wireless network.  To allow visitors to access your wireless network and internet, you can create time-limited guest accounts. Then users must interact with the captive portal to authenticate before the can access the Internet. A limited administrator account can be granted to a staff member (such as a receptionist), so they can distribute temporary accounts to guests.

 

Learn how to use virtual IPs to configure port forwarding on a FortiGate unit. Port forwarding allows you to ‘open’ ports and redirect traffic from one port to another. A variety of network services require open ports, such as running a web server or playing online games. This example allows incoming connections from the Internet to access a PC by opening TCP and UDP ports.

 

This video shows how to setup SSL VPN on both FortiGate (v5.0.2) and client side so that remote user’s can securely access work network. It also shows how to configure existing AD server for remote user authentication. This video includes configuration steps for both web and tunnel mode (using browser plug-in, standalone vpn client, and FortiClient). It also explains the “Split Tunnel” feature for VPN connections and how to configure split-tunnel for SSLVPN.

 

Learn how to configure a secure IPsec VPN (Tunnel mode) connection between two locations with FortiGate running FortiOS v5.0. With a FortiGate at each location, properly configured, both locations’ users will be able to securely access local addresses on the other location’s internal network, without opening either network to wider access from the internet. For the purposes of the recipe, the two locations will be known as Headquarters (HQ) and Branch. Note: This video is for IPSec Tunnel mode configuration.

 

Packet capture feature can be used to capture data packets in real time while they pass through the FortiGate. The captured results can be downloaded for offline analysis. This video shows how to configure and use “Packet Capture” feature in FortiOS 5.0.

 

This video demonstrates how to deploy a FortiManager VM in a VMware environment.

 

This example describes how to configure FortiGate SSL VPN split tunnelling using the FortiClient SSL VPN software, available from the Fortinet Support site. Using split tunneling, all communication from remote SSL VPN users to the head office internal network and to the Internet uses an SSL VPN tunnel between the user’s PC and the head office FortiGate unit. Connections to the Internet are routed back out the head office FortiGate unit to the Internet. Replies come back into the head office FortiGate unit before being routed back through the SSL VPN tunnel to the remote user.

 

In this example procedure, you will add a FortiGate unit to an existing network without changing the configuration of the network. The network is connected to the Internet using a router that performs NAT. Without replacing the existing router, the FortiGate unit will block access from the Internet to the private network but allow users on the private network to connect to the Internet

 

Learn how to set up your FortiGate unit to receive two simultaneous redundant connections from two Internet Service Providers. Having redundant connections can protect you from outages or traffic overloads, and the FortiGate unit will automatically switch to the second connection if the first fails, and when the first connection is restored it will automatically take over again. If both connections are working properly, they will share the load. This video shows one of a number of possible redundant configurations.

 

Create a web filter profile that blocks all sites except those you explicitly allow. In this example, users will be blocked from all sites except fortinet.com. You can do this by making a URL filter that has an entry that blocks all sites, and entries that allow individual sites. Ensure the entry that blocks all sites is the last entry in the URL filter list.

 

Video Quick start Guide for FortiGate and FortiWiFi devices running FortiOS v5.0. Video includes steps for initial setup of your FortiGate/FortiWiFi device using : – Web Browser – FortiExplorer for Windows/Mac – FortiExplorer iOS.

 

A DMZ network positioned between the FortiGate and your Web Server can hide the server’s internal address, impeding unauthorized access while still allowing internal network connections. This cookbook recipe shows how to configure the FortiGate’s DMZ network and security policies to allow both internal and secure external access to a web server, with two different addresses.

 

BYOD (Bring Your Own Device) users are more and more common, with devices acting as a link between personal and professional for many employees and users, but unrestricted device use can pose risks to security and productivity. This cookbook recipe shows how to set a schedule that limits BYOD users’ access to the internet to specific time periods.

 

Having two redundant internet connections from two ISPs can offer continued access and security in the case of outages or service disruptions. This cookbook recipe shows how to improve the reliability of your network with redundant connections, using equal cost multi-path (ECMP) load balancing to distribute sessions to both connections, automatically dealing with overloads and outages.

 

This video demonstrates how to setup Remote Endpoint Client Registration (using FortiClient v5.0) over SSL-VPN with FortiGate running FortiOS v5.0.1.

 

Some websites are accessible using both HTTP and HTTPS protocols, such as YouTube and Facebook, which can disrupt logging and monitoring of accessed content. This cookbook recipe shows how to block HTTPS access to these websites, using either proxy-based or flow-based web filtering profiles. You will need to have your FortiGate licensed for FortiGuard services. 

 

This video introduction to FortiClient on iOS familiarizes you with the following topics: – Secure Web Browser & Device Restrictions – SSL VPN Connection. 

 

Learn how to use Application Control to monitor and control applications’ access to your network. Application Control is a UTM security system that monitors and restricts applications over your network, using the FortiGuard database of applications, which categorizes apps according to popularity, networking technology, app function, and risk. You can create a list of flagged apps or select by category, and monitor or block the actions of those applications using your existing firewall policies. 

 

Learn how to enable and customize Client Reputation on your FortiGate unit. Client Reputation is a system unique to Fortinet products that automatically analyzes individual client data and scores clients by how much of a threat their actions may pose for your network, with clear drill-down charts. You can customize parameters to flag specific actions and behaviours as smaller or greater concerns, to help your network adapt to changing threats. 

 

Learn how to use a Remote AP to provide secure remote access to protected networks and the internet. With the proper FortiGate configuration, a Wireless Access Point can be deployed remotely at home or anywhere outside your network. The Remote AP will forward the user’s internet traffic through the FortiGate to be authenticated, and will allow them remote access to internal network addresses, without compromising the overall security of the network. 

 

This video introduces FortiClient 5.0 and how to configure endpoint control for use with your 5.0 enabled FortiGate. 

 

This video looks at some of the benefits and features of 5.0, and what they can do for your network. – Devices & BYOD – Users & Clients – Logging & Reporting – WiFi Networking and more. 

 

This video describes the new features and changes in FortiManager v5.0 Beta 1. 

 

Overview of Zone Mapping in FortiManager v4.0 MR3. 

 

Overview of Zone Mapping with virtual LANs in FortiManager v4.0 MR3. 

 

Overview of Zone Mapping with Virtual Domains in FortiManager v4.0 MR3. 

 

Overview of Policy Package, Section View versus Global View in FortiManager v4.0 MR3. 

 

Overview of Administrative Domains in FortiManager v4.0 MR3. 

 

Overview of the Add Device Wizard. 

 

With this video, you’re going to learn how to set up an OSPF VPN connection, creating a redundant secure connection between two FortiGate units. By using OSPF on the IPsec interface, you can better control VPN traffic and have secure redundancies easily built into the network structure. This example shows a simple 2-site redundant IPsec setup. With the system in place, both locations can share internet connections, and neither will lose access if one ISP is unavailable.

 

Flow-based scanning is an alternative to the standard proxy-based scanning of incoming traffic. With flow-based scanning, a proxy is not involved in the scanning process, and packets are checked as they arrive, rather than being buffered and scanned once all have arrived.

 

With this video, you’re going to learn how to set up scheduled firewall policies that will only allow traffic to certain sites at certain times of the day. For this example, we’re going to institute a policy allowing access to Youtube and Facebook only during usual lunch hours. Having such policies in place can help maintain productivity without completely restricting access to recreational content on the web, which is increasingly a regular part of users’ daily lives.

 

The FortiGate unit has a series of built-in security controls that allow you to prevent access to specific types of content on the web. Using these FortiGuard Categories, you can protect yourself from potential liability.

 

The FortiGate unit has a series of built-in security controls that allow you to prevent access to specific types of content on the web. Using these FortiGuard Categories, you can prevent users from accessing streaming media content.

 

The FortiGate unit has a series of built-in security controls that allow you to prevent access to specific types of content on the web. You can not only block content that carries liability risk, but you can also prevent programs and services from being used on your network if they might interfere with productivity. In this example, we’re going to disable Instant Messaging programs.

 

With your FortiGate unit, protecting your network from viruses is simple and straightforward, and the web-based interface gives you a variety of methods to track and monitor traffic for viruses.

 

With this video, you’re going to learn how to connect your FortiGate unit’s internal (wired) and wireless networks to the internet, with NAT Mode using PPPoE. PPPoE is an alternative to DHCP that some ISPs use, that uses a single IP, username and password received from the ISP to allow access to the internet. Your ISP will inform you if PPPoE is required.

 

The FortiGate unit can log and track the traffic used by individual processes and applications, allowing you to better monitor internet usage and determine the source of unwanted traffic.

 

With this video, you’re going to learn how to secure your FortiGate unit’s wifi networks, allowing only authorized users to access the network and the web. Securing your network will prevent unwanted traffic, and allow you to monitor and track usage from client devices, by using DHCP to assign each one a unique IP address.

 

This video guides you through the process of creating and working with policy packages and folders in FortiManager.

 

The FortiGate unit can be set to automatically block the downloading of large files, by routing all traffic through the unit’s internal UTM Proxy.

 

This is the first video in the FortiManager Cookbook series. This video guides you through the process of adding a model device, which is not yet online, to your FortiManager system.

 

This is the first video in the FortiManager Cookbook series. This video guides you through the process of adding a model device, which is not yet online, to your FortiManager system.

 

With this video, you’re going to learn how to set up your FortiGate unit to receive two simultaneous redundant connections from two Internet Service Providers. Having redundant connections can protect you from outages or traffic overloads, and the FortiGate unit will automatically switch to the second connection if the first fails, and when the first connection is restored it will automatically take over again. If both connections are working properly, they will share the load. This video shows one of a number of possible redundant configurations.

 

With this video, you’re going to learn how to connect your FortiGate unit’s internal (wired) and wireless networks to the internet, with NAT Mode using DHCP.

 

You need to control the web sites your users can visit, but you don’t have the resources to create and maintain a URL list of web sites.

5,454 total views, 3 views today