Fortinet FortiOS 3.0 - Manuals

Page 3 - Contents

Contents Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 3 Contents Introduction ........................................................................................ 7 About this document ......................................................................................... 7 Document c...

Page 7 - Introduction; About this document; Document conventions

Introduction About this document Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 7 Introduction Over the past year, Fortinet has been developing, testing and refining a new operating system for your FortiGate unit. FortiOS 3.0 is a more dynamic and robust operating system, offering you even be...

Page 8 - Typographic conventions; Fortinet documentation

Upgrade Guide for FortiOS v3.0 8 01-30000-0317-20060424 Fortinet documentation Introduction Typographic conventions FortiGate documentation uses the following typographical conventions: Fortinet documentation The most up-to-date publications and previous releases of Fortinet product documentation ar...

Page 9 - Fortinet Knowledge Center; Customer service and technical support

Introduction Customer service and technical support Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 9 • FortiGate Log Message Reference Available exclusively from the Fortinet Knowledge Center , the FortiGate Log Message Reference describes the structure of FortiGate log messages and provides ...

Page 11 - Backing up configuration files; LCD display changes

Upgrade Notes Backing up configuration files Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 11 Upgrade Notes Before downloading FortiOS 3.0, it is recommended that you read this chapter to learn about on the new features and/or changes to existing features with the operating system. This chap...

Page 12 - Web-based manager changes

Upgrade Guide for FortiOS v3.0 12 01-30000-0317-20060424 Web-based manager changes Upgrade Notes Figure 1: LCD main menu settings for NAT/Route mode Figure 2: LCD main menu setting for Transparent mode Web-based manager changes The system dashboard in FortiOS 3.0 has been enhanced, with various syst...

Page 13 - Changes to the web-based manager; Command Line Interface changes

Upgrade Notes Changes to the web-based manager Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 13 The FortiGate image in the upper-right-hand corner of the web-based manager, displays the status of the unit’s port settings. When you hover your mouse over a port, it displays the port name, IP/N...

Page 14 - USB support; Other

Upgrade Guide for FortiOS v3.0 14 01-30000-0317-20060424 USB support Upgrade Notes USB support The USB is supported in FortiOS 3.0. The FortiUSB key (purchased separately) enables you to backup configuration files and restore backed up configuration files. You can even configure the FortiGate unit t...

Page 17 - New features and changes; System

New features and changes System Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 17 New features and changes There are several new features included in FortiOS 3.0, as well as changes to existing features. This chapter outlines the new features as well as the changes. Before you proceed to upgr...

Page 18 - Status; Sessions; Config

Upgrade Guide for FortiOS v3.0 18 01-30000-0317-20060424 System New features and changes Status The Status page displays the System Dashboard. The System Dashboard is categorized and five new items have been added: • CPU, memory usage statistics history• FortiGuard Subscription-based services and li...

Page 19 - Admin

New features and changes System Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 19 Admin The Admin menu includes two new tabs along with the previous tabs, the Administrators and Access Profile. In the Administrators tab, you can configure an access profile while configuring a new administrato...

Page 20 - Virtual Domain

Upgrade Guide for FortiOS v3.0 20 01-30000-0317-20060424 System New features and changes The FortiGuard Center, previously the Update Center, displays several options for enabling the FortiGate unit to connect to the Fortinet Distribution Network (FDN), and for updating antivirus and attack definiti...

Page 21 - Router; Static

New features and changes Router Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 21 • an administration account with access profile that provides read and write access to • only the admin administrator account can configure a VDOM unless you create and assign a regular administrator to that VDO...

Page 22 - Firewall

Upgrade Guide for FortiOS v3.0 22 01-30000-0317-20060424 Firewall New features and changes Monitor The Routing Monitor tab displays the entries in the FortiGate routing table. You can apply a filter to display certain routes to search for specific routing protocols. Firewall The Firewall menu consis...

Page 23 - VPN; IPSec; SSL; Certificates

New features and changes VPN Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 23 VPN The VPN menu contains the following menus: • IPSec • SSL • Certificates The VPN menu has several significant changes for FortiOS 3.0. Configuration of VPNs has also significantly changed. It is recommended you ...

Page 24 - User; Local; Radius; LDAP; Windows AD

Upgrade Guide for FortiOS v3.0 24 01-30000-0317-20060424 User New features and changes User The User menu consists of the following menus: • Local • Radius • LDAP • Windows AD • User Group Local The Local menu is unchanged. Radius The Radius menu is unchanged. LDAP The LDAP menu is unchanged. Howeve...

Page 25 - Antivirus; File Pattern; Signature

New features and changes Antivirus Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 25 Antivirus The Antivirus menu is now located below the User menu. It consists of the following menus: • File Pattern • Quarantine • Config File Pattern The File Pattern menu has changed. The columns on the Fil...

Page 26 - Anomaly; Web Filter; Content Block; URL Filter

Upgrade Guide for FortiOS v3.0 26 01-30000-0317-20060424 Web Filter New features and changes Anomaly The Anomaly menu detects and identifies network traffic that attempts to take advantage of known exploits. When you are creating a new anomaly, you can now specify the severity, and instead of select...

Page 28 - Banned word

Upgrade Guide for FortiOS v3.0 28 01-30000-0317-20060424 IM/P2P (new) New features and changes Banned word The Banned word menu still controls spam by blocking email messages containing specific words or patterns. The Action column on the Banned Word page is now Score, and is reflected when configur...

Page 29 - Statistics; Log Config

New features and changes Log & Report Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 29 Statistics The Statistics menu provides administrators with a view of instant messaging and point to point statistics to gain insight into how these protocols are being used within the network. The Ove...

Page 30 - Log Access; HA

Upgrade Guide for FortiOS v3.0 30 01-30000-0317-20060424 HA New features and changes The web trends option and traffic filtering are now available in the CLI. See the FortiGate CLI Reference for more information. Logging options for various protocols and traffic is now in the Protection Profiles men...

Page 31 - Upgrading the HA cluster for FortiOS 3.0; SNMP MIBs and traps changes; In-depth SNMP trap changes

New features and changes SNMP MIBs and traps changes Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 31 Upgrading the HA cluster for FortiOS 3.0 The following procedure will help you upgrade a FortiOS 2.80 HA cluster to FortiOS 3.0. You can use either the web-based manager or the execute resto...

Page 33 - Upgrading to FortiOS 3.0; Backing up your configuration; Backing up your configuration using the web-based manager

Upgrading to FortiOS 3.0 Backing up your configuration Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 33 Upgrading to FortiOS 3.0 Before you begin upgrading to FortiOS 3.0, it is recommended that you first review this chapter as well as the release notes so you can be fully aware of these new...

Page 34 - Backing up your configuration using the CLI; Upgrading your FortiGate unit

Upgrade Guide for FortiOS v3.0 34 01-30000-0317-20060424 Upgrading your FortiGate unit Upgrading to FortiOS 3.0 Backing up your configuration using the CLI Use the following procedure to backup up your current configuration in the CLI. To backup your configuration file using the CLI Backup the confi...

Page 35 - Upgrading using the CLI

Upgrading to FortiOS 3.0 Upgrading your FortiGate unit Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 35 4 Under Unit Information, select Update. 5 Type the path and filename of the firmware image file, or select Browse and locate the file. 6 Select OK. The FortiGate unit uploads the firmware...

Page 36 - Verifying the upgrade

Upgrade Guide for FortiOS v3.0 36 01-30000-0317-20060424 Upgrading your FortiGate unit Upgrading to FortiOS 3.0 7 Reconnect to the CLI. 8 To confirm the firmware image is successfully installed, enter: get system status 9 Update antivirus and attack definitions (see the FortiGate Administration Guid...

Page 37 - Backing up your FortiOS 3.0 configuration; Backing up to a FortiUSB key

Reverting to FortiOS v2.80MR11 Backing up your FortiOS 3.0 configuration Update Guide for FortiOS v3.0 01-30000-0317-20060424 37 Reverting to FortiOS v2.80MR11 You may need to revert to a pervious firmware version if the upgrade did not install successfully. The following sections will help you to b...

Page 38 - Downgrading to FortiOS v2.80MR11 using web-based manager; Verifying the downgrade

Update Guide for FortiOS v3.0 38 01-30000-0317-20060424 Downgrading to FortiOS v2.80MR11 using web-based manager Reverting to FortiOS v2.80MR11 Downgrading to FortiOS v2.80MR11 using web-based manager When you downgrade to FortiOS v2.80MR11, only the following settings are retained: • Operation mode...

Page 39 - Downgrading to FortiOS v2.80MR11 using the CLI

Reverting to FortiOS v2.80MR11 Downgrading to FortiOS v2.80MR11 using web-based manager Update Guide for FortiOS v3.0 01-30000-0317-20060424 39 Downgrading to FortiOS v2.80MR11 using the CLI Use the following procedure to downgrade to FortiOS v2.80MR11 in the CLI. If you have created additional sett...

Page 40 - Restoring your configuration; Restoring your configuration settings using the CLI

Update Guide for FortiOS v3.0 40 01-30000-0317-20060424 Restoring your configuration Reverting to FortiOS v2.80MR11 Restoring your configuration Your configuration settings may not have carried over after you have downgraded to FortiOS v2.80MR11. You can restore your configuration settings for Forti...

Page 43 - Index

Index Upgrade Guide for FortiOS v3.0 01-30000-0317-20060424 43 Index A antispam black/white list menu 28 antivirus config menu 25 file pattern menu 25 quarantine menu 25 B Backing 33backing up 3.0 config 37 3.0 config to FortiUSB 37 3.0 to PC 37 config files in 3.0 11 config using web-based manager ...