Fortinet FortiGate FG-91G Network Security/Firewall Appliance User Manual

1. Introduction

This manual provides essential instructions for the installation, operation, and maintenance of your Fortinet FortiGate FG-91G Network Security/Firewall Appliance. The FortiGate 90G series is designed to deliver robust security-driven networking, integrating Next-Generation Firewall (NGFW) and SD-WAN capabilities. It offers comprehensive threat protection through AI/ML-based FortiGuard security services and an integrated Security Fabric platform, ensuring coordinated, automated, and end-to-end security across various use cases. This appliance also features the industry's first integrated SD-WAN and Zero-Trust Network Access (ZTNA) enforcement, powered by a single operating system, to control and optimize user access to applications.

2. Product Overview

The FortiGate FG-91G is a high-performance network security appliance. Familiarize yourself with its physical components and interfaces before proceeding with installation.

Figure 1: Fortinet FortiGate FG-91G Front Panel
This image displays the front panel of the Fortinet FortiGate FG-91G appliance. From left to right, it features status indicators (RESET, POWER, STATUS), a USB port, a CONSOLE port, two SFP/SFP+ ports (SFP+1, SFP+2), two shared WAN ports (WAN1, WAN2), and eight Gigabit Ethernet ports (labeled 1-8, with A and B indicating pairs). The Fortinet logo and "FortiGate 90G" model name are clearly visible on the front panel, and the larger Fortinet logo is on the top casing.

Key Features:

• Converged NGFW and SD-WAN: Integrates next-generation firewall and software-defined wide area network functionalities.
• AI/ML-based FortiGuard Security Services: Utilizes advanced artificial intelligence and machine learning for threat detection and prevention.
• Integrated Security Fabric Platform: Provides coordinated, automated, and end-to-end threat protection.
• Zero-Trust Network Access (ZTNA): Enforces ZTNA within the NGFW solution for secure application access.
• High Throughput: Capable of 3.50 GB/s firewall throughput.
• Versatile Connectivity: Features 10 ports supporting various Ethernet standards including 1000Base-X, 10GBase-X, 1000Base-T, 5GBase-T, 2.5GBase-T, and 10GBase-T.

3. Setup

Follow these steps for the initial setup of your FortiGate FG-91G appliance.

1. Unpack the Appliance: Carefully remove the FortiGate FG-91G from its packaging. Verify that all components listed in the packing slip are present.
2. Physical Placement: Place the appliance on a stable, flat surface in a well-ventilated area. Ensure adequate space around the device for proper airflow and cable management.
3. Power Connection: Connect the provided power adapter to the appliance's power input and then to a suitable power outlet. The POWER indicator should illuminate.
4. Network Connections:
   • Connect your internet service provider's modem or router to one of the WAN ports (WAN1 or WAN2) using an Ethernet cable.
   • Connect your internal network devices (switches, computers) to the LAN ports (1-8) using Ethernet cables.
   • For high-speed connections, utilize the SFP/SFP+ ports with appropriate transceivers and fiber optic cables.
5. Initial Configuration Access:
   • Web-based Manager: Connect a computer directly to a LAN port. Configure your computer's network settings to obtain an IP address automatically (DHCP). Open a web browser and navigate to the default IP address (typically 192.168.1.99 or as specified in the Quick Start Guide).
   • Console Access: For command-line interface (CLI) access, connect a console cable from your computer's serial port (or USB-to-serial adapter) to the CONSOLE port on the FortiGate. Use a terminal emulator program (e.g., PuTTY) with appropriate serial port settings (e.g., 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control).
6. Login: Use the default username and password (refer to the Quick Start Guide or Fortinet documentation for default credentials). You will be prompted to change the password upon first login.

4. Operating Instructions

Once the FortiGate FG-91G is set up, you can begin configuring and managing your network security. The primary interface for management is the web-based manager.

4.1. Web-based Manager Navigation

• Dashboard: Provides an overview of the system status, network activity, and security events.
• Network: Configure interfaces, routing, DHCP, and DNS settings.
• Policy & Objects: Define firewall policies, virtual IPs, and security profiles. This is where you control traffic flow and apply security features.
• Security Profiles: Configure antivirus, web filtering, application control, intrusion prevention, and other security services.
• VPN: Set up IPsec or SSL VPN connections for secure remote access or site-to-site connectivity.
• System: Manage administrators, firmware, logging, and system settings.

4.2. Basic Security Configuration

1. Update Firmware: Always ensure your FortiGate is running the latest stable firmware version for optimal performance and security. Navigate to System > Firmware.
2. Configure Interfaces: Assign IP addresses, enable DHCP servers, and define roles for your network interfaces (WAN, LAN, DMZ).
3. Create Firewall Policies: Define rules to allow or deny traffic between different network segments. Apply security profiles to these policies to enforce threat protection.
4. Enable FortiGuard Services: Activate and configure FortiGuard services (e.g., Antivirus, Web Filtering, IPS) to protect against various threats. Ensure your FortiGate is registered and has valid licenses.
5. Backup Configuration: Regularly back up your FortiGate configuration to prevent data loss. Navigate to System > Configuration > Backup.

For detailed configuration steps and advanced features, refer to the official Fortinet documentation and administration guides available on the Fortinet support website.

5. Maintenance

Regular maintenance ensures the optimal performance and longevity of your FortiGate FG-91G appliance.

• Firmware Updates: Periodically check for and apply the latest firmware updates from Fortinet to benefit from new features, bug fixes, and security enhancements.
• Configuration Backups: Perform regular backups of your FortiGate configuration, especially before making significant changes. Store backups in a secure, off-device location.
• Monitor System Logs: Regularly review system logs for unusual activity, errors, or security alerts.
• Physical Inspection: Ensure the appliance is free from dust and debris. Check cable connections for security and integrity.
• License Renewal: Keep track of your FortiGuard subscription and support contract expiration dates and renew them promptly to maintain full functionality and protection.

6. Troubleshooting

This section provides solutions to common issues you might encounter.

No Power / Device Not Turning On:

• Verify the power cable is securely connected to both the appliance and the power outlet.
• Ensure the power outlet is functional.
• Check the power adapter for any damage.

Cannot Access Web-based Manager:

• Confirm your computer is connected to a LAN port on the FortiGate.
• Ensure your computer's IP address is in the same subnet as the FortiGate's management IP, or configured for DHCP.
• Try pinging the FortiGate's IP address.
• Clear your browser's cache or try a different browser.
• If the IP address was changed and forgotten, use the console port for CLI access to reset or retrieve network settings.

No Internet Connectivity:

• Check the physical connection of the WAN port to your modem/router.
• Verify WAN interface settings (IP address, gateway, DNS) are correctly configured.
• Ensure firewall policies are in place to allow outbound traffic from your internal network.
• Check your ISP's service status.

Slow Network Performance:

• Monitor CPU and memory usage on the FortiGate dashboard.
• Review security policies and profiles; overly complex or restrictive policies can impact performance.
• Check for network bottlenecks upstream or downstream from the FortiGate.
• Ensure firmware is up to date.

If these steps do not resolve your issue, consult the Fortinet support website or contact Fortinet technical support.

7. Specifications

Detailed technical specifications for the Fortinet FortiGate FG-91G appliance.

8. Warranty and Support

Fortinet products are backed by a manufacturer's warranty. Specific warranty terms and conditions may vary by region and product. Please refer to the official Fortinet website or your purchase agreement for detailed warranty information.

Technical Support:

For technical assistance, product documentation, and software downloads, please visit the official Fortinet Support website. You will typically need your product's serial number and a valid support contract to access full support resources.

• Fortinet Support Website: support.fortinet.com
• Documentation: Access comprehensive guides, release notes, and knowledge base articles.
• Community Forums: Engage with other Fortinet users and experts.