Fortigate: Learn How to Install & Set Up Gateway Network Security [3417T0695A]

: June 6, 2024
: FORTINET

The FORTINET 3417T0695A Network Security Gateway Installation Guide provides detailed instructions on how to install and configure the Fortinet 3417T0695A network security gateway. The guide includes information on basic connections, wall mount, desktop, and rack/rail mount options, SFP ports, and setup options. Users can choose to set up their device locally or on the cloud using the GUI, FortiGate Cloud, FortiExplorer, or Command Line Interface (CLI). The guide also offers information on how to register for free licenses and services, including FortiCare subscriptions, firmware updates, USB modem database updates, application control database updates, device signatures database updates, internet service database updates, and Fortinet bundled services with FortiCare. Additionally, the guide highlights the key features and benefits of Fortinet Security Processors and the Fortinet Security Fabric Integration. Fortinet is the only network security vendor to earn independent certifications across all core security technologies, demonstrating their ability to consolidate multiple security technologies while still meeting the highest standards of performance and accuracy.

Fortinet

FORTINET 3417T0695A Network Security Gateway

FORTINET-3417T0695A-Network-Security-Gateway

Installation

Your FortiGate/FortiWiFi includes a wall mount kit and connection cables. Desktop installation, rack mount and slide-rail kits are also available.

Basic Connections

Plug in your device to power outlet using the provided power adapter & cable
Connect a WAN port to the internet using the supplied Ethernet cable

Note: We recommend connecting your FortiGate to an uninterruptible power supply (UPS) in case of a power outage
Optional: The FortiGate/FortiWiFi 80F/81F Series have optional dual DC inputs for failover redundancy. If both DC inputs are used, only one is active. If the active DC input fails, the second input will be active.

Wall Mount Option

Mark the location of the holes using the mounting bracket
Drill holes for the anchors
Insert the anchors and then screw in the screws with 2mm exposed
Fasten the mounting bracket
Position the device and slide into place
Plug the provided power cable into the rear of the unit and then into a grounded electrical outlet or separate power source

Desktop Option

Place the unit on a flat, clean and stable surface
Ensure there is at least 1.5in of clearance for adequate airflow
Plug the provided power cable into the rear of the unit and then into a grounded electrical outlet or separate power source

Rack/Rail Mount Option

Fortinet carries a variety of standard and custom rack and rail mount accessories, including a rack mount tray kit, SP-RACKTRAY-02. Ordering: Contact Fortinet to order brackets, rail slide kits, rack mount kits and other accessories, such as a console cable

SFP Ports

To install the SFP transceivers

Slide the SFP into the cage socket until it clicks into place
Lift the latch to lock the SFP

To remove the SFP transceivers

Lower the latch to unlock the SFP
Carefully pull the SFP out of the cage socket

Setup Options

Set up your device locally or on the cloud. Choose one of the following options to complete your setup, then configure your device.

GUI
An easy-to-use GUI, compatible with most web browsers. To minimize scrolling, the screen resolution should be at least 1280 x 1024 pixels.

FortiGate Cloud
FortiGate Cloud is a cloud-based infrastructure management solution and log retention service. It provides centralized reporting, traffic analysis, configuration management, and log retention without the need for additional hardware and software.

FortiExplorer
FortiExplorer for iOS is a user-friendly iOS application that helps you configure, manage, and monitor appliances. FortiExplorer rapidly provisions, deploys, and monitors Security Fabric components such as FortiGate, FortiWiFi, and FortiAP devices.

Command Line Interface (CLI)
An alternate configuration tool from the web-based manager that uses a terminal emulation application to type commands or upload batches of commands from a text file or configuration script. Requires a console cable (available for purchase).

For additional info on SFP’s, visit: support.fortinet.com

A GUI

Connect port 1 to the Management Computer using the supplied Ethernet cable
Enable DHCP or set the Management Computer’s IP and subnet to:
- Static IP Address: 192.168.1.1
- Subnet Mask: 255.255.255.0
Visit 192.168.1.99 in a web browser
Log in with username admin and no password
When prompted to register, enter your Fortinet credentials
The FortiCare Support Status in the FortiOS License Information widget will change to Registered

FortiGate Cloud

Log in to forticloud.com using your Fortinet credentials
Click Add FortiGate and enter the Cloud Key located on the sticker on your device
You can now manage your device from the cloud

Note: To get a Fortinet account, register at support.fortinet.com

FortiExplorer

Cloud Key Setup

Download and launch the FortiExplorer iOS App
Tap Devices, then tap Add
Select FortiGate Cloud and log in using your Fortinet credentials
Scan the QR code on the Cloud Key
Log in to your device using username admin and no password
You can now configure your device

USB Setup

Download and launch the FortiExplorer iOS App
Connect your Apple Lightning to USB cable to the FortiGate/FortiWiFi USB port
Tap your device when it appears in FortiExplorer
Log in using username admin and no password
You can now configure your device

CLI

FORTINET-3417T0695A-Network-Security-
Gateway-18

Connect the Console Port with a console cable to the Management Computer
Start a terminal program on the Management Computer and select an available COM Port using the following default settings:
- Baud rate: 9600
- Data bits: 8
- Parity: None
- Stop bits: 1
- Flow control: None
Log in using username admin and no password
You can now configure your device

Note: Type ? for a list of commands. Type a command with ?, such as config ? to list the options. For advanced options, visit support.fortinet.com

Register for Free Licenses & Services

Simplify and leverage provisioning, management, and analytics with FortiGate Cloud’s centralized administration. Extend online logs and analysis to 1 full year with a subscription.

FortiGate Cloud 7 Days of Data Retention

Make remote access simple. Use yourcompany.fortiddns.com instead of a hard-to-remember IP address.

2 FortiToken Mobile Licenses

Enable two-factor authentication for remote access using mobile devices. Available for iOS and Android devices. Get extra tokens from your Fortinet reseller.

Services with FortiCare Subscriptions

Global 24/7 support for your Fortinet hardware & software

Get the latest product security updates and features. Stay with us and see the product evolve.

Firmware Updates

Use cellphone technology as backup Internet connection. We are always adding support for new third party 3G/4G+ devices.

USB Modem Database Updates

Set up policies and track activities based on geography. Your FortiGate will intelligently identify where an IP is originated or destined.

Application Control Database Updates

Create policies to allow, deny, or restrict access to applications or entire categories of applications. You can use application control to keep malicious, risky, and unwanted applications out of your network.

Device Signatures Database Updates

Identify device type and OS information. Great for organizations who want to enforce device-based policies so that employees can bring in their devices.

Internet Service Database Updates

Internet service database objects consist of IP addresses, port numbers, and protocols used by Internet services. Simplify the management and control of cloud-based applications.

Fortinet Bundled Services with FortiCare

FORTINET-3417T0695A-Network-
Security-Gateway-20

The Fortinet Security Fabric

Broad
Visibility of the entire digital attack surface

Integrated
AI-driven breach prevention across all devices, networks, and applications

Automated
Operations, orchestration and response FORTINET-3417T0695A-Network-Security-
Gateway-21

FortiGate Security Fabric Integration

Other Fabric Solutions

A large, growing, and open ecosystem of partner integrations
Fabric-Ready partners span a broad range of technologies
Fabric Connectors provide deep integration into customers’ multi-vendor ecosystems
DevOps scripts automate security provisioning & configuration.

Solution Spotlight: SecurSolution Spotlight: Secure SD-We SD-WANAN

NGFW with built-in, best-of-breed SD-WAN capability enables digital transformation at the enterprise branch.

Products

FortiGate NGFW (at FortiOS 5.6 & above)
FortiManager

Key Features

Application-aware steering
Automated WAN path intelligence
Single-pane-of-glass management with zero-

touch provisioning

SD-WAN features include in base license

Benefits

High application performance
Reduced WAN OPEX
Safe Internet access for branch sites
Reduced complexity, easier management

Fortinet Security Processors

Specialized chip design delivers more processing power
Fortinet’s purpose-built architecture delivers extremely high throughput and exceptionally low latency. These purpose-built security processors radically boost performance and scalability to enable the fastest network security appliances available.

Most Certified in the Industry
Fortinet is the only network security vendor to earn independent certifications across all core security technologies Fortinet demonstrates our ability to consolidate multiple security technologies while still meeting the highest standards of performance and accuracy.