beautypg.com

Factory default configuration – Fortinet FortiGate 4000 User Manual

Page 48

background image

48

Fortinet Inc.

Factory default configuration

Getting started

8

Press Enter to connect to the CLI of the FortiGate-4000 unit.
The following prompt is displayed:
FortiGate-4000 login:

9

Type admin and press Enter twice.
The following prompt is displayed:
Type ? for a list of commands.
For information about how to use the CLI, see the FortiGate CLI Reference Guide.

Factory default configuration

Each FortiGate-4000 unit in a FortiGate-4000 chassis is shipped with a factory default
configuration. The default configuration allows you to connect to and use the
FortiGate web-based manager to configure the FortiGate-4000 unit onto the network.
To configure the FortiGate-4000 unit onto the network, you add an administrator
password, change network interface IP addresses, add DNS server IP addresses, and
configure routing, if required.

If you plan to operate the FortiGate-4000 unit in Transparent mode, you can switch to
Transparent mode from the factory default configuration and then configure the
FortiGate-4000 unit onto the network in Transparent mode.

Once the network configuration is complete, you can perform additional configuration
tasks such as setting system time, configuring virus and attack definition updates, and
registering the FortiGate-4000 unit.

The factory default firewall configuration includes a single network address translation
(NAT) policy that allows users on your internal network to connect to the external
network, and stops users on the external network from connecting to the internal
network. You can add more policies to provide more control of the network traffic
passing through the FortiGate-4000 units.

The factory default content profiles can be used to apply different levels of antivirus
protection, web content filtering, and email filtering to the network traffic that is
controlled by firewall policies.

Factory default NAT/Route mode network configuration

Factory default Transparent mode network configuration

Factory default firewall configuration

Factory default content profiles

Factory default NAT/Route mode network configuration

When the FortiGate-4000 unit is first powered on, it is running in NAT/Route mode and
has the basic network configuration listed in

Table 12

. This configuration allows you to

connect to the FortiGate-4000 unit web-based manager and establish the
configuration required to connect the FortiGate-4000 unit to the network. In

Table 12

,

HTTPS management access means you can connect to the web-based manager
using this interface. Ping management access means this interface responds to ping
requests.