FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances User Guide

June 12, 2024
FORTINET

FORTINET logo FortiGate 1500G Series DDoS Attack Mitigation AppliancesFORTINET FortiGate 1500G Series DDoS Attack Mitigation
Appliances FortiGate 1500G Series
FG-1500G and FG-1501G
QuickStart Guide

FortiGate 1500G Series DDoS Attack Mitigation Appliances

This guide covers: FG-1500G and FG-1501G
December 8, 2022
Copyright© 2022 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be  registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual  performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance  metrics and, in such event, only the specific performance metrics expressly identified in such binding  written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any  covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be  applicable.
For Product License Agreement / EULA and Warranty Terms, visit https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf

Before you begin

Register your device to access FortiGuard updates, cloud management, firmware upgrades, technical support and warranty coverage.
http://support.fortinet.com

The Essentials

Default Logins

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances - Icon
1| https://192.168.1.99
Username: admin
Password: leave blank
MGMT IP is 192.168.1.99
---|---

Admin Guide
For a detailed Getting Started guide, setup and configuration information, refer to the Admin Guide on https://docs.fortinet.com/
Customer Service
For contracts, licensing, product registration and account management, contact FortiCare Support at https://www.fortinet.com/support/contact
Self-service Resources
Access our knowledge base, forums, videos and technical experts at https://www.fortinet.com/support/support-services/forticare-support
Thank you for choosing Fortinet

Package Contents

FortiGate 1500G Series
FG-1500G and FG-1501GFORTINET FortiGate 1500G Series DDoS Attack Mitigation
Appliances - Contents

Setup Options

Set up your Fortinet device locally or connect using forticloud.com

GUI

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances -
GUI Note: For static IP configuration, use 192.168.1.1 with subnet mask 255.255.255.0

CLI

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances -
CLI Note: For a detailed CLI guide, visit docs.fortinet.com

SFP Modules

Installation

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances -
Installation

Removal

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances -
Removal

Desktop Installation

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances -
Desktop Note: Place the device on a flat, clean and stable surface.

Rack Mount

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances - Rack
Mount Note: The recommended clearance is 1.5 inches above and below the device.
Caution: To avoid personal injury or damage to the device, it is recommended that two or more people mount the device on a rack.

FG-1500G Series Front Panel

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances - Front
Panel

  1. STATUS
    Green: Normal operation
    Flashing Green: Booting up
    Red: Major alarm
    Off: Device is off
    ALARM
    Red: Major alarm detected
    Amber: Minor alarm detected
    Off: No errors detected
    HA
    Green: Operating in an HA cluster
    Red: HA failure
    Off: HA disabled
    POWER
    Green: Device is on
    Off: Device is off

  2. USB x2 (USB A)
    USB 3.0 server port

  3. Console (RJ45)
    CLI interface

  4. HA (RJ45)
    LINK/ACT
    Green: On, Link up
    Flashing Green: Data activity
    Off: No link established
    SPEED
    Green: Linked at 2.5 Gbps
    Amber: Linked at 1G/100 Mbps
    Off: Linked at 10 Mbps or no link established
    SMGMT (RJ45)
    LINK/ACT
    Green: On, Link up
    Flashing Green: Data activity
    Off: No link established
    SPEED
    Green: Linked at 1 Gbps
    Amber: Linked at 100 Mbps
    Off: Linked at 10 Mbps or no link established
    FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances -
RJ45

  5. Ports 1 to 16 (RJ45)
    LINK/ACT
    Green: Link established
    Flashing Green: Data activity
    Off: No link established
    SPEED
    Green: Connected at 1000 Mbps
    Amber: Connected at 100 Mbps
    Off: Connected at 10 Mbps or not in use

  6. Ports 17 to 24 (SFP)
    Green: Connected at 1 Gbps
    Flashing Green: Data activity
    Off: No link established

  7. Ports X1 to X4 (SFP+) X1 and X2 are Forti Link ports
    Green: Connected at 10/1 Gbps
    Flashing Green: Data activity
    Off: No link established

  8. Ultra Low Latency Ports X5 to X8 (SFP28)
    Green: Connected at 25/10 Gbps
    Flashing Green: Data activity
    Off: No link established

FG-1500G Series Rear Panel

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances - Rear
Panel

FG-1500G-DC Series Rear Panel

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances - Rear
Panel 2 DC Models Only (FG-1500G-DC and FG-1501G-DC)
This product is only intended for installation and use in a Restricted Access Location. The DC power cables are intended to be used only for in-rack wiring, must be routed away from sharp edges, and must be adequately fixed to prevent excessive strain on the  wires and terminals.
DC cables must be a minimum of 12 AWG.
For DC Cables Installation , ensure the terminal rings are securely and safely fastened to the PSU terminals.FORTINET FortiGate 1500G Series DDoS
Attack Mitigation Appliances - Power Supply

  1. Power Supply for FG-1500G and FG-1501G
    100-240VAC, 50/60Hz, 6A Max (2x PSU) 1+1 Redundant, hot-swappable power supplies

  2. Input LED Indicators
    Green: Input voltage within normal range
    Flashing Green: Over or under voltage warning
    Off: No input power

  3. Output LED Indicators
    Green: Output voltage normal
    Flashing Green: Standby mode
    Flashing Amber: Warning
    Amber: Critical error
    Off: No output

FORTINET FortiGate 1500G Series DDoS Attack Mitigation Appliances - Power
Supply 2

  1. Power Supply for FG-1500G-DC and FG-1501G-DC
    -48V DC to -60V DC, 7A, hot swappable, redundant (1+1) power supplies

Cautions and Warnings

Environmental specifications
Ambient operating temperature: 0°C to 40°C
Rack Mount Instructions – The following or similar rack-mount instructions are included with the installation instructions:
Elevated Operating Ambient – If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an  environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer.
Reduced Air Flow – Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised.
Mechanical Loading – Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading.
Circuit Overloading – Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment  nameplate ratings should be used when addressing this concern.
Reliable Earthing – Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips).

Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude)

Safety

Moving parts — Hazardous moving parts. Keep away from moving fan blades.
Warning: Equipment intended for installation in Restricted Access Location.
Warning : A readily accessible disconnect device shall be incorporated in the building installation wiring.
Warning : A UL Listed external disconnect device, i.e. circuit breaker or other, with over current protection suitable for local code (rated 6A recommended) shall be installed with this equipment
Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries in a fire. They may explode. Dispose of used batteries according to your local regulations.
IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to  batteries.
CAUTION: Shock Hazard. Disconnect all power sources.
Grounding — To prevent damage to your equipment, connections that enter from outside the building should pass through a lightning / surge protector, and be properly grounded. Use an electrostatic discharge workstation (ESD) and/or wear an anti-static  wrist strap while you work. In addition to the grounding terminal of the plug, on the back panel, there is another, separate terminal for earthing.
Caution : Slide/rail mounted equipment is not to be used as a shelf or a work space.

The rack may tip over causing serious personal injury.
Before extending the rack to the installation position, read the installation instructions.
Do not put any load on the slide-rail mounted equipment in the installation position.
Do not leave the slide-rail mounted equipment in the installation position.
Laser Class 1 optical transceiver shall be used only
IEC 60825-1:2014 transfer to FDA/CDRH Complies with FDA performance standards for laser products except for conformance with IEC 60825-1 Ed.3., as described in Laser Notice No. 56, dated May 8, 2019.
The SFP ports should use UL Listed Optional Transceiver product, Rated 3.3Vdc, Laser Class 1.
Fiber optic transceiver must be rated 3.3V, 22mA max, Laser Class 1, UL certified component.

Warning: Class I Equipment. This equipment must be earthed. The power plug must be connected to a properly wired earth ground socket outlet. An improperly wired socket outlet could place hazardous voltage on accessible metal parts.
Warning: All Ethernet cables are designed for intra-building connection to other equipment. Do not connect these ports directly to communication wiring or other wiring that exits the building where the appliance is located.

Regulatory Notices

Federal Communication Commission (FCC) – USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:

  1. this device may not cause harmful interference, and
  2. this device must accept any interference received; including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a  commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. Operation of this  equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense.

WARNING: Any changes or modifications to this product not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator and your body. This transmitter must not be co-located  or operating in conjunction with any other antenna or transmitter.

Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada
CAN ICES-003 (A) / NMB-003 (A)
This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.

Innovation, Science and Economic Development (ISED) – Canada
This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada’s licenceexempt RSS(s). Operation is subject to the following two conditions:

  1. This device may not cause interference.
  2. This device must accept any interference, including interference that may cause undesired operation of the device.

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.
This radio transmitter (Contains IC:7280B-111T15D) has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in  this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device.

This device and it’s antennas(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures.

Ant.| Brand Holder| Model Name| Antenna Type| Connector| Antenna Gain (dBi)
---|---|---|---|---|---
1| Wieson| ARY196-0346-005-00| PIFA| Ipex I| 1.82
2| INPAQ| WA-F-LA-02-114| PIFA| Ipex I| 0.73

European Conformity (CE) – EU
This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.
The product transmits within the frequency ranges and less than or equal to the power listed below: 2402-2480MHz less than 20dBm

Simplified EU Declaration of Conformity
This declaration is only valid for Fortinet products (including combinations of software, firmware and hardware) provided by Fortinet or Fortinet’s authorized partners to the end-customer directly for use within the EU or countries that have implemented the  EU Directives and/or spectrum regulation. Any Fortinet products not obtained directly from Fortinet or Fortinet’s authorized partners may not comply with EU Directives and Fortinet makes no assurances for such products.

This product is in compliance with Directive 2014/53/EU.

Note: The full Declaration of Conformity for this product is available in the link below: https://site.fortinet.com/ProductRegulatory/EU
Compliance with 2014/53/EU Radio Equipment Directive (RED)
In accordance with Article 10.8(a) and 10.8(b) of the RED, the following table provides information on the frequency bands used and the maximum e.i.r.p. of the product for sale in the EU:

Frequency Range (MHz) Maximum e.i.r.p. (dBm)
Bluetooth 2.4GHz 4.

UK Conformity Assessed (UKCA) – United Kingdom
The product transmits within the frequency ranges and less than or equal to the power listed below: 2402-2480MHz less than 20dBm

This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.
This product is in compliance with Statutory Instrument 1206 Radio Equipment Regulations 2017
The full Declaration of Conformity for this product is available in the link below: https://site.fortinet.com/ProductRegulatory/UK

Fortinet.com
FG-1500G-ACDC-QSG-20221208.indd 20
2022-12-08 12:02:03 PM

References

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>

Related Manuals