1. Introduction
This manual provides comprehensive instructions for the setup, operation, maintenance, and troubleshooting of the Fortinet FortiGate 90G Next Generation Firewall (NGFW). The FortiGate 90G is designed to deliver high-performance security and versatile connectivity for medium-sized networks, leveraging the latest SP5 processor for exceptional throughput and threat protection.
It features 8 Gigabit Ethernet (GE) RJ45 ports and 2 flexible 10 Gigabit Ethernet (10GE) RJ45/SFP+ shared media ports, making it suitable for various network configurations. The device integrates essential security features such as intrusion prevention (IPS), web filtering, application control, and antivirus, all managed through the unified FortiOS operating system.
2. Setup and Installation
2.1 Unpacking and Initial Inspection
Carefully unpack the FortiGate 90G appliance and inspect it for any signs of damage during shipping. Ensure all components listed in the packing slip are present.
Figure 2.1: Front view of the FortiGate 90G appliance, showing the console port, USB port, SFP+ ports, WAN ports, and GE RJ45 ports.
2.2 Physical Installation
The FortiGate 90G is designed for desktop placement or wall-mounting. Its compact form factor allows for flexible deployment in various environments.
- Desktop Placement: Place the appliance on a flat, stable surface with adequate ventilation. Ensure there is sufficient space around the device for airflow.
- Wall Mounting: Use appropriate mounting hardware (not included) to secure the device to a wall. Refer to the mounting template for screw placement.
Figure 2.2: Dimensions of the FortiGate 90G, showing its compact size suitable for various installations. Height x Width x Length: 1.65 x 8.5 x 7 inches. Weight: 2.47 pounds.
2.3 Connecting the Appliance
Connect the necessary cables to the FortiGate 90G as follows:
- Power: Connect the included power adapter(s) to the DC+12V inputs on the rear of the appliance.
- Network Interfaces:
- WAN Ports: Connect your internet service provider's modem or upstream router to the 10GE RJ45/SFP+ shared media ports (WAN1/WAN2).
- Internal Network: Connect your internal network devices (switches, computers) to the 8 GE RJ45 ports.
- Console Port: For initial configuration or troubleshooting, connect a console cable (RJ45 to DB9 or USB) to the CONSOLE port.
- USB Port: The USB port can be used for external storage or other compatible peripherals.
Figure 2.3: Rear view of the FortiGate 90G, showing the dual DC+12V power inputs and grounding screw.
Figure 2.4: Diagram illustrating the interfaces of the FortiGate 90G. This includes the RJ45 Console and USB Management Port, 2x 10GE/GE SFP+ Shared Media Ports, and 8x GE RJ45 Ports.
2.4 Powering On
After connecting all cables, plug the power adapter(s) into a power outlet. The device will power on automatically. Observe the LED indicators on the front panel for status updates.
3. Operating the FortiGate 90G
3.1 Initial Configuration Access
The FortiGate 90G can be configured via a web-based GUI or command-line interface (CLI). For initial setup, it is recommended to use the web GUI.
- Web GUI: Connect a computer to one of the internal GE RJ45 ports. Configure your computer's network settings to obtain an IP address automatically (DHCP). Open a web browser and navigate to the default IP address (e.g., https://192.168.1.99). Log in with the default credentials (username: admin, no password).
- CLI: Connect to the console port using a terminal emulator (e.g., PuTTY) with settings: 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control.
3.2 Key Features and Functionality
The FortiGate 90G offers a robust set of features for network security and management:
- Next Generation Firewall (NGFW): Provides deep packet inspection and application control.
- Intrusion Prevention System (IPS): Protects against known and unknown threats.
- Web Filtering: Controls access to malicious or inappropriate websites.
- Antivirus: Scans for and removes malware.
- SD-WAN: Optimizes WAN performance and reliability.
- Universal ZTNA: Enables secure access for remote users and devices.
- VPN: Supports IPsec and SSL VPN for secure remote connectivity.
Video 3.1: An introductory video about the Fortinet FortiGate 90G, highlighting its key features and performance benefits, including acceleration by SP5 ASIC, improved firewall throughput, IPsec VPN throughput, connections per second, and power consumption. This video is provided by the seller, Bizgear.
4. Maintenance
4.1 Firmware Updates
Regularly update the FortiGate firmware (FortiOS) to ensure optimal performance, security, and access to new features. Firmware updates can be performed via the web GUI or CLI.
- Check for Updates: Navigate to System > Firmware in the web GUI.
- Backup Configuration: Always back up your device configuration before performing a firmware upgrade.
- Download Firmware: Obtain the latest firmware from the official Fortinet support portal.
4.2 Configuration Backup and Restore
It is crucial to regularly back up your FortiGate configuration. This allows for quick recovery in case of unexpected issues or hardware replacement.
- Backup: From the web GUI, go to System > Configuration > Backup.
- Restore: From the web GUI, go to System > Configuration > Restore.
4.3 Monitoring and Logging
Monitor the FortiGate's performance and security logs to identify potential issues or security incidents. The web GUI provides various dashboards and log viewers.
- System Resources: Monitor CPU, memory, and session usage.
- Traffic Logs: Review logs for network traffic, security events, and user activity.
- Alerts: Configure email or SNMP alerts for critical events.
5. Troubleshooting
This section provides solutions to common issues you might encounter with your FortiGate 90G.
5.1 Power and Connectivity Issues
- Device not powering on:
- Ensure the power adapter(s) are securely connected to both the device and a working power outlet.
- Verify the power outlet is functional.
- Check the power LED indicator on the front panel.
- No network connectivity:
- Verify network cables are properly connected to the correct ports.
- Check the link/activity LEDs on the connected ports.
- Ensure IP addresses and network settings are correctly configured on both the FortiGate and connected devices.
- Test connectivity using ping or traceroute commands from the CLI.
5.2 Configuration and Access Issues
- Cannot access web GUI:
- Confirm your computer is on the same subnet as the FortiGate's management interface.
- Try clearing your browser's cache or using a different browser.
- Ensure HTTPS is used (e.g., https://192.168.1.99).
- If the IP address was changed, use the new IP.
- Forgot password:
- Refer to Fortinet's official documentation for password recovery procedures, which typically involve console access and specific CLI commands.
5.3 Performance Issues
- Slow network performance:
- Check CPU and memory utilization via the web GUI dashboard. High utilization may indicate a bottleneck.
- Review security policies and ensure they are optimized.
- Verify that the FortiGate's firmware is up to date.
- Consider the network traffic load relative to the device's specifications.
6. Technical Specifications
The following table outlines the key technical specifications for the Fortinet FortiGate 90G.
| Feature | Specification |
|---|---|
| Model | FG-90G |
| Interfaces | 8x GE RJ45, 2x 10GE RJ45/SFP+ Shared Media Ports |
| Processor | SP5 ASIC |
| Firewall Throughput (UDP 1518/512/64 byte) | 28/28/27.9 Gbps |
| Firewall Throughput (Packets Per Second) | 41.85 Mpps |
| IPS Throughput | 4.5 Gbps |
| NGFW Throughput | 2.5 Gbps |
| Threat Protection Throughput | 2.2 Gbps |
| IPsec VPN Throughput (512 byte) | 25 Gbps |
| SSL Inspection Throughput | 2.6 Gbps |
| Dimensions (H x W x L) | 1.65 x 8.5 x 7 inches |
| Weight | 2.47 pounds (Appliance Only) / 4.95 pounds (Shipping Weight) |
| Power Input | 100 Volts (DC+12V) |
| UPC | 195875216844 |
Figure 6.1: A visual representation of key performance specifications for the FortiGate 90G, including IPS, NGFW, Threat Protection, Firewall, and IPsec VPN throughputs.
7. Warranty Information
For detailed warranty information regarding your Fortinet FortiGate 90G appliance, please refer to the official Fortinet website or the warranty card included with your product. Warranty terms typically cover hardware defects under normal use conditions.
Additional protection plans may be available for extended coverage. Please consult your vendor or Fortinet's sales team for options such as 1-Year, 3-Year, or 5-Year Enterprise Protection and UTP Protection plans.
8. Technical Support
For technical assistance, product documentation, and software downloads, please visit the official Fortinet Support website. You will need your product's serial number to register and access support resources.
- Fortinet Support Portal: https://support.fortinet.com
- Documentation: Access user guides, administration guides, and release notes.
- Knowledge Base: Search for solutions to common issues and best practices.
- Community Forums: Engage with other Fortinet users and experts.
When contacting support, please have your product model (FG-90G) and serial number ready to expedite the process.
