Initial Setup of the Fortinet firewall

By default the unit will be in factory settings.

(Note: Local computer should have the same IP range i.e. 192.168.1.x)

The Fortinet Firewall has a predefined IP which is 192.168.1.99 on its internal interface.

We have to connect the ISP cable to the either WAN1 or WAN2 port and the local computers should be connected to the any of the 6 ports on the internal side of the firewall.

Step 1

Then to access the GUI of the Fortinet Firewall we need to put the IP address https://192.168.1.99 in the browser of the explorer

 The above screen will come up.

Step2

By default the User Name of the Firewall is “admin” and the password is blank.

Once the username and password is entered the following screen will come up.

By Default the IP address of 60B is configured to 192.168.1.99 on all the 6 ports of the internal interface.

All the 6 ports are in Switch Mode i.e. if we connect the cable in any ONE of the six ports on the internal side it will take the same IP address.

Step3.

Now we will configure our WAN interface. To Do so Go to,

·         System->network

·         Edit for WAN1

·         Select manual and give your ISP IP Address

·         Also select the services which you want to select to mange device using this interface

·         Click OK

And the following screen will come up.

Step4

Then we need to configure the static route. To do so go to,

·         Router  à  static

·         Select Create New and give the following details

In the option of Gateway give the gateway IP address of your ISP.

Step5

Now we need to create a policy from internal to WAN1 port to allow the internet access.

By Default a policy is created, we need to verify it from Firewallà Policy

Step6

To configure the DNS settings go to,

·         System->network->options

Enter the Primary and the Secondary server addresses that you receive from your ISP.

With these following steps we can complete the basic configuration of the Firewall for internet access.

NOTE:

1>    DHCP

To configure the DHCP go to,

Systemà DHCP

By default one server is already created in the internal service. To modify/verify it click on edit against the internal option.

By default the addresses are listed we can modify the range if we want to; else we can use the same range.

The advance tab here gives the options of defining different DNS address or exclude range of IP Addresses.

There is a Tab under the advanced option which is named Exclude Ranges; we can define the IP range that we want to exclude. For e.g. If we have selected DHCP for 192.168.1.0/24 we can exclude the IP range from 192.168.1.120-192.168.1.130

2> Backup, Restore and Firmware Upgrade

To do so go to,

Systemà Maintenance and the following screen will come up.

From the above screen you can take the backup of the existing configuration or load a pre-saved configuration and also upgrade the firmware.