LDAP Configuration

Scenario:  Our aim is to configure the firewall such that all users should be authenticated through the LDAP server placed in our local network.

Step 1>

Configure the basic LAN and WAN settings on the Firewall.

Unified threat management

UTM features

To use UTM features you have to purchase the UTM license and apply it to your device

We first have to configure the basic LAN and WAN settings on the Firewall.

File blocking

1.      Go to UTMàAntivirusà click on Create New

2.      Give the name and then click OK,  then again click on Create New

Setup for ISP Failover

  

Scenario: We want to create a network in which if one ISP fails the traffic should go through the   second ISP without our network going down.

VIP (Dynamic IP Pool)

Scenario: Configure the DIP Pool on firewall so that all users behind the firewall will be accessing internet using any IP address in the DIP pool.

VIP (Mapped IP) Configuration

Our aim is to access the server remotely using Static IP mapped to local machine.

VIP (Virtual IP – Port Forwarding)

Scenario: We have hosted a machine in the network with http (Port 80) and https (Port 443) running on it. When a remote machine will access the port 8080 it will be forwarded to port 80 to the hosted machine and port 1443 would be forwarded to 443 to the hosted machine

ISP Bandwidth Management (Traffic Shaping)

   

Scenario: Allocating particular amount of bandwidth for users in LAN

Step1>

We first need to configure the basic LAN and WAN settings on the firewall.

Initial Setup of the Fortinet firewall

By default the unit will be in factory settings.

(Note: Local computer should have the same IP range i.e. 192.168.1.x)

The Fortinet Firewall has a predefined IP which is 192.168.1.99 on its internal interface.

We have to connect the ISP cable to the either WAN1 or WAN2 port and the local computers should be connected to the any of the 6 ports on the internal side of the firewall.

Step 1

Then to access the GUI of the Fortinet Firewall we need to put the IP address https://192.168.1.99 in the browser of the explorer

 The above screen will come up.