wwparcel.html

Video Cookbook Recipes
- Explicit Web Proxy
- Authentication
- Virtual Domains
  - Inside FortiOS - Virtual Domains
  - Basic Virtual Domain setup
- Routing
- Policies and Firewall Objects
- Security Profiles
- VPN (IPsec and SSL)
- User and Device Authentication
- Wireless
- Logging and Reporting
Chapter 1 What’s New for FortiOS 5.2.1
- New features in FortiOS 5.2 Patch 1
- Top Features
- System Features
- Usability Enhancements
- Firewall
- Security Profiles
- IPsec VPN
- SSL VPN
- Authentication
- Managing Devices
- Wireless Networking
- IPv6
- High Availability
- WAN Optimization, Web Cache, and Explicit Proxy
- Advanced Routing
- Logging and Reporting
- Other New Features
- RFC List
Chapter 2 Getting Started
- Differences between Models
- Installation
- Using the Web-Based Manager
- Basic Administration
- Next Steps
Chapter 3 Advanced Routing
- Advanced Static Routing
- Dynamic Routing Overview
- Routing Information Protocol (RIP)
- Border Gateway Protocol (BGP)
- Open Shortest Path First (OSPF)
- Intermediate System to Intermediate System Protocol (IS-IS)
Chapter 4 Authentication
- Introduction to authentication
- Authentication servers
- Users and user groups
  - Users
  - User groups
- Managing Guest Access
- Configuring authenticated access
- Captive portals
- Certificate-based authentication
- SSO using a FortiAuthenticator unit
- Single Sign-On to Windows AD
- Agent-based FSSO
- SSO using RADIUS accounting records
- Monitoring authenticated users
- Examples and Troubleshooting
Chapter 5 FortiOS Carrier
- Overview of FortiOS Carrier features
- Carrier web-based manager settings
- MMS Security features
- Message flood protection
- Duplicate message protection
- Configuring GTP on FortiOS Carrier
- GTP message type filtering
  - Common message types on carrier networks
  - Configuring message type filtering in FortiOS Carrier
    - Message Type Fields
- GTP identity filtering
- Troubleshooting
Chapter 6 Deploying Wireless Networks
- Introduction to wireless networking
- Configuring a WiFi LAN
- Access point deployment
- Wireless Mesh
- WiFi-Ethernet Bridge Operation
- Protecting the WiFi Network
  - Wireless IDS
    - Rogue AP detection
  - WiFi data channel encryption
    - Configuring encryption on the FortiGate unit
    - Configuring encryption on the FortiAP unit
- Wireless network monitoring
- Configuring wireless network clients
- Wireless network examples
  - Basic wireless network
  - A more complex example
- Using a FortiWiFi unit as a client
  - Use of client mode
  - Configuring client mode
- Support for location-based services
- Reference
Chapter 7 Firewall
- FortiGate Firewall Components
  - FortiGate Firewall Components
  - How does a FortiGate Protect Your Network
- Firewall concepts
- Firewall objects
- Security policies
- Network defense
- GUI & CLI - What You May Not Know
- Building firewall objects and policies
- Multicast forwarding
Chapter 8 Hardware Acceleration
- Hardware acceleration overview
- NP6 Acceleration
- FortiGate NP6 architectures
- NP4 Acceleration
- FortiGate NP4 architectures
Chapter 9 High Availability
- FortiOS 5.2 HA new features
  - FortiOS 5.2 HA new features
- Solving the High Availability problem
- An introduction to the FGCP
- Configuring and connecting HA clusters
- Virtual clusters
- Full mesh HA
- Operating a cluster
- HA and failover protection
- HA and load balancing
- HA with third-party products
- VRRP
  - Adding a VRRP virtual router to a FortiGate interface
  - Configuring VRRP
- FortiGate Session Life Support Protocol (FGSP)
- Configuring FRUP
  - FRUP configuration example
Chapter 10 IPsec VPN
- IPsec VPN concepts
  - VPN tunnels
    - Tunnel templates
    - VPN tunnel list
  - VPN gateways
  - Clients, servers, and peers
  - Encryption
    - IPsec overheads
  - Authentication
    - Preshared keys
    - Additional authentication
  - Phase 1 and Phase 2 settings
    - Phase 1
    - Phase 2
  - Security Association
  - IKE and IPsec packet processing
    - IKEv1
    - IKEv2
- IPsec VPN Overview
  - Types of VPNs
  - Planning your VPN
    - Network topologies
  - General preparation steps
  - How to use this guide to configure an IPsec VPN
- IPsec VPN in the web-based manager
  - Auto Key (IKE)
  - Concentrator
  - IPsec Monitor
- Phase 1 parameters
  - Overview
  - Defining the tunnel ends
  - Choosing Main mode or Aggressive mode
  - Choosing the IKE version
    - IKEv2 cookie notification for IKE_SA_INIT
  - Authenticating the FortiGate unit
    - Authenticating the FortiGate unit with digital certificates
    - Authenticating the FortiGate unit with a pre-shared key
  - Authenticating remote peers and clients
  - Defining IKE negotiation parameters
    - Generating keys to authenticate an exchange
    - Defining IKE negotiation parameters
  - Using XAuth authentication
    - Using the FortiGate unit as an XAuth server
    - Using the FortiGate unit as an XAuth client
  - Dynamic IPsec route control
    - Blocking IPsec SA Negotiation
- Phase 2 parameters
  - Basic Phase 2 settings
  - Advanced Phase 2 settings
  - Configure the Phase 2 parameters
- Defining VPN security policies
  - Defining policy addresses
  - Defining VPN security policies
    - Defining an IPsec security policy for a policy-based VPN
    - Defining security policies for a route-based VPN
- Gateway-to-gateway configurations
  - Configuration overview
  - General configuration steps
  - Configuring the two VPN peers
    - Configuring Phase 1 and Phase 2 for both peers
    - Creating security policies
  - How to work with overlapping subnets
    - Solution for route-based VPN
    - Solution for policy-based VPN
  - Testing
- Hub-and-spoke configurations
  - Configuration overview
    - Hub-and-spoke infrastructure requirements
    - Spoke gateway addressing
  - Protected networks addressing
    - Using aggregated subnets
      - Using aggregated subnets
      - Using an address group
    - Authentication
  - Configure the hub
  - Configure the spokes
    - Configuring security policies for hub-to-spoke communication
      - Route-based VPN security policy
      - Policy-based VPN security policy
    - Configuring security policies for spoke-to-spoke communication
      - Route-based VPN security policy
      - Policy-based VPN security policy
  - Dynamic spokes configuration example
    - Configure the hub (FortiGate_1)
    - Configure the spokes
      - Define the IPsec configuration
      - Define the security policies
- Dynamic DNS configuration
  - Dynamic DNS over VPN concepts
    - Dynamic DNS (DDNS)
      - Routing
    - Dynamic DNS over VPN
  - Dynamic DNS topology
    - Assumptions
  - General configuration steps
  - Configure the dynamically-addressed VPN peer
    - Configuring branch_2 VPN tunnel settings
    - Configuring branch_2 security policies
  - Configure the fixed-address VPN peer
    - Configuring branch_1 VPN tunnel settings
    - Configuring branch_1 security policies
  - Testing
- FortiClient dialup-client configurations
  - Configuration overview
  - FortiClient-to-FortiGate VPN configuration steps
  - Configure the FortiGate unit
  - Configure the FortiClient Endpoint Security application
    - Configuring FortiClient
  - Adding XAuth authentication
  - FortiClient dialup-client configuration example
    - Configuring FortiGate_1
    - Configuring the FortiClient Endpoint Security application
- FortiGate dialup-client configurations
  - Configuration overview
    - FortiGate dialup-client infrastructure requirements
  - FortiGate dialup-client configuration steps
  - Configure the server to accept FortiGate dialup-client connections
    - Route-based VPN security policy
    - Policy-based VPN security policy
  - Configure the FortiGate dialup client
    - Route-based VPN security policy
    - Policy-based VPN security policy
- Supporting IKE Mode config clients
  - Automatic configuration overview
  - IKE Mode Config overview
  - Configuring IKE Mode Config
    - Configuring an IKE Mode Config client
    - Configuring an IKE Mode Config server
      - IP address assignment
      - Certificate groups
  - Example: FortiGate unit as IKE Mode Config server
  - Example: FortiGate unit as IKE Mode Config client
- Internet-browsing configuration
  - Configuration overview
  - Creating an Internet browsing security policy
  - Routing all remote traffic through the VPN tunnel
    - Configuring a FortiGate remote peer to support Internet browsing
    - Configuring a FortiClient application to support Internet browsing
- Redundant VPN configurations
  - Configuration overview
    - General configuration steps
  - Configure the VPN peers - route-based VPN
  - Redundant route-based VPN configuration example
    - Configuring FortiGate_1
    - Configuring FortiGate_2
  - Partially-redundant route-based VPN example
    - Configuring FortiGate_1
    - Configuring FortiGate_2
  - Creating a backup IPsec interface
- Transparent mode VPNs
  - Configuration overview
    - Transparent VPN infrastructure requirements
      - Before you begin
  - Configure the VPN peers
- IPv6 IPsec VPNs
  - Overview of IPv6 IPsec support
    - Certificates
  - Configuring IPv6 IPsec VPNs
  - Site-to-site IPv6 over IPv6 VPN example
  - Site-to-site IPv4 over IPv6 VPN example
  - Site-to-site IPv6 over IPv4 VPN example
- L2TP and IPsec (Microsoft VPN)
  - Overview
    - Layer 2 Tunneling Protocol (L2TP)
  - Assumptions
  - Configuring the FortiGate unit
  - Configuring the Windows PC
  - Troubleshooting
- GRE over IPsec (Cisco VPN)
  - Overview
  - Configuring the FortiGate unit
  - Configuring the Cisco router
  - Troubleshooting
    - Quick checks
    - Setting up logging
  - Using diagnostic commands
- Protecting OSPF with IPsec
  - Overview
  - OSPF over IPsec configuration
  - Creating a redundant configuration
    - Adding the second IPsec tunnel
    - Adding the OSPF interface
- Hardware offloading and acceleration
  - Overview
  - IPsec offloading configuration examples
    - Accelerated route-based VPN configuration
    - Accelerated policy-based VPN configuration
- Monitoring and troubleshooting
  - Monitoring VPN connections
    - Monitoring connections to remote peers
    - Monitoring dialup IPsec connections
  - Testing VPN connections
  - Logging VPN events
  - VPN troubleshooting tips
  - General troubleshooting tips
    - A word about NAT devices
Chapter 11 IPv6
- IPv6 packet structure
  - IPv6 packet structure
    - Jumbograms and jumbo payloads
    - Fragmentation and reassembly
  - Benefits of IPv6
- IPv6 Features
- IPv6 Configuration
Chapter 12 Load Balancing
- Before you begin
  - Before you begin
  - How this chapter is organized
- Configuring load balancing
- Load balancing configuration examples
Chapter 13 Logging and Reporting
- Logging and reporting overview
- Logging and reporting for small networks
- Logging and reporting for large networks
- Advanced logging
- Troubleshooting and logging
Chapter 14 Managing Devices
- Managing “bring your own device”
- Endpoint Protection
- Vulnerability Scan
Chapter 15 Security Profiles
- Security Profiles overview
- AntiVirus
- Web filter
- Application control
- Intrusion protection
- Custom Application & IPS Signatures
- Email filter
- Data leak prevention
- ICAP
- Other Security Profiles considerations
Chapter 16 SSL VPN
- Introduction to SSL VPN
- Basic configuration
- The SSL VPN client
  - FortiClient
  - Tunnel mode client configuration
- The SSL VPN web portal
- Setup examples
Chapter 17 System Administration
- Using the CLI
- Interfaces
- Central management
- Monitoring
- VLANs
- PPTP and L2TP
- Session helpers
- Advanced concepts
Chapter 18 Traffic Shaping
- The purpose of traffic shaping
- Traffic shaping methods
- Examples
- Troubleshooting traffic shaping
Chapter 19 Troubleshooting
- Life of a Packet
- Verifying FortiGate admin access security
- Troubleshooting resources
- Troubleshooting tools
- Troubleshooting methodologies
- Technical Support Organization Overview
- Common questions
Chapter 20 Virtual Domains
- Virtual Domains
- Virtual Domains in NAT/Route mode
  - Virtual domains in NAT/Route mode
  - Example NAT/Route VDOM configuration
- Virtual Domains in Transparent mode
- Inter-VDOM routing
- Troubleshooting Virtual Domains
Chapter 21 VM Installation
- FortiGate VM Overview
- Deployment example: VMware
- Deployment example: MS Hyper-V
- Deployment example: KVM
- Deployment example: OpenXen
  - Create the FortiGate VM virtual machine (VMM)
- Deployment example: Citrix XenServer
  - Create the FortiGate VM virtual machine (XenCenter)
  - Configure virtual hardware
    - Configuring number of CPUs and memory size
    - Configuring disk storage
- FortiGate VM Initial Configuration
Chapter 22 VoIP Solutions: SIP
- Before you begin
  - Before you begin
- FortiGate VoIP solutions: SIP
Chapter 23 WAN Optimization, Web Cache, Explicit Proxy, and WCCP
- Before you begin
- Example network topologies
- Configuring WAN optimization
- Peers and authentication groups
- Configuration examples
- Web caching and SSL offloading
- FortiClient WAN optimization
  - FortiClient WAN optimization over IPsec VPN configuration example
- The FortiGate explicit web proxy
- The FortiGate explicit FTP proxy
- FortiGate WCCP
- Storage
  - Formatting the hard disk
  - Configuring WAN optimization and Web cache storage
    - Changing the amount of space allocated for WAN optimization and Web cache storage
    - Adjusting the relative amount of disk space available for byte caching and web caching
- Diagnose commands