Fortinet FortiGate 90G Next Generation Firewall User Manual

1. Introduzione

This manual provides comprehensive instructions for the setup, operation, maintenance, and troubleshooting of the Fortinet FortiGate 90G Next Generation Firewall (NGFW). The FortiGate 90G is designed to deliver high-performance security and versatile connectivity for medium-sized networks, leveraging the latest SP5 processor for exceptional throughput and threat protection.

It features 8 Gigabit Ethernet (GE) RJ45 ports and 2 flexible 10 Gigabit Ethernet (10GE) RJ45/SFP+ shared media ports, making it suitable for various network configurations. The device integrates essential security features such as intrusion prevention (IPS), web filtering, application control, and antivirus, all managed through the unified FortiOS operating system.

2. Configurazione e installazione

2.1 Disimballaggio e ispezione iniziale

Carefully unpack the FortiGate 90G appliance and inspect it for any signs of damage during shipping. Ensure all components listed in the packing slip are present.

Figura 2.1: Fronte view of the FortiGate 90G appliance, showing the console port, USB port, SFP+ ports, WAN ports, and GE RJ45 ports.

2.2 Installazione fisica

The FortiGate 90G is designed for desktop placement or wall-mounting. Its compact form factor allows for flexible deployment in various environments.

• Posizionamento sul desktop: Place the appliance on a flat, stable surface with adequate ventilation. Ensure there is sufficient space around the device for airflow.
• Montaggio a parete: Use appropriate mounting hardware (not included) to secure the device to a wall. Refer to the mounting template for screw placement.

Figure 2.2: Dimensions of the FortiGate 90G, showing its compact size suitable for various installations. Height x Width x Length: 1.65 x 8.5 x 7 inches. Weight: 2.47 pounds.

2.3 Collegamento dell'apparecchio

Connect the necessary cables to the FortiGate 90G as follows:

• Energia: Connect the included power adapter(s) to the DC+12V inputs on the rear of the appliance.
• Interfacce di rete:
  • Porte WAN: Connect your internet service provider's modem or upstream router to the 10GE RJ45/SFP+ shared media ports (WAN1/WAN2).
  • Internal Network: Connect your internal network devices (switches, computers) to the 8 GE RJ45 ports.
• Porta della console: For initial configuration or troubleshooting, connect a console cable (RJ45 to DB9 or USB) to the CONSOLE port.
• Porta USB: The USB port can be used for external storage or other compatible peripherals.

Figura 2.3: Posteriore view of the FortiGate 90G, showing the dual DC+12V power inputs and grounding screw.

Figure 2.4: Diagram illustrating the interfaces of the FortiGate 90G. This includes the RJ45 Console and USB Management Port, 2x 10GE/GE SFP+ Shared Media Ports, and 8x GE RJ45 Ports.

2.4 Accensione

After connecting all cables, plug the power adapter(s) into a power outlet. The device will power on automatically. Observe the LED indicators on the front panel for status updates.

3. Operating the FortiGate 90G

3.1 Accesso alla configurazione iniziale

The FortiGate 90G can be configured via a web-based GUI or command-line interface (CLI). For initial setup, it is recommended to use the web GUI.

• Web Interfaccia grafica: Connect a computer to one of the internal GE RJ45 ports. Configure your computer's network settings to obtain an IP address automatically (DHCP). Open a web browser e navigare verso l'indirizzo IP predefinito (ad esempio, https://192.168.1.99). Log in with the default credentials (username: admin, no password).
• CLI: Connect to the console port using a terminal emulator (e.g., PuTTY) with settings: 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control.

3.2 Caratteristiche e funzionalità principali

The FortiGate 90G offers a robust set of features for network security and management:

• Next Generation Firewall (NGFW): Provides deep packet inspection and application control.
• Sistema di prevenzione delle intrusioni (IPS): Protects against known and unknown threats.
• Web Filtraggio: Controls access to malicious or inappropriate websiti.
• Antivirus: Scans for and removes malware.
• SD-WAN: Optimizes WAN performance and reliability.
• Universal ZTNA: Enables secure access for remote users and devices.
• Connessione VPN: Supports IPsec and SSL VPN for secure remote connectivity.

4. Manutenzione

4.1 Aggiornamenti firmware

Regularly update the FortiGate firmware (FortiOS) to ensure optimal performance, security, and access to new features. Firmware updates can be performed via the web Interfaccia grafica utente (GUI) o CLI.

• Controlla gli aggiornamenti: Navigate to System > Firmware in the web GUI.
• Configurazione di backup: Always back up your device configuration before performing a firmware upgrade.
• Scarica il firmware: Obtain the latest firmware from the official Fortinet support portal.

4.2 Backup e ripristino della configurazione

It is crucial to regularly back up your FortiGate configuration. This allows for quick recovery in case of unexpected issues or hardware replacement.

• Backup: Dal web GUI, go to System > Configuration > Backup.
• Ristabilire: Dal web GUI, go to System > Configuration > Restore.

4.3 Monitoraggio e registrazione

Monitor the FortiGate's performance and security logs to identify potential issues or security incidents. The web GUI provides various dashboards and log viewERS.

• Risorse di sistema: Monitor CPU, memory, and session usage.
• Traffic Logs: Review logs for network traffic, security events, and user activity.
• Avvisi: Configurare avvisi via e-mail o SNMP per eventi critici.

5. Risoluzione Dei Problemi

This section provides solutions to common issues you might encounter with your FortiGate 90G.

5.1 Problemi di alimentazione e connettività

• Il dispositivo non si accende:
  • Ensure the power adapter(s) are securely connected to both the device and a working power outlet.
  • Verificare che la presa di corrente funzioni.
  • Check the power LED indicator on the front panel.
• Nessuna connettività di rete:
  • Verify network cables are properly connected to the correct ports.
  • Check the link/activity LEDs on the connected ports.
  • Ensure IP addresses and network settings are correctly configured on both the FortiGate and connected devices.
  • Test connectivity using ping or traceroute commands from the CLI.

5.2 Configuration and Access Issues

• Impossibile accedere web Interfaccia grafica:
  • Confirm your computer is on the same subnet as the FortiGate's management interface.
  • Prova a svuotare la cache del browser o a utilizzare un browser diverso.
  • Ensure HTTPS is used (e.g., https://192.168.1.99).
  • If the IP address was changed, use the new IP.
• Ha dimenticato la password:
  • Refer to Fortinet's official documentation for password recovery procedures, which typically involve console access and specific CLI commands.

5.3 Problemi di prestazioni

• Slow network performance:
  • Check CPU and memory utilization via the web GUI dashboard. High utilization may indicate a bottleneck.
  • Review security policies and ensure they are optimized.
  • Verify that the FortiGate's firmware is up to date.
  • Consider the network traffic load relative to the device's specifications.

6. Specifiche tecniche

The following table outlines the key technical specifications for the Fortinet FortiGate 90G.

Figure 6.1: A visual representation of key performance specifications for the FortiGate 90G, including IPS, NGFW, Threat Protection, Firewall, and IPsec VPN throughputs.

7. Informazioni sulla garanzia

For detailed warranty information regarding your Fortinet FortiGate 90G appliance, please refer to the official Fortinet website or the warranty card included with your product. Warranty terms typically cover hardware defects under normal use conditions.

Additional protection plans may be available for extended coverage. Please consult your vendor or Fortinet's sales team for options such as 1-Year, 3-Year, or 5-Year Enterprise Protection and UTP Protection plans.

8. Supporto tecnico

For technical assistance, product documentation, and software downloads, please visit the official Fortinet Support website. You will need your product's serial number to register and access support resources.

• Portale di supporto Fortinet: https://support.fortinet.com
• Documentazione: Access user guides, administration guides, and release notes.
• Base di conoscenza: Cercare solutions to common issues and best practices.
• Forum della comunità: Engage with other Fortinet users and experts.

When contacting support, please have your product model (FG-90G) and serial number ready to expedite the process.