https://opentextbc.ca/fortigatefirewall Simple Book Publishing Thu, 31 Aug 2023 17:39:45 +0000 en-US 1.2 https://opentextbc.ca/ https://opentextbc.ca/fortigatefirewall 1 124 1 24 25 3 60 4 26 27 59 28 29 30 5 31 32 53 56 58 57 55 54 52 6 33 34 2 35 36 7 8 9 37 10 11 62 38 61 12 39 13 63 14 15 16 17 66 67 18 50 40 41 49 19 42 43 20 21 51 44 22 45 46 48 47 23 65 64 https://wordpress.org/?v=6.2.2 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/attachment/1/ Tue, 29 Aug 2023 20:26:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/1.jpg 24 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/attachment/2/ Tue, 29 Aug 2023 20:26:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2.jpg 25 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/attachment/3/ Tue, 29 Aug 2023 20:26:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3.jpg 26 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/attachment/4/ Tue, 29 Aug 2023 20:26:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4.jpg 27 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/user-profile-e1691185014412/ Tue, 29 Aug 2023 20:26:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/user-profile-e1691185014412.jpg 28 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/second/ Tue, 29 Aug 2023 20:26:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/second.jpg 29 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/logout/ Tue, 29 Aug 2023 20:26:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/logout.jpg 30 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/administrator/ Tue, 29 Aug 2023 20:26:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/administrator.jpg 31 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/system-111/ Tue, 29 Aug 2023 20:26:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/System-111.jpg 32 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/backup/ Tue, 29 Aug 2023 20:26:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/backup.jpg 33 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/dhcp/ Tue, 29 Aug 2023 20:26:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/DHCP.jpg 34 35 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-0/ Tue, 29 Aug 2023 20:26:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/2-0.jpg 38 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-3/ Tue, 29 Aug 2023 20:26:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-3.jpg 39 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-4/ Tue, 29 Aug 2023 20:26:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-4.jpg 40 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-5-2/ Tue, 29 Aug 2023 20:26:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-5-2.jpg 41 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-6/ Tue, 29 Aug 2023 20:26:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-6.jpg 42 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-7/ Tue, 29 Aug 2023 20:26:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-7.jpg 43 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-8/ Tue, 29 Aug 2023 20:26:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-8.jpg 44 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-9/ Tue, 29 Aug 2023 20:26:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-9.jpg 45 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-10-1/ Tue, 29 Aug 2023 20:26:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-10-1.jpg 46 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-11/ Tue, 29 Aug 2023 20:26:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-11.jpg 47 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-12/ Tue, 29 Aug 2023 20:26:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-12.jpg 48 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-13-1/ Tue, 29 Aug 2023 20:26:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-13-1.jpg 49 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/2-14/ Tue, 29 Aug 2023 20:26:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-14.jpg 50 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/screenshot00068/ Tue, 29 Aug 2023 20:26:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00068.jpg 51 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/screenshot00069/ Tue, 29 Aug 2023 20:26:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00069.jpg 52 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/screenshot00070/ Tue, 29 Aug 2023 20:26:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00070.jpg 53 54 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00071/ Tue, 29 Aug 2023 20:26:11 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/ScreenShot00071.jpg 56 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00074/ Tue, 29 Aug 2023 20:26:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00074.jpg 57 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00079/ Tue, 29 Aug 2023 20:26:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00079.jpg 58 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00078/ Tue, 29 Aug 2023 20:26:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00078.jpg 59 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00080/ Tue, 29 Aug 2023 20:26:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00080.jpg 60 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00081/ Tue, 29 Aug 2023 20:26:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00081.jpg 61 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00084/ Tue, 29 Aug 2023 20:26:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00084.jpg 62 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00086/ Tue, 29 Aug 2023 20:26:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00086.jpg 63 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00085/ Tue, 29 Aug 2023 20:26:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00085.jpg 64 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00087/ Tue, 29 Aug 2023 20:26:15 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00087.jpg 65 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00088/ Tue, 29 Aug 2023 20:26:15 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00088.jpg 66 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00089/ Tue, 29 Aug 2023 20:26:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00089.jpg 67 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00092/ Tue, 29 Aug 2023 20:26:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00092.jpg 68 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00098/ Tue, 29 Aug 2023 20:26:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00098.jpg 69 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00094/ Tue, 29 Aug 2023 20:26:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00094.jpg 70 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00097/ Tue, 29 Aug 2023 20:26:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00097.jpg 71 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/screenshot00099/ Tue, 29 Aug 2023 20:26:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00099.jpg 72 73 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/5/ Tue, 29 Aug 2023 20:26:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/5.jpg 76 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/4-1/ Tue, 29 Aug 2023 20:26:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-1.jpg 77 83 0 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/6-1/ Tue, 29 Aug 2023 20:26:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/6-1.jpg 78 83 0 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/attachment/8/ Tue, 29 Aug 2023 20:26:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/8.jpg 79 83 0 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/attachment/9/ Tue, 29 Aug 2023 20:26:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/9.jpg 80 83 0 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/attachment/10/ Tue, 29 Aug 2023 20:26:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10.jpg 81 83 0 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/attachment/11/ Tue, 29 Aug 2023 20:26:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/11.jpg 82 83 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/12/ Tue, 29 Aug 2023 20:26:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/12.jpg 85 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/13/ Tue, 29 Aug 2023 20:26:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/13.jpg 86 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/14/ Tue, 29 Aug 2023 20:26:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/14.jpg 87 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/15/ Tue, 29 Aug 2023 20:26:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/15.jpg 88 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/16/ Tue, 29 Aug 2023 20:26:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/16.jpg 89 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/17/ Tue, 29 Aug 2023 20:26:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/17.jpg 90 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/18/ Tue, 29 Aug 2023 20:26:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/18.jpg 91 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/attachment/20/ Tue, 29 Aug 2023 20:26:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/20.jpg 92 93 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/1-4/ Tue, 29 Aug 2023 20:26:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/1-4.jpg 96 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/for-when-dragging-a-new-nat-cloud/ Tue, 29 Aug 2023 20:26:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/For-when-dragging-a-New-NAT-Cloud.png 97 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/make-sure-to-choose-gns3-when-dragging-a-new-switch/ Tue, 29 Aug 2023 20:26:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Make-sure-to-choose-GNS3-when-dragging-a-new-Switch.png 98 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/attachment/123/ Tue, 29 Aug 2023 20:26:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/123.jpg 99 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/dhcp-ip-active-config/ Tue, 29 Aug 2023 20:26:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/DHCP-IP-Active-Config.png 100 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/activated-static-configuration/ Tue, 29 Aug 2023 20:26:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Activated-Static-configuration.png 101 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/create-user-group/ Tue, 29 Aug 2023 20:26:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Create-User-Group.png 102 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/create-user-group-2/ Tue, 29 Aug 2023 20:26:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Create-User-Group-2-.png 103 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/user-defenition/ Tue, 29 Aug 2023 20:26:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/User-Defenition.png 104 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/user-defenition-2/ Tue, 29 Aug 2023 20:26:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/User-Defenition-2-.png 105 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/user-defenition-3/ Tue, 29 Aug 2023 20:26:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/User-Defenition-3-.png 106 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/user-defenition-4/ Tue, 29 Aug 2023 20:26:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/User-Defenition-4-.png 107 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/user-defenition-5/ Tue, 29 Aug 2023 20:26:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/User-Defenition-5-.png 108 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/user-defenition-6/ Tue, 29 Aug 2023 20:26:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/User-Defenition-6-.png 109 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/vpn-2-png/ Tue, 29 Aug 2023 20:26:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/VPN-2-png.png 110 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/vpn-3/ Tue, 29 Aug 2023 20:26:32 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/VPN-3.png 111 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/vpn-7/ Tue, 29 Aug 2023 20:26:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/VPN-7.png 112 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/vpn9/ Tue, 29 Aug 2023 20:26:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/VPN9.png 113 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/windows-machine-10/ Tue, 29 Aug 2023 20:26:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Windows-Machine-10-.png 114 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/windows-machine-12/ Tue, 29 Aug 2023 20:26:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Windows-Machine-12-.png 115 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/windows-machine-11/ Tue, 29 Aug 2023 20:26:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Windows-Machine-11-.png 116 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/windows-machine-13/ Tue, 29 Aug 2023 20:26:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Windows-Machine-13-.png 117 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/windows-machine-14/ Tue, 29 Aug 2023 20:26:38 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Windows-Machine-14-.png 118 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/windows-machine-15/ Tue, 29 Aug 2023 20:26:38 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Windows-Machine-15.png 119 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/3-1/ Tue, 29 Aug 2023 20:26:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-1.jpg 120 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/4-2/ Tue, 29 Aug 2023 20:26:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-2.jpg 121 133 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/5-1/ Tue, 29 Aug 2023 20:26:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/5-1.jpg 122 543 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/6-2/ Tue, 29 Aug 2023 20:26:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/6-2.jpg 123 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/attachment/7/ Tue, 29 Aug 2023 20:26:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/7.jpg 124 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/8-1/ Tue, 29 Aug 2023 20:26:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/8-1.jpg 125 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/9-1/ Tue, 29 Aug 2023 20:26:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/9-1.jpg 126 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/10-1/ Tue, 29 Aug 2023 20:26:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-1.jpg 127 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/11-1/ Tue, 29 Aug 2023 20:26:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/11-1.jpg 128 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/12-2/ Tue, 29 Aug 2023 20:26:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/12.jpg 129 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/13-1/ Tue, 29 Aug 2023 20:26:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/13-1.jpg 130 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00099-1/ Tue, 29 Aug 2023 20:26:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00099-1.jpg 131 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/14-1/ Tue, 29 Aug 2023 20:26:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/14-1.jpg 132 133 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/16-1/ Tue, 29 Aug 2023 20:26:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/16-1.jpg 135 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/17-1/ Tue, 29 Aug 2023 20:26:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/17-1.jpg 136 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/18-1/ Tue, 29 Aug 2023 20:26:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/18-1.jpg 137 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/22-1/ Tue, 29 Aug 2023 20:26:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/22-1.jpg 138 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/19/ Tue, 29 Aug 2023 20:26:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/19.jpg 139 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/20-1/ Tue, 29 Aug 2023 20:26:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/20-1.jpg 140 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/21/ Tue, 29 Aug 2023 20:26:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/21.jpg 141 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/23/ Tue, 29 Aug 2023 20:26:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/23.jpg 142 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/27/ Tue, 29 Aug 2023 20:26:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/27.jpg 143 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/25/ Tue, 29 Aug 2023 20:26:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/25.jpg 144 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/26/ Tue, 29 Aug 2023 20:26:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/26.jpg 145 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/28/ Tue, 29 Aug 2023 20:26:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/28.jpg 146 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/29/ Tue, 29 Aug 2023 20:26:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/29.jpg 147 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/30/ Tue, 29 Aug 2023 20:26:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/30.jpg 148 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/31/ Tue, 29 Aug 2023 20:26:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/31.jpg 149 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/32/ Tue, 29 Aug 2023 20:26:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/32.jpg 150 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/33/ Tue, 29 Aug 2023 20:26:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/33.jpg 151 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/34/ Tue, 29 Aug 2023 20:26:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/34.jpg 152 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/35/ Tue, 29 Aug 2023 20:26:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/35.jpg 153 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/36/ Tue, 29 Aug 2023 20:26:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/36.jpg 154 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/37/ Tue, 29 Aug 2023 20:26:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/37.jpg 155 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/38/ Tue, 29 Aug 2023 20:26:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/38.jpg 156 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/39/ Tue, 29 Aug 2023 20:26:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/39.jpg 157 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/40/ Tue, 29 Aug 2023 20:26:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/40.jpg 158 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/41/ Tue, 29 Aug 2023 20:26:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/41.jpg 159 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/42/ Tue, 29 Aug 2023 20:26:53 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/42.jpg 160 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/43/ Tue, 29 Aug 2023 20:26:53 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/43.jpg 161 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/44/ Tue, 29 Aug 2023 20:26:53 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/44.jpg 162 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/45/ Tue, 29 Aug 2023 20:26:53 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/45.jpg 163 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/attachment/46/ Tue, 29 Aug 2023 20:26:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/46.jpg 164 165 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/1-5/ Tue, 29 Aug 2023 20:26:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/1-5.jpg 168 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/2-1/ Tue, 29 Aug 2023 20:26:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-1.jpg 169 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/3-2/ Tue, 29 Aug 2023 20:26:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-2.jpg 170 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/4-3/ Tue, 29 Aug 2023 20:26:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-3.jpg 171 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/5-2/ Tue, 29 Aug 2023 20:26:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/5-2.jpg 172 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/6-3/ Tue, 29 Aug 2023 20:26:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/6-3.jpg 173 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/7-1/ Tue, 29 Aug 2023 20:26:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/7-1.jpg 174 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/8-2/ Tue, 29 Aug 2023 20:26:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/8-2.jpg 175 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/9-2/ Tue, 29 Aug 2023 20:26:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/9-2.jpg 176 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/11-2/ Tue, 29 Aug 2023 20:26:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/11-2.jpg 177 178 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/attachment/116/ Tue, 29 Aug 2023 20:26:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/116.jpg 180 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/attachment/117/ Tue, 29 Aug 2023 20:26:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/117.jpg 181 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/screenshot00065/ Tue, 29 Aug 2023 20:26:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00065.jpg 182 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/attachment/119/ Tue, 29 Aug 2023 20:26:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/119.jpg 183 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/attachment/120/ Tue, 29 Aug 2023 20:26:59 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/120.jpg 184 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/attachment/122/ Tue, 29 Aug 2023 20:26:59 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/122.jpg 185 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/screenshot00067/ Tue, 29 Aug 2023 20:26:59 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00067.jpg 186 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/screenshot00068-1/ Tue, 29 Aug 2023 20:27:00 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00068-1.jpg 187 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/screenshot00069-1/ Tue, 29 Aug 2023 20:27:00 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00069-1.jpg 188 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/screenshot00070-1/ Tue, 29 Aug 2023 20:27:00 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00070-1.jpg 189 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/screenshot00072/ Tue, 29 Aug 2023 20:27:01 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00072.jpg 190 191 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/1-6/ Tue, 29 Aug 2023 20:27:02 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/1-6.jpg 194 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/2-2/ Tue, 29 Aug 2023 20:27:02 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-2.jpg 195 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/3-3/ Tue, 29 Aug 2023 20:27:02 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-3.jpg 196 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/4-4/ Tue, 29 Aug 2023 20:27:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-4.jpg 197 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/6-4/ Tue, 29 Aug 2023 20:27:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/6-4.jpg 198 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/5-3/ Tue, 29 Aug 2023 20:27:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/5-3.jpg 199 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/7-2/ Tue, 29 Aug 2023 20:27:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/7-2.jpg 200 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/8-3/ Tue, 29 Aug 2023 20:27:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/8-3.jpg 201 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/10-2/ Tue, 29 Aug 2023 20:27:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-2.jpg 202 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/9-3/ Tue, 29 Aug 2023 20:27:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/9-3.jpg 203 204 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/1-2/ Tue, 29 Aug 2023 20:27:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/1.jpg 207 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/2-5/ Tue, 29 Aug 2023 20:27:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-5.jpg 208 215 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/3-4/ Tue, 29 Aug 2023 20:27:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-4.jpg 209 215 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/4-5/ Tue, 29 Aug 2023 20:27:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-5.jpg 210 215 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/5-4/ Tue, 29 Aug 2023 20:27:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/5.jpg 211 215 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/attachment/6/ Tue, 29 Aug 2023 20:27:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/6.jpg 212 215 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-141/ Tue, 29 Aug 2023 20:27:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-141.jpg 213 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/8-4/ Tue, 29 Aug 2023 20:27:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/8-4.jpg 214 215 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/9-4/ Tue, 29 Aug 2023 20:27:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/9-4.jpg 217 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/10-3/ Tue, 29 Aug 2023 20:27:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-3.jpg 218 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/11-3/ Tue, 29 Aug 2023 20:27:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/11-3.jpg 219 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/12-1/ Tue, 29 Aug 2023 20:27:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/12-1.jpg 220 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/13-1-1/ Tue, 29 Aug 2023 20:27:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/13-1-1.jpg 221 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/14-1-1/ Tue, 29 Aug 2023 20:27:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/14-1-1.jpg 222 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/15-1-1/ Tue, 29 Aug 2023 20:27:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/15-1-1.jpg 223 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/17-2/ Tue, 29 Aug 2023 20:27:11 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/17-2.jpg 224 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/18-2/ Tue, 29 Aug 2023 20:27:11 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/18-2.jpg 225 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/20-2/ Tue, 29 Aug 2023 20:27:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/20-2.jpg 226 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/21-1/ Tue, 29 Aug 2023 20:27:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/21-1.jpg 227 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/attachment/22/ Tue, 29 Aug 2023 20:27:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/22.jpg 228 229 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/attachment/0/ Tue, 29 Aug 2023 20:27:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/0.jpg 231 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/1-1/ Tue, 29 Aug 2023 20:27:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/1-1.jpg 232 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/3-1-1/ Tue, 29 Aug 2023 20:27:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-1-1.jpg 233 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/4-1-1/ Tue, 29 Aug 2023 20:27:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-1-1.jpg 234 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/41-1/ Tue, 29 Aug 2023 20:27:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/41-1.jpg 235 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/46-1/ Tue, 29 Aug 2023 20:27:15 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/46-1.jpg 236 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/attachment/47/ Tue, 29 Aug 2023 20:27:15 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/47.jpg 237 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/attachment/48/ Tue, 29 Aug 2023 20:27:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/48.jpg 238 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/42-1/ Tue, 29 Aug 2023 20:27:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/42-1.jpg 239 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/43-1/ Tue, 29 Aug 2023 20:27:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/43-1.jpg 240 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/44-1/ Tue, 29 Aug 2023 20:27:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/44-1.jpg 241 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/45-1/ Tue, 29 Aug 2023 20:27:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/45-1.jpg 242 243 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/1-7/ Tue, 29 Aug 2023 20:27:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/1-7.jpg 246 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/newone/ Tue, 29 Aug 2023 20:27:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/newone.jpg 247 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/3-4-1/ Tue, 29 Aug 2023 20:27:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-4-1.jpg 248 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/4-5-1/ Tue, 29 Aug 2023 20:27:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-5-1.jpg 249 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/56/ Tue, 29 Aug 2023 20:27:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/56.jpg 250 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/54/ Tue, 29 Aug 2023 20:27:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/54.jpg 251 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/57/ Tue, 29 Aug 2023 20:27:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/57.jpg 252 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/58/ Tue, 29 Aug 2023 20:27:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/58.jpg 253 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/59/ Tue, 29 Aug 2023 20:27:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/59.jpg 254 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/61-1/ Tue, 29 Aug 2023 20:27:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/61-1.jpg 255 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/63/ Tue, 29 Aug 2023 20:27:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/63.jpg 256 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/64/ Tue, 29 Aug 2023 20:27:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/64.jpg 257 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/65/ Tue, 29 Aug 2023 20:27:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/65.jpg 258 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/66/ Tue, 29 Aug 2023 20:27:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/66.jpg 259 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/67/ Tue, 29 Aug 2023 20:27:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/67.jpg 260 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/68/ Tue, 29 Aug 2023 20:27:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/68.jpg 261 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/69/ Tue, 29 Aug 2023 20:27:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/69.jpg 262 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/attachment/70/ Tue, 29 Aug 2023 20:27:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/70.jpg 263 264 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/71/ Tue, 29 Aug 2023 20:27:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/03/71.jpg 266 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/72/ Tue, 29 Aug 2023 20:27:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/72.jpg 267 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/73/ Tue, 29 Aug 2023 20:27:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/73.jpg 268 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/74/ Tue, 29 Aug 2023 20:27:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/74.jpg 269 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/75/ Tue, 29 Aug 2023 20:27:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/75.jpg 270 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/76/ Tue, 29 Aug 2023 20:27:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/76.jpg 271 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/77/ Tue, 29 Aug 2023 20:27:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/77.jpg 272 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/78/ Tue, 29 Aug 2023 20:27:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/78.jpg 273 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/79/ Tue, 29 Aug 2023 20:27:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/79.jpg 274 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/81/ Tue, 29 Aug 2023 20:27:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/81.jpg 275 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/80/ Tue, 29 Aug 2023 20:27:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/80.jpg 276 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/82/ Tue, 29 Aug 2023 20:27:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/82.jpg 277 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/83/ Tue, 29 Aug 2023 20:27:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/83.jpg 278 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/84/ Tue, 29 Aug 2023 20:27:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/84.jpg 279 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/85/ Tue, 29 Aug 2023 20:27:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/85.jpg 280 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/attachment/86/ Tue, 29 Aug 2023 20:27:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/86.jpg 281 282 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/1-8/ Tue, 29 Aug 2023 20:27:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/1-8.jpg 285 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/2-15/ Tue, 29 Aug 2023 20:27:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2-15.jpg 286 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/3-5/ Tue, 29 Aug 2023 20:27:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/3-5.jpg 287 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/4-6/ Tue, 29 Aug 2023 20:27:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/4-6.jpg 288 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/5-4-2/ Tue, 29 Aug 2023 20:27:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/5-4.jpg 289 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/6-5/ Tue, 29 Aug 2023 20:27:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/6-5.jpg 290 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/7-3-1/ Tue, 29 Aug 2023 20:27:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/7-3-1.jpg 291 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/94/ Tue, 29 Aug 2023 20:27:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/94.jpg 292 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/95/ Tue, 29 Aug 2023 20:27:32 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/95.jpg 293 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/96/ Tue, 29 Aug 2023 20:27:32 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/96.jpg 294 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/97/ Tue, 29 Aug 2023 20:27:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/97.jpg 295 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/98/ Tue, 29 Aug 2023 20:27:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/98.jpg 296 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/99/ Tue, 29 Aug 2023 20:27:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/99.jpg 297 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/100/ Tue, 29 Aug 2023 20:27:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/100.jpg 298 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/101/ Tue, 29 Aug 2023 20:27:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/101.jpg 299 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/102/ Tue, 29 Aug 2023 20:27:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/102.jpg 300 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/103/ Tue, 29 Aug 2023 20:27:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/103.jpg 301 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/106/ Tue, 29 Aug 2023 20:27:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/106.jpg 302 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/104/ Tue, 29 Aug 2023 20:27:35 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/104.jpg 303 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/105/ Tue, 29 Aug 2023 20:27:35 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/105.jpg 304 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/107/ Tue, 29 Aug 2023 20:27:35 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/107.jpg 305 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/109/ Tue, 29 Aug 2023 20:27:35 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/109.jpg 306 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/113/ Tue, 29 Aug 2023 20:27:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/113.jpg 307 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/111/ Tue, 29 Aug 2023 20:27:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/111.jpg 308 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/112/ Tue, 29 Aug 2023 20:27:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/112.jpg 309 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/attachment/114/ Tue, 29 Aug 2023 20:27:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/114.jpg 310 311 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00128/ Tue, 29 Aug 2023 20:27:38 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/ScreenShot00128.jpg 314 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00080-1/ Tue, 29 Aug 2023 20:27:38 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00080-1.jpg 315 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00081-1/ Tue, 29 Aug 2023 20:27:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00081-1.jpg 316 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00082/ Tue, 29 Aug 2023 20:27:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00082.jpg 317 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00083/ Tue, 29 Aug 2023 20:27:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00083.jpg 318 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00084-1/ Tue, 29 Aug 2023 20:27:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00084-1.jpg 319 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00085-1/ Tue, 29 Aug 2023 20:27:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00085-1.jpg 320 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00086-1/ Tue, 29 Aug 2023 20:27:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00086-1.jpg 321 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00087-1/ Tue, 29 Aug 2023 20:27:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00087-1.jpg 322 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00091-1/ Tue, 29 Aug 2023 20:27:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00091-1.jpg 323 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00092-1/ Tue, 29 Aug 2023 20:27:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00092-1.jpg 324 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00093/ Tue, 29 Aug 2023 20:27:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00093.jpg 325 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00094-1/ Tue, 29 Aug 2023 20:27:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00094-1.jpg 326 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00095-1/ Tue, 29 Aug 2023 20:27:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00095-1.jpg 327 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00104/ Tue, 29 Aug 2023 20:27:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00104.jpg 328 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00105/ Tue, 29 Aug 2023 20:27:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00105.jpg 329 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00106/ Tue, 29 Aug 2023 20:27:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00106.jpg 330 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00107/ Tue, 29 Aug 2023 20:27:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00107.jpg 331 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00108/ Tue, 29 Aug 2023 20:27:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00108.jpg 332 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00109-2/ Tue, 29 Aug 2023 20:27:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00109-2.jpg 333 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00110/ Tue, 29 Aug 2023 20:27:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00110.jpg 334 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00111/ Tue, 29 Aug 2023 20:27:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00111.jpg 335 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00100/ Tue, 29 Aug 2023 20:27:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00100.jpg 336 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00101/ Tue, 29 Aug 2023 20:27:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00101.jpg 337 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00102/ Tue, 29 Aug 2023 20:27:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00102.jpg 338 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00113/ Tue, 29 Aug 2023 20:27:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00113.jpg 339 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00114/ Tue, 29 Aug 2023 20:27:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00114.jpg 340 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00112/ Tue, 29 Aug 2023 20:27:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00112.jpg 341 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00116/ Tue, 29 Aug 2023 20:27:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00116.jpg 342 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00117/ Tue, 29 Aug 2023 20:27:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00117.jpg 343 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00118/ Tue, 29 Aug 2023 20:27:53 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00118.jpg 344 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00119/ Tue, 29 Aug 2023 20:27:53 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00119.jpg 345 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00120/ Tue, 29 Aug 2023 20:27:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00120.jpg 346 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00121/ Tue, 29 Aug 2023 20:27:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00121.jpg 347 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00122/ Tue, 29 Aug 2023 20:27:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00122.jpg 348 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/screenshot00123/ Tue, 29 Aug 2023 20:27:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00123.jpg 349 350 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00001/ Tue, 29 Aug 2023 20:27:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/04/ScreenShot00001.png 352 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00002/ Tue, 29 Aug 2023 20:27:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00002.png 353 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00003/ Tue, 29 Aug 2023 20:27:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00003.png 354 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00004/ Tue, 29 Aug 2023 20:27:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00004.png 355 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00005/ Tue, 29 Aug 2023 20:27:59 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00005.png 356 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00006/ Tue, 29 Aug 2023 20:28:00 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00006.png 357 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00007/ Tue, 29 Aug 2023 20:28:00 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00007.png 358 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00008/ Tue, 29 Aug 2023 20:28:01 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00008.png 359 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00009/ Tue, 29 Aug 2023 20:28:01 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00009.png 360 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00010/ Tue, 29 Aug 2023 20:28:02 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00010.png 361 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/screenshot00011/ Tue, 29 Aug 2023 20:28:03 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00011.png 362 363 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/pastedimage/ Tue, 29 Aug 2023 20:28:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/05/pastedImage.png 365 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00071-2/ Tue, 29 Aug 2023 20:28:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00071.png 366 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00075/ Tue, 29 Aug 2023 20:28:04 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00075.png 367 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00076/ Tue, 29 Aug 2023 20:28:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00076.png 368 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00077/ Tue, 29 Aug 2023 20:28:05 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00077.png 369 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00078-2/ Tue, 29 Aug 2023 20:28:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00078.png 370 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00072-2/ Tue, 29 Aug 2023 20:28:06 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00072.png 371 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00073/ Tue, 29 Aug 2023 20:28:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00073.png 372 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00074-2/ Tue, 29 Aug 2023 20:28:07 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00074.png 373 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/screenshot00079-2/ Tue, 29 Aug 2023 20:28:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/ScreenShot00079.png 374 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/untitled11/ Tue, 29 Aug 2023 20:28:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/Untitled11.png 375 376 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-60/ Tue, 29 Aug 2023 20:28:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/05/10-60.jpg 378 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-61/ Tue, 29 Aug 2023 20:28:08 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-61.jpg 379 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-62/ Tue, 29 Aug 2023 20:28:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-62.jpg 380 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-64-1/ Tue, 29 Aug 2023 20:28:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-64-1.jpg 381 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-65-1/ Tue, 29 Aug 2023 20:28:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-65-1.jpg 382 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-66/ Tue, 29 Aug 2023 20:28:09 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-66.jpg 383 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-67/ Tue, 29 Aug 2023 20:28:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-67.jpg 384 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-68/ Tue, 29 Aug 2023 20:28:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-68.jpg 385 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-69-2/ Tue, 29 Aug 2023 20:28:10 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-69-2.jpg 386 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-70/ Tue, 29 Aug 2023 20:28:11 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-70.jpg 387 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-71/ Tue, 29 Aug 2023 20:28:11 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-71.jpg 388 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-72/ Tue, 29 Aug 2023 20:28:11 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-72.jpg 389 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-73-1/ Tue, 29 Aug 2023 20:28:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-73-1.jpg 390 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-74/ Tue, 29 Aug 2023 20:28:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-74.jpg 391 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-75-1/ Tue, 29 Aug 2023 20:28:12 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-75-1.jpg 392 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-76/ Tue, 29 Aug 2023 20:28:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-76.jpg 393 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-77/ Tue, 29 Aug 2023 20:28:13 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-77.jpg 394 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-78/ Tue, 29 Aug 2023 20:28:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-78.jpg 395 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-79/ Tue, 29 Aug 2023 20:28:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-79.jpg 396 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-80/ Tue, 29 Aug 2023 20:28:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-80.jpg 397 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-81/ Tue, 29 Aug 2023 20:28:14 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-81.jpg 398 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-82/ Tue, 29 Aug 2023 20:28:15 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-82.jpg 399 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-83/ Tue, 29 Aug 2023 20:28:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-83.jpg 400 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-84/ Tue, 29 Aug 2023 20:28:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-84.jpg 401 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-85/ Tue, 29 Aug 2023 20:28:16 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-85.jpg 402 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-86/ Tue, 29 Aug 2023 20:28:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-86.jpg 403 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-87/ Tue, 29 Aug 2023 20:28:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-87.jpg 404 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-88/ Tue, 29 Aug 2023 20:28:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-88.jpg 405 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-89/ Tue, 29 Aug 2023 20:28:17 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-89.jpg 406 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-90/ Tue, 29 Aug 2023 20:28:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-90.jpg 407 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-91/ Tue, 29 Aug 2023 20:28:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-91.jpg 408 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-92/ Tue, 29 Aug 2023 20:28:18 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-92.jpg 409 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-93/ Tue, 29 Aug 2023 20:28:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-93.jpg 410 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-94/ Tue, 29 Aug 2023 20:28:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-94.jpg 411 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-95/ Tue, 29 Aug 2023 20:28:19 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-95.jpg 412 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-96/ Tue, 29 Aug 2023 20:28:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-96.jpg 413 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-97/ Tue, 29 Aug 2023 20:28:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-97.jpg 414 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-98/ Tue, 29 Aug 2023 20:28:20 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-98.jpg 415 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-99/ Tue, 29 Aug 2023 20:28:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-99.jpg 416 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-100/ Tue, 29 Aug 2023 20:28:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-100.jpg 417 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-101/ Tue, 29 Aug 2023 20:28:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-101.jpg 418 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-102/ Tue, 29 Aug 2023 20:28:21 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-102.jpg 419 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-103/ Tue, 29 Aug 2023 20:28:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-103.jpg 420 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-104/ Tue, 29 Aug 2023 20:28:22 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-104.jpg 421 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-105/ Tue, 29 Aug 2023 20:28:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-105.jpg 422 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-106/ Tue, 29 Aug 2023 20:28:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-106.jpg 423 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/10-107/ Tue, 29 Aug 2023 20:28:23 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-107.jpg 424 425 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-109/ Tue, 29 Aug 2023 20:28:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/05/10-109.jpg 427 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-110/ Tue, 29 Aug 2023 20:28:24 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-110.jpg 428 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-111/ Tue, 29 Aug 2023 20:28:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-111.jpg 429 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-112/ Tue, 29 Aug 2023 20:28:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-112.jpg 430 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-113/ Tue, 29 Aug 2023 20:28:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-113.jpg 431 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-114/ Tue, 29 Aug 2023 20:28:25 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-114.jpg 432 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-115/ Tue, 29 Aug 2023 20:28:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-115.jpg 433 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-116/ Tue, 29 Aug 2023 20:28:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-116.jpg 434 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-117/ Tue, 29 Aug 2023 20:28:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-117.jpg 435 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-118/ Tue, 29 Aug 2023 20:28:26 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-118.jpg 436 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-119/ Tue, 29 Aug 2023 20:28:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-119.jpg 437 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-120/ Tue, 29 Aug 2023 20:28:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-120.jpg 438 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-121/ Tue, 29 Aug 2023 20:28:27 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-121.jpg 439 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-122/ Tue, 29 Aug 2023 20:28:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-122.jpg 440 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-123/ Tue, 29 Aug 2023 20:28:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-123.jpg 441 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-124/ Tue, 29 Aug 2023 20:28:28 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-124.jpg 442 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-125-1/ Tue, 29 Aug 2023 20:28:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-125-1.jpg 443 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-126/ Tue, 29 Aug 2023 20:28:29 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-126.jpg 444 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-127/ Tue, 29 Aug 2023 20:28:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-127.jpg 445 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-128/ Tue, 29 Aug 2023 20:28:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-128.jpg 446 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-129/ Tue, 29 Aug 2023 20:28:30 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-129.jpg 447 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-130/ Tue, 29 Aug 2023 20:28:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-130.jpg 448 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-131/ Tue, 29 Aug 2023 20:28:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-131.jpg 449 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-132/ Tue, 29 Aug 2023 20:28:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-132.jpg 450 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-133/ Tue, 29 Aug 2023 20:28:31 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-133.jpg 451 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-134/ Tue, 29 Aug 2023 20:28:32 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-134.jpg 452 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-135/ Tue, 29 Aug 2023 20:28:32 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-135.jpg 453 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-136/ Tue, 29 Aug 2023 20:28:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-136.jpg 454 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-137/ Tue, 29 Aug 2023 20:28:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-137.jpg 455 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-138/ Tue, 29 Aug 2023 20:28:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-138.jpg 456 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-139/ Tue, 29 Aug 2023 20:28:33 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-139.jpg 457 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-140/ Tue, 29 Aug 2023 20:28:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-140.jpg 458 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-142/ Tue, 29 Aug 2023 20:28:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-142.jpg 459 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-143-1/ Tue, 29 Aug 2023 20:28:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-143-1.jpg 460 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-144/ Tue, 29 Aug 2023 20:28:34 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-144.jpg 461 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-145/ Tue, 29 Aug 2023 20:28:35 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-145.jpg 462 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-146/ Tue, 29 Aug 2023 20:28:35 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-146.jpg 463 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-147/ Tue, 29 Aug 2023 20:28:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-147.jpg 464 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-148/ Tue, 29 Aug 2023 20:28:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-148.jpg 465 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-149/ Tue, 29 Aug 2023 20:28:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-149.jpg 466 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-150/ Tue, 29 Aug 2023 20:28:36 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-150.jpg 467 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-151/ Tue, 29 Aug 2023 20:28:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-151.jpg 468 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-152/ Tue, 29 Aug 2023 20:28:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-152.jpg 469 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-153/ Tue, 29 Aug 2023 20:28:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-153.jpg 470 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-154/ Tue, 29 Aug 2023 20:28:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-154.jpg 471 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/10-155/ Tue, 29 Aug 2023 20:28:37 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-155.jpg 472 473 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-156/ Tue, 29 Aug 2023 20:28:38 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/05/10-156.jpg 475 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-157/ Tue, 29 Aug 2023 20:28:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-157.jpg 476 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-158/ Tue, 29 Aug 2023 20:28:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-158.jpg 477 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-159/ Tue, 29 Aug 2023 20:28:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-159.jpg 478 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-160/ Tue, 29 Aug 2023 20:28:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-160.jpg 479 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-161/ Tue, 29 Aug 2023 20:28:39 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-161.jpg 480 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-162/ Tue, 29 Aug 2023 20:28:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-162.jpg 481 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-163/ Tue, 29 Aug 2023 20:28:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-163.jpg 482 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-164/ Tue, 29 Aug 2023 20:28:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-164.jpg 483 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-165/ Tue, 29 Aug 2023 20:28:40 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-165.jpg 484 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-166/ Tue, 29 Aug 2023 20:28:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-166.jpg 485 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-167/ Tue, 29 Aug 2023 20:28:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-167.jpg 486 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-168/ Tue, 29 Aug 2023 20:28:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-168.jpg 487 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-169/ Tue, 29 Aug 2023 20:28:41 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-169.jpg 488 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-170/ Tue, 29 Aug 2023 20:28:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-170.jpg 489 491 0 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/10-171/ Tue, 29 Aug 2023 20:28:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/10-171.jpg 490 491 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg1/ Tue, 29 Aug 2023 20:28:42 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2022/05/FG1.jpg 493 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg2/ Tue, 29 Aug 2023 20:28:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG2.jpg 494 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg3/ Tue, 29 Aug 2023 20:28:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG3.jpg 495 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg4/ Tue, 29 Aug 2023 20:28:43 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG4.jpg 496 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg5/ Tue, 29 Aug 2023 20:28:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG5.jpg 497 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg6/ Tue, 29 Aug 2023 20:28:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG6.jpg 498 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg7/ Tue, 29 Aug 2023 20:28:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG7.jpg 499 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg10/ Tue, 29 Aug 2023 20:28:44 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG10.jpg 500 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg8/ Tue, 29 Aug 2023 20:28:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG8.jpg 501 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg9/ Tue, 29 Aug 2023 20:28:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG9.jpg 502 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg11/ Tue, 29 Aug 2023 20:28:45 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG11.jpg 503 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg12/ Tue, 29 Aug 2023 20:28:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG12.jpg 504 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg14/ Tue, 29 Aug 2023 20:28:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG14.jpg 505 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg13/ Tue, 29 Aug 2023 20:28:46 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG13.jpg 506 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg15/ Tue, 29 Aug 2023 20:28:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG15.jpg 507 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg16/ Tue, 29 Aug 2023 20:28:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG16.jpg 508 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg17/ Tue, 29 Aug 2023 20:28:47 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG17.jpg 509 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg18/ Tue, 29 Aug 2023 20:28:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG18.jpg 510 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg19/ Tue, 29 Aug 2023 20:28:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG19.jpg 511 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg20/ Tue, 29 Aug 2023 20:28:48 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG20.jpg 512 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/fg21/ Tue, 29 Aug 2023 20:28:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/FG21.jpg 513 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/templates/ Tue, 29 Aug 2023 20:28:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/templates.png 514 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate/ Tue, 29 Aug 2023 20:28:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate.jpg 515 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/80e78e649b7ec0c623e04d4235f4cbe743d16941/ Tue, 29 Aug 2023 20:28:49 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/80e78e649b7ec0c623e04d4235f4cbe743d16941.png 516 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate2/ Tue, 29 Aug 2023 20:28:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate2.jpg 517 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate3/ Tue, 29 Aug 2023 20:28:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate3.jpg 518 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate4/ Tue, 29 Aug 2023 20:28:50 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate4.jpg 519 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate5/ Tue, 29 Aug 2023 20:28:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate5.jpg 520 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate6/ Tue, 29 Aug 2023 20:28:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate6.jpg 521 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-03-16-18-28-58-image/ Tue, 29 Aug 2023 20:28:51 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-03-16-18-28-58-image.png 522 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate7/ Tue, 29 Aug 2023 20:28:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate7.jpg 523 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate8/ Tue, 29 Aug 2023 20:28:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate8.jpg 524 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/cabling/ Tue, 29 Aug 2023 20:28:52 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/cabling.gif 525 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate10/ Tue, 29 Aug 2023 20:28:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate10.jpg 526 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/newpan/ Tue, 29 Aug 2023 20:28:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/NewPan.jpg 527 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-03-29-17-28-01-image/ Tue, 29 Aug 2023 20:28:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-03-29-17-28-01-image.png 528 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate11/ Tue, 29 Aug 2023 20:28:54 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate11.jpg 529 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate12/ Tue, 29 Aug 2023 20:28:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate12.jpg 530 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate13/ Tue, 29 Aug 2023 20:28:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate13.jpg 531 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-03-29-19-19-20-image/ Tue, 29 Aug 2023 20:28:55 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-03-29-19-19-20-image.png 532 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate14/ Tue, 29 Aug 2023 20:28:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate14.jpg 533 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate15/ Tue, 29 Aug 2023 20:28:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate15.jpg 534 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate16/ Tue, 29 Aug 2023 20:28:56 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate16.jpg 535 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate17/ Tue, 29 Aug 2023 20:28:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate17.jpg 536 543 0 0 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/ Fri, 04 Mar 2022 05:29:34 +0000 https://opentextbc.ca/fortigatefirewall/chapter/basic-settings/

Learning Objectives

• Create a basic configuration in FortiGate
• Identify CLI commands in FortiGate
• Create an IP access in FortiGate
• Create a DHCP server in FortiGate
• Restore previous configurations in FortiGate using backups

Scenario: This exercise will access a FortiGate device using the command-line interface (CLI). Setup your GNS3 and try to connect to FortiGate through WebTerm.

[caption id="attachment_34" align="aligncenter" width="718"] Figure 1.1: Main scenario[/caption]

Explore the CLI

To explore the CLI, from the GNS3 double click on FortiGate to open the console. In the Password field, type <the default password is blank>, and then press enter. Enter the following command:

get system status

[caption id="attachment_34" align="aligncenter" width="707"] Figure 1.2: Get system status output[/caption] This command displays basic status information about FortiGate. The output includes FortiGate's serial number, operation mode, and a lot of useful information. When the More prompt appears on the CLI, do one of the following:

• To continue scrolling, Space bar.
• To scroll one line at a time, Enter.
• Enter the following command: get ?

The ? character is not displayed on the screen.

This command shows all of the options that the CLI will accept after the # get command. Depending on the command, you may need to enter additional words to completely specify a configuration option.

• Enter the following command: execute ?
• This command lists all options that the CLI will accept after the execute command.
• Type exe, and then press the Tab key. Notice that the CLI completes the current word.
• Press the space bar and then press the Tab key three times.
• Each time you press the Tab key, the CLI replaces the second word with the next possible option for the execute command, in alphabetical order.

You can abbreviate most commands. In this book, many of the commands that you see will be in abbreviated form. For example, instead of typing execute, you can type exe. Use this technique to reduce the number of keystrokes that are required to enter a command. Often, experts can configure FortiGate faster using the CLI than the GUI.

Configuration

Table 1.1: Check configuration CLI

Action	Command
Check configuration	# show # show | grep xxxx # show full-configuration # show full-configuration | grep XXXX # show full-configuration | grep -f XXXX ← display with tree view

Network

Table 1.2: Routing and firewall policy CLI

Action	Command
Check Routing	# get router info routing-table detail # show router static# config router static (static) # show (static) # end
Check Firewall Policy	# show firewall policy # show firewall policy XXXX# config firewall policy (policy) # show

Hardware

Table 1.3: Hardware CLI

Action	Command
Check Hardware Information	# get hardware status
Check Version, BIOS, Firmware, etc.	# get system status
Check version	# get system status
Display CPU / memory / line usage	# get system performance status
Display of NTP server	# get system ntp
Display the current time and the time of synchronization with the NTP server	# execute time
Check interfaces status, Up or Down	# get system interface physical
Check interfaces	# config system interface (interface) # show (interface) # end
Display of ARP table	# get system arp

High Availability (HA)

Table 1.4: High Availability CLI

Action	Command
Check HA Status	# get system ha status
Check HA Configuration	# get system ha # show system ha

Network Time Protocol (NTP)

Table 1.5: NTP CLI

Action	Command
Check NTP	# execute time # get system ntp # diagnose sys ntp status

On a fresh line, enter the following command to view the port3 interface configuration:

show system interface port3

[caption id="attachment_26" align="aligncenter" width="461"] Figure 1.3: Configuration of port3[/caption]

Enter the following command:

show full-configuration system interface port3

[caption id="attachment_27" align="aligncenter" width="745"] Figure 1.4: Show full-configuration of port3[/caption]

Enter the following command:

show system interface

For setting an IP address on the port1:

config system interface edit port1 set mode static set ip 192.168.10.1 255.255.255.0 set allowaccess ping ssh http https end

Now you should be able to reach the firewall from port1. In browser, type http://192.168.10.1 and enter username and password.

In the licensed devices, you should type https://192.168.10.1 and then enter username and password.

Configuring Administrator Accounts

FortiGate offers many options for configuring administrator privileges. For example, you can specify the IP addresses that administrators are allowed to connect from. In this exercise, you will work with administrator profiles and administrator user accounts. An administrator profile is a role that is assigned to an administrator user that defines what the user is permitted to do on the FortiGate GUI and CLI.

Configure a User Administrator Profile

1. Click System > Admin Profiles.
2. Click Create New.
3. In the Name field, type Security_Admin_Profile.
4. In the permissions table, set Security Profile to Read-Write, but set all other permissions to Read.
5. Click OK to save the changes.

[caption id="attachment_30" align="aligncenter" width="400"] Figure 1.5: Create a custom profile[/caption]

Create an Administrator Account

Now, you will create a new administrator account. You will assign the account to the administrator profile you created previously. The administrator will have read-only access to most of the configuration settings. To create an administrator account Continuing on the Local-FortiGate GUI, click System > Administrators. Click Create New and then click Administrator to add a new administrator account and assign the previous profile you have created to the administrator. [caption id="attachment_30" align="aligncenter" width="1000"] Figure 1.6: Create a local user[/caption]

Test the New Administrator Account

In this procedure, you will confirm that the new administrator account has read-write access to only the security profiles configuration. To test the new administrator account Continuing on the Local-FortiGate GUI, click username (in my case, it's admin2) and then Logout to log out of the admin account's GUI session. [caption id="attachment_30" align="aligncenter" width="316"] Figure 1.7: Logout option[/caption]

Explore the permissions that you have in the GUI. You should see that this account can configure only security profiles. Log out of the GUI once done.

Restrict Administrator Access

Now, you will restrict access for FortiGate administrators. Only administrators connecting from a trusted subnet will be allowed access. This is useful if you need to restrict the access points from which administrators connect to FortiGate. To restrict administrator access.

1. Click System > Administrators. Edit the admin account.
2. Enable Restrict login to trusted hosts, and set Trusted Host 1 to the address 192.168.10.100/32.
3. Click OK to save the changes.

[caption id="attachment_34" align="aligncenter" width="999"] Figure 1.8: Create a trusted host for the user[/caption]

To test the restricted access

1. Continuing on Local-Windows, log out of the Local-FortiGate GUI session as the admin user.
2. Try to log in to the admin2 account again with password < Your password>. Because you are trying to connect from the 192.168.10.101 address, you shouldn't be able to connect.
3. Log in as admin with password <Your password>. Enter the following CLI commands to add 192.168.10.101/32 as the second trusted IP subnet (Trusted Host 2) to the admin account:
   config system admin edit admin set trusthost2 192.168.10.101/32 end
4. Try to log in to the Local-FortiGate GUI at <IP address> with the username admin and password <Your password>. You should be able to log in. (Hint: add the IP address 192.168.10.101 to WebTerm and try to reach to the firewall.)

[caption id="attachment_34" align="aligncenter" width="618"] Figure 1.9: System settings[/caption]

Configuration Backups

The configuration files produced by backups allow you to restore to an earlier FortiGate configuration.

Backup & Restore

Always back up the configuration file before making changes to FortiGate (even if the change seems minor or unimportant). There is no undo. You should carefully consider the pros and cons of an encrypted backup before you begin encrypting backups. While your configuration, including things like private keys, remains private, an encrypted file hampers troubleshooting because Fortinet support cannot read the file. Consider saving backups in plain-text and storing them in a secure place instead. Now, you will create an encrypted file with the backup of the FortiGate's current configuration.

To save an encrypted configuration backup

Continuing on the Local-FortiGate GUI, in the upper-right corner, click admin, and then click Configuration > Backup. On the Backup System Configuration page, enable Encryption. In the Password field, enter fortigate and repeat in the Confirm password field. [caption id="attachment_34" align="aligncenter" width="453"] Figure 1.10: Backup System Configuration[/caption] Click OK. Select Save File and click OK.

To restore an encrypted configuration backup

Continuing on the Local-FortiGate GUI, in the upper-right corner, click admin, and then click Configuration > Restore. On the Restore System Configuration page, click Upload. Browse to your Downloads folder and select the configuration file that you created in the previous procedure. In the Password field, type fortigate, and then click OK.

DHCP (Dynamic Host Configuration Protocol)

You can configure one or more DHCP servers on any FortiGate interface. A DHCP server dynamically assigns IP addresses to hosts on the network connected to the interface. The host computers must be configured to obtain their IP addresses using DHCP.

Configure DHCP on the FortiGate

To add a DHCP server on the GUI:

1. Go to Network > Interfaces.
2. Edit an interface.
3. Enable the DHCP Server option and configure the settings.

[caption id="attachment_34" align="aligncenter" width="710"] Figure 1.11: Enable DHCP Server[/caption] To do it through command line, use following commands:

FGVM01TM19008000 # config system dhcp server

FGVM01TM19008000 (server) # edit 1

FGVM01TM19008000 (1) # set dns-service default

FGVM01TM19008000 (1) # set netmask 255.255.255.0

FGVM01TM19008000 (1) # config ip-range

FGVM01TM19008000 (ip-range) # edit 1

FGVM01TM19008000 (1) # set start-ip 192.168.1.1

FGVM01TM19008000 (1) # set end-ip 192.168.1.1

FGVM01TM19008000 (1) # next

FGVM01TM19008000 (ip-range) # edit 2

new entry '2' added

FGVM01TM19008000 (2) # set start-ip 192.168.1.20

FGVM01TM19008000 (2) # set end-ip 192.168.1.30

FGVM01TM19008000 (2) # next

FGVM01TM19008000 (ip-range) # end

FGVM01TM19008000 (1) # next

FGVM01TM19008000 (server) # end

If you are looking for a specific configuration or CLI, the FortiGate document library has full resources.

Resources

• Fortinet Fortigate CLI Commands
• FortiGate document library

]]> 35 23 1 0 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/ Thu, 10 Mar 2022 04:08:49 +0000 https://opentextbc.ca/fortigatefirewall/chapter/security-policy/

Learning Objectives

• Create a Security Policy in FortiGate
• Reorder Firewall Policies and Firewall Policy Actions

Scenario: We are going to allow traffic from the local network to the Internet. We will set Security Policy that allows the traffic from Port 2 to Port 3. Then, WebTerm1 will be able to reach the Internet.

Security Policy

[caption id="attachment_53" align="aligncenter" width="931"] Figure 2.1: Main scenario[/caption]  

Table 2.1: Devices configuration

Device	Configuration
FortiGate	Port 2: DHCP Server Port 3: DHCP Client
WebTerm	DHCP Client

Configuration of port1 of the firewall in CLI is as follows: [caption id="attachment_53" align="aligncenter" width="578"] Figure 2.2: Configuration of port1[/caption]

1. Open the browser in WebTerm2 and type https://192.168.0.1. You should be able to access the firewall. [caption id="attachment_40" align="aligncenter" width="400"] Figure 2.3: Log in to the FortiGate[/caption]
2. Go to Network > Interfaces > Port2, set the interface IP address as 192.168.1.1/24 and configure DHCP server on interface port2 (Range of IP addresses should be: 192.168.1.20 to 192.168.1.30, DNS: 4.2.2.4) and Enable Device Detection under Port2. [caption id="attachment_41" align="aligncenter" width="1150"] Figure 2.4: Enable DHCP Server[/caption]
3. Set a port3 as a DHCP client and enable Device Detection under Port3. [caption id="attachment_42" align="aligncenter" width="914"] Figure 2.5: Enable DHCP Client[/caption]
4. Set a Static route in the firewall to reach the NAT object. Go to Network > Static Route > Create a new. [caption id="attachment_43" align="aligncenter" width="400"] Figure 2.6: Configure a static route[/caption]
5. Go to Policy & Objects > Firewall Policy section, click Create New to add a new firewall policy, and configure the following settings:
   • Name: LocalToInternet
   • From inside to outside (port2 to port3)
   • Source: Create an address for local network (Subnet: 192.168.1.0/24)
   • Destination: all
   • Schedule: Always
   • Service: Only HTTP, HTTPS, DNS, Ping
   • Action: Accept
   [caption id="attachment_45" align="aligncenter" width="400"] Figure 2.7: Set local subnet[/caption] [caption id="attachment_45" align="aligncenter" width="500"] Figure 2.8: Set firewall policy[/caption]
6. Go to WebTerm1, Set interface as DHCP and then open the browser, you should be able to access the internet. [caption id="attachment_47" align="aligncenter" width="1053"] Figure 2.9: Enable DHCP Client on WebTerm1[/caption] [caption id="attachment_47" align="aligncenter" width="500"] Figure 2.10: Verify your configuration by testing Google.com[/caption]

Verify Your Configuration

• Go to Dashboard > FortiView Sessions. You should be able to see the traffic.

[caption id="attachment_53" align="aligncenter" width="1270"] Figure 2.11: FortiView Sessions[/caption]

•  Go to Firewall Policy and on the right side of the screen, you should be able to see Hit count.

[caption id="attachment_53" align="aligncenter" width="1261"] Figure 2.12: Hit count in the Firewall Policy[/caption]

• Go to Dashboard > Users & Devices > Device Inventory and verify the IP and Mac address of the device.

[caption id="attachment_53" align="aligncenter" width="1268"] Figure 2.13: Device Inventory[/caption]

Reordering Firewall Policies and Firewall Policy Actions

FortiGate will look for a matching policy, beginning at the top. Usually, you should put more specific policies at the top; otherwise, more general policies will match the traffic first, and your more granular policies will never be applied. You will create a new firewall policy with more specific settings such as source, destination, service, and action set to DENY. Then, you will move this firewall policy above the existing firewall policies and observe the behaviour of firewall policy reordering.

Create a firewall policy

You will create a new firewall policy to match a specific source, destination, service, and action set to DENY.

Table 2.2: Firewall policy configuration

Field	Value
Name	Block_Ping
Incoming Interface	Port2
Outgoing Interface	Port3
Source	LOCAL_SUBNET
Destination	All
Schedule	Always
Service	PING
Action	DENY
Log Violation Traffic	<enable>
Enable this policy	<enable>

[caption id="attachment_53" align="aligncenter" width="500"] Figure 2.14: Set firewall policy to block ping[/caption] Click OK to save the changes. Add this policy on top of the previous policy. [caption id="attachment_53" align="aligncenter" width="984"] Figure 2.15: Priority of Block_Ping should be higher than LocalToInternet[/caption] Go to Webterm1 and ping 4.2.2.4. You shouldn't be able to ping! [caption id="attachment_53" align="aligncenter" width="1249"] Figure 2.16: Verify ping in the WebTerm1[/caption]]]> 54 37 2 0 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/ Fri, 11 Mar 2022 09:22:20 +0000 https://opentextbc.ca/fortigatefirewall/chapter/source-nat/

Learning Objectives

• Configure a NAT policy in FortiGate
• Identify source NAT

Scenario: We are going to enable Source NAT (SNAT) to reach the Internet from Kali. That means that all traffic from the local network to the Internet should be allowed.

  [caption id="attachment_76" align="aligncenter" width="1125"] Figure 3.1: Main scenario[/caption]

Source NAT

Table 3.1: Devices configuration

Device	IP address	Access
Kali	DHCP Client	-
WordPress/Kali	DHCP Client	-
Ethernet Switch	-	-
FortiGate	Port 2 - (192.168.1.1/24) - DHCP Server (192.168.1.10 to 192.168.1.20) Port 3 - DHCP Client Port 4 - 10.10.10.1/24	ICMP-HTTP-HTTPS
WebTerm	10.10.10.2/24	-

Basic Configuration

1. Port configuration in the firewall as follows: [caption id="attachment_77" align="aligncenter" width="930"] Figure 3.2: Ports configuration in the firewall[/caption]
2. Set a DHCP server on interface port2 (Range of IP address should be: 192.168.1.10 to 192.168.1.20, DNS: 4.2.2.4). [caption id="attachment_78" align="aligncenter" width="400"] Figure 3.3: DHCP Server configuration[/caption]
3. Set port3 as a DHCP client and connect to the NAT. [caption id="attachment_79" align="aligncenter" width="450"] Figure 3.4: DHCP client configuration[/caption]
4. Set a static route in the firewall to reach to NAT object. [caption id="attachment_80" align="aligncenter" width="648"] Figure 3.5: Set a static route[/caption]
5. Go to Policy & Objects > Firewall Policy section, click Create New to add a new firewall policy, and configure the following settings:
   • Name: LocalToInternet
   • From inside to outside (port2 to port3)
   • Source: Create an address for the local network (Subnet: 192.168.1.0/24)
   • Destination: all
   • Schedule: Always
   • Service: Only HTTP, HTTPS, and DNS
   • Action: Accept
   [caption id="attachment_81" align="aligncenter" width="648"] Figure 3.6: Configure Firewall Policy and enable Source NAT[/caption]
6. Open the browser in Kali, you should be able to access the internet. [caption id="attachment_82" align="aligncenter" width="500"] Figure 3.7: Verify your configuration[/caption]

]]> 83 75 3 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/ Fri, 11 Mar 2022 09:22:51 +0000 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn/

Learning Objectives

• Configure an IPsec VPN
• Configure a site-to-site VPN

Scenario: We are going to have IPsec VPN from Windows to FortiGate Firewall. First, we are going to install FortiClient on Windows and then we will configure the firewall for FortiClient. The goal of this scenario is to have connectivity from Windows to PC1. You should be able to ping PC1 after you have established your VPN connection.

  [caption id="attachment_121" align="aligncenter" width="1203"] Figure 4.1: Main scenario[/caption]

Configuration

Table 4.1: Devices configuration

Device	IP address	Access
WebTerm2	192.168.0.2/24	-
VPC	DHCP Client	-
Ethernet Switch1-2	-	-
FortiGate	Port 1: DHCP Client Port 2: 192.168.0.1/24 DHCP Server (192.168.0.10 to 192.168.0.20)	ICMP HTTP HTTPS
Windows	DHCP Client	-

Before you begin the configuration, please remember with VPC’s and Web terms this is how we edit their IP settings for static and or DHCP Addressing: Before dragging in your web terms or other devices remember to always choose GNS3 VM: [caption id="attachment_121" align="aligncenter" width="450"] Figure 4.2: Dragging a NAT under GNS3 VM[/caption] [caption id="attachment_121" align="aligncenter" width="450"] Figure 4.3: Dragging a switch under GNS3 VM[/caption]

1. Set a DHCP server on interface port2 (Range of IP address should be: 192.168.0.20 to 192.168.0.30, DNS: 4.2.2.4). [caption id="attachment_101" align="alignnone" width="1558"] Figure 4.4: Set DHCP IP address[/caption] [caption id="attachment_101" align="aligncenter" width="450"] Figure 4.5: Enable DHCP client[/caption] [caption id="attachment_101" align="aligncenter" width="450"] Figure 4.6: Configure a static IP address[/caption]
2. Go to User & Authentication > User Group > Create New:
   • Name: VPN_GRP_A0ID
   • TYPE: Firewall
   [caption id="attachment_103" align="aligncenter" width="500"] Figure 4.7: Create a user group[/caption] [caption id="attachment_103" align="aligncenter" width="1267"] Figure 4.8: Create a group in the firewall[/caption]
3. Go to User & Authentication > User Definition > Create a User: [caption id="attachment_107" align="alignnone" width="1272"] Figure 4.9: Create a new user[/caption] [caption id="attachment_107" align="alignnone" width="1278"] Figure 4.10: Create a local user[/caption] [caption id="attachment_107" align="alignnone" width="1274"] Figure 4.11: Configure login credentials for the user[/caption] [caption id="attachment_107" align="alignnone" width="1271"] Figure 4.12: Contact info[/caption]
4. Assign User Group to your profile. [caption id="attachment_109" align="alignnone" width="1274"] Figure 4.13: Assign a user to the group[/caption] [caption id="attachment_109" align="alignnone" width="1269"] Figure 4.14: Verify configuration[/caption]
5. Go to VPN > IPsec Wizard.
   1. First:
      • Select Name: A0ID- VPN(A0ID is a student ID)
      • Template Type: Remote Access
      • Remote Type Device: FortiClient
      [caption id="attachment_110" align="alignnone" width="1270"] Figure 4.15: Create a VPN connection[/caption]
   2. Then:
      • Incoming Interface: Port1
      • Pre-shared Key: <Select a key like a password>
      • User Group: VPN_GRP_A0ID
      [caption id="attachment_111" align="alignnone" width="1272"] Figure 4.16: Configure authentication[/caption]
   3. Next:
      • Local Interface: Port 2
      • Local Address: Add your local range of IP address (192.168.0.0/24)
      • Client Range: 172.16.0.1 to 172.16.0.10
      • Subnet Mask: 255.255.255.0
      • Disable Split Tunneling
      [caption id="attachment_113" align="alignnone" width="1273"] Figure 4.17: Configure Policy & Routing[/caption] [caption id="attachment_113" align="alignnone" width="1279"] Figure 4.18: Review Settings[/caption]
6. On Windows machine, download FortiClient from Fortinet. Install the FortiClient and configure IPsec as set in the previous steps. Your remote Gateway IP should be the Port1 IP address. [caption id="attachment_114" align="aligncenter" width="1287"] Figure 4.19: Install FortiClient on Windows[/caption]
7. [caption id="attachment_115" align="aligncenter" width="450"] Figure 4.20: Configure VPN in FortiClient[/caption]
8. [caption id="attachment_116" align="aligncenter" width="450"] Figure 4.21: Accept FortiClient Free Licence[/caption]
9. [caption id="attachment_117" align="aligncenter" width="1279"] Figure 4.22: Port1 IP Address[/caption]
10. [caption id="attachment_118" align="aligncenter" width="1101"] Figure 4.23: Configure FortiClient Remote Gateway and Pre-shared key[/caption]
11. You should be able to ping from Windows to VPC. [caption id="attachment_119" align="aligncenter" width="1280"] Figure 4.24: Verify configuration[/caption]

Site-to-Site VPN (IPsec VPN)

Scenario: We are going to have IPsec VPN from WebTerm1 to WebTerm2. First, we are going to configure both firewalls through IPsec VPN Wizards and then we will verify connectivity from WebTerm1 to WebTerm2.

[caption id="attachment_121" align="aligncenter" width="1075"] Figure 4.25: Main scenario[/caption] To validate Firewalls licences, we are going to connect them to the Internet. [caption id="attachment_121" align="aligncenter" width="1054"] Figure 4.26: Validate firewall licences[/caption]

Table 4.2: Devices configuration

Device	IP address	Access
Fortigate1	10.10.10.1/24	ICMP-HTTP-HTTPS
Fortigate2	10.10.10.2/24	ICMP-HTTP-HTTPS
WebTerm1	192.168.20.2/24	-
WebTerm2	192.168.10.2/24	-

1. On the FG1, go to VPN > IPsec Wizard and select Site to Site – FortiGate. [caption id="attachment_122" align="aligncenter" width="1133"] Figure 4.27: VPN Setup[/caption]
2. Select Site2Site/ FortiGate /No Nat. Enter Remote IP: 10.10.10.2/24, outgoing interface: port3. [caption id="attachment_123" align="aligncenter" width="1133"] Figure 4.28: Authentication[/caption]
3. Local Interface: port2, IP: 192.168.20.0/24, Remote subnet: 192.168.10.0/24. Through the wizard, FortiGate creates two policies and two static routes in the firewall. [caption id="attachment_124" align="aligncenter" width="1152"] Figure 4.29: Policy & Routing[/caption]
4. On the FG2, go to VPN > IPsec Wizard and select Site-to-Site – FortiGate. [caption id="attachment_125" align="alignnone" width="1104"] Figure 4.30: Set up FG2[/caption]
5. Do the same configuration for FG2 (remote IP is 10.10.10.1/24 and local IP is 192.168.10.0/24). [caption id="attachment_126" align="aligncenter" width="1121"] Figure 4.31: Authentication in FG2[/caption]
6. [caption id="attachment_127" align="aligncenter" width="1079"] Figure 4.32: Policy & Routing in FG2[/caption]
7. [caption id="attachment_130" align="aligncenter" width="1219"] Figure 4.33: Configure IPsec Tunnels[/caption] Then, go to your IPsec Tunnels and double click on Inactive. On the next windows, right click on the tunnel > Bring UP > All Phase 2 selectors. Then, your tunnel should be up! [caption id="attachment_130" align="aligncenter" width="1186"] Figure 4.34: Bring up IPsec Tunnel[/caption] [caption id="attachment_130" align="aligncenter" width="1266"] Figure 4.35: Verify the status of the tunnel[/caption]
8. Go to Logs & Reports > Event > VPN Event and verify your configuration. [caption id="attachment_132" align="alignnone" width="1233"] Figure 4.36: Verify configuration[/caption] You should be able to ping from WebTerm1 to WebTerm2. [caption id="attachment_132" align="aligncenter" width="800"] Figure 4.37: Verify configuration[/caption]

]]> 133 95 4 0 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/ Fri, 11 Mar 2022 09:23:35 +0000 https://opentextbc.ca/fortigatefirewall/chapter/captive-portal/

Learning Objectives

• Configure a Captive Portal

Scenario: We are planning to enable Captive Portal on port2. Then, when users want to connect to the Internet, first they should enter their username and password and after that they are allowed to surf the Internet.

[caption id="attachment_168" align="aligncenter" width="921"] Figure 5.1: Main scenario[/caption]

Table 5.1: Devices configuration

Device	IP address	Access
WebTerm1	192.168.1.2/24	-
FortiGate	Port 1: DHCP Client Port 2: 192.168.1.1/24 Port 3: 192.168.0.1/24	ICMP HTTP HTTPS
WebTerm (FMC)	192.168.0.2/24	-

1. Prerequisites:
   1. Set the IP addresses in the firewall as above table. The CLI is available as following:
      FGVM01TM19008000 # config system interface FGVM01TM19008000 (interface) # edit port1 FGVM01TM19008000 (port1) # set mode dhcp FGVM01TM19008000 (port1) # end FGVM01TM19008000 # config system interface FGVM01TM19008000 (interface) # edit port2 FGVM01TM19008000 (port2) # set ip 192.168.1.1/24 FGVM01TM19008000 (port2) # end FGVM01TM19008000 # config system interface FGVM01TM19008000 (interface) # edit port3 FGVM01TM19008000 (port3) # set ip 192.168.0.1/24 FGVM01TM19008000 (port3) # set allowaccess http https FGVM01TM19008000 (port3) # end
   2. Set a static route in the firewall. You should always set the default route in the firewall (0.0.0.0 0.0.0.0 Internet IP). [caption id="attachment_169" align="aligncenter" width="863"] Figure 5.2: Configure a static route[/caption]
   3. Set a Firewall Policy from port2 to port1. [caption id="attachment_170" align="aligncenter" width="863"] Figure 5.3: Set a Firewall Policy[/caption]
   4. Set the static IP address in WebTerm1 (192.168.1.2/24). [caption id="attachment_171" align="aligncenter" width="765"] Figure 5.4: Configure a static IP address in WebTerm1[/caption]
2. Create a user and group. Go to User & Authentication > User Groups. Create a group name: CaptivePortal. [caption id="attachment_175" align="aligncenter" width="400"] Figure 5.5: Create a group[/caption] Go to User & Authentication > User Definition > Create a New User and assign your user in step 4 to A0ID-CaptivePortal Group. [caption id="attachment_175" align="aligncenter" width="500"] Figure 5.6: Create a user[/caption] [caption id="attachment_175" align="aligncenter" width="400"] Figure 5.7: Create login credentials[/caption] [caption id="attachment_175" align="aligncenter" width="885"] Figure 5.8: Add user to the group[/caption]
3. Go to Network > Interfaces and edit port 2. In the Admission Control section, set:
   • Security mode: captive portal
   • Authentication Portal: Local
   • User Access: Restricted to Group and assign the group you have created in the previous step.
   [caption id="attachment_176" align="alignnone" width="1015"] Figure 5.9: Configure Captive Portal on port2[/caption]
4. Now, open the browser in WebTerm1 and type http://talebi.ca. [caption id="attachment_177" align="aligncenter" width="400"] Figure 5.10: Verify Captive Portal[/caption]

]]> 178 167 2 0 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/ Fri, 11 Mar 2022 09:24:02 +0000 https://opentextbc.ca/fortigatefirewall/chapter/high-availability/

Learning Objectives

• Configure HA (Active-Passive) between two firewalls

Scenario: In this lab, we are going to have two firewalls. One of them is Primary or Active and the other one is Secondary or Passive. We are going to have High Availability between these two firewalls and if we shut down one of them, the other one will be Primary.

[caption id="attachment_194" align="aligncenter" width="1111"] Figure 6.1: Main scenario[/caption]

Table 6.1: Devices configuration

Device	IP address	Access
WebTerm1	192.168.1.2/24	-
WebTerm2	192.168.10.2/24	-
EthernetSwitch1	-	-
EthernetSwitch2	-	-
FG-Primary	Port 1: 192.168.1.1/24 Port 5: 192.168.10.1/24	ICMP-HTTP-HTTPS
FG-Secondary	Port 1: 192.168.1.1/24 Port 5: 192.168.10.1/24	ICMP-HTTP-HTTPS

1. CLI Configuration for Primary and Secondary:
   FG-Primary FortiGate-VM64-KVM # config system global FortiGate-VM64-KVM (global) # set hostname FG-Primary FortiGate-VM64-KVM (global) # end

   FG-Primary # config system interface

   FG-Primary (interface) # edit port1

   FG-Primary (port1) # set mode static

   FG-Primary (port1) # set ip 192.168.1.1/24

   FG-Primary (port1) # set allowaccess http https ping

   FG-Primary (port1) # end

   FG-Primary # config system interface

   FG-Primary (interface) # edit port5

   FG-Primary (port5) # set ip 192.168.10.1/24

   FG-Primary (port5) # set allowaccess http https ping

   FG-Primary (port5) # end
   FG-Secondary FortiGate-VM64-KVM # config system global FortiGate-VM64-KVM (global) # set hostname FG-Secondary FortiGate-VM64-KVM (global) # end

   FG-Secondary # config system interface

   FG-Secondary(interface) # edit port1

   FG-Secondary (port1) # set mode static

   FG-Secondary (port1) # set ip 192.168.1.1/24

   FG-Secondary (port1) # set allowaccess http https ping

   FG-Secondary (port1) # end

   FG-Secondary # config system interface

   FG-Secondary (interface) # edit port5

   FG-Secondary (port5) # set ip 192.168.10.1/24

   FG-Secondary (port5) # set allowaccess http https ping

   FG-Secondary (port5) # end
2. Go to System > HA in the FG-Primary:
   • Select the Mode: Active-Passive
   • Device Priority: 128 (The higher priority is primary)
   • Group Name: HRT (The Group name between Primary and Secondary should be the same)
   • Password: Set a password (The Password between Primary and Secondary should be the same)
   • Monitor Interface: Port 3
   • Heartbeat Interface: Port 4
   [caption id="attachment_196" align="aligncenter" width="729"] Figure 6.2: HA primary configuration[/caption] Do the same configuration in the FG-Secondary but set the Device priority to 50. [caption id="attachment_196" align="aligncenter" width="729"] Figure 6.3: HA secondary configuration[/caption]
3. After setting secondary device, no longer be able to access secondary device. Go to FG-Primary > System > HA and evaluate your result. [caption id="attachment_198" align="aligncenter" width="1010"] Figure 6.4: HA status[/caption] Two devices will be synchronized after a while. [caption id="attachment_198" align="aligncenter" width="942"] Figure 6.5: HA Synchronized status[/caption]
4. Now, connect other interfaces like Figure 6.6. [caption id="attachment_202" align="aligncenter" width="1149"] Figure 6.6: Main scenario[/caption] Try to Stop FG-Primary and go to WebTerm1. Can you reach the firewall? [caption id="attachment_202" align="aligncenter" width="1100"] Figure 6.7: Stopping FG-Primary[/caption] [caption id="attachment_202" align="aligncenter" width="400"] Figure 6.8: Verify connectivity to the firewall[/caption] [caption id="attachment_202" align="aligncenter" width="500"] Figure 6.9: Verify firewall role after stopping FG-Primary[/caption]
5. Go to Log & Report > Events > HA Events and download the log. Verify your result. [caption id="attachment_203" align="aligncenter" width="550"] Figure 6.10: HA Events[/caption]

]]> 204 193 3 0 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/ Fri, 11 Mar 2022 09:24:24 +0000 https://opentextbc.ca/fortigatefirewall/chapter/security-profile/

Learning Objectives

• Configure a Security Profile

Scenario: In this lab, we are going to become familiar with different types of Security Profile such as AntiVirus, File Filter, IPS and DNS Filter. WebTerm2 acts as a local computer and we set a Security Profile on traffic passing from Port2 to Port1.

[caption id="attachment_207" align="aligncenter" width="1207"] Figure 7.9: Main scenario[/caption]

1. We will continue the previous scenario and set up a DHCP server on port2. [caption id="attachment_217" align="aligncenter" width="500"] Figure 7.10: Enable DHCP Server on port2[/caption]
2. Go to security profile > Anti-Virus, create a new profile:
   • Name: myantivirus
   • Scan Mode: full
   • Inspection Protocol: HTTP, SMTP, IMAP, POP3, FTP
   [caption id="attachment_218" align="aligncenter" width="1051"] Figure 7.11: AntiVirus Profile[/caption]
3. Create a Firewall policy:
   • Name: Port2-to-Port1
   • Incoming Interface: Port2
   • Outgoing interface: port1
   • Source, Destination, Service: all
   • Security Profile: myantivirus
   [caption id="attachment_219" align="aligncenter" width="849"] Figure 7.12: Create a Firewall Policy and assign AntiVirus Profile[/caption]
4. Go to Security Profile > File Filter, Create a new profile:
   • Name: MyFileFilter
   • Create a New Filter rule
     • Name: Block-PDF-ZIP
     • Protocols: HTTP-FTP
     • File Type: PDF-ZIP
     • Action: Block
     • Direction: any
   [caption id="attachment_222" align="aligncenter" width="1027"] Figure 7.13: File Filter profile[/caption] [caption id="attachment_222" align="aligncenter" width="966"] Figure 7.14: Blocking Pdf-Zip[/caption]
   • Set the firewall Policy to Proxy mode.
   • Go to Policy & Objects > Firewall Policy and assign MyFileFilter to the “Port2-to-Port1” policy.
   [caption id="attachment_222" align="aligncenter" width="851"] Figure 7.15: Assign File Filter profile to Firewall Policy[/caption]
5. Go to http://talebi.ca/wp-content/uploads/2021/11/prtgdesktop.pdf and verify your result. [caption id="attachment_223" align="aligncenter" width="400"] Figure 7.16: Verify configuration[/caption]
6. Go to Security Profile > Intrusion Prevention, create a new profile:
   • Name: MyIPS
   • Add Signature: AAEH Botnet, Acuntix Web Vulnerability Scanner, Adobe Flash Player CSRF [caption id="attachment_224" align="aligncenter" width="910"] Figure 7.17: Intrusion Prevention Profile[/caption]
7. Go to Policy & Objects > Firewall Policy and assign MyIPS to the “Port2-to-Port1” policy. [caption id="attachment_225" align="aligncenter" width="818"] Figure 7.18: Assign IPS profile to Firewall Policy[/caption]
8. Go to Security Profile > DNS Filter, create a new profile:
   • Name: MyDNS
   • FortiGate Category Based Filter:
     • Bandwidth Consuming: Peer-to-Peer File Sharing: Block, Internet Radio and TV: Block
   [caption id="attachment_228" align="aligncenter" width="752"] Figure 7.19: Assign DNS Filter Profile to Firewall Policy[/caption] You can verify your configuration by visiting http://talebi.ca. [caption id="attachment_228" align="aligncenter" width="1227"] Figure 7.20: Verify configuration[/caption] Verify your Log & Report > DNS Query. [caption id="attachment_228" align="alignnone" width="1258"] Figure 7.21: Verify[/caption]

]]> 229 206 2 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-04-18-01-22-13-image/ Tue, 29 Aug 2023 20:28:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-04-18-01-22-13-image.png 537 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-04-18-01-23-39-image/ Tue, 29 Aug 2023 20:28:57 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-04-18-01-23-39-image.png 538 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-04-23-13-15-04-image/ Tue, 29 Aug 2023 20:28:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-04-23-13-15-04-image.png 539 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-04-23-13-16-10-image/ Tue, 29 Aug 2023 20:28:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-04-23-13-16-10-image.png 540 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/2022-04-23-13-16-54-image/ Tue, 29 Aug 2023 20:28:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/2022-04-23-13-16-54-image.png 541 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/pantemplate18/ Tue, 29 Aug 2023 20:28:58 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/PANTemplate18.jpg 542 543 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/ Fri, 04 Mar 2022 05:29:34 +0000 https://opentextbc.ca/fortigatefirewall/back-matter/appendix/ Adding a FortiGate Firewall to GNS3

1. Start by adding a new template. [caption id="attachment_493" align="aligncenter" width="500"] Figure A.1: Create a New template[/caption]
2. We want to install it from the GNS3 Server, so keep the option default and then press next. [caption id="attachment_494" align="aligncenter" width="500"] Figure A.2: Select Install an appliance from the GNS3 server[/caption]
3. On the next window, search for "FortiGate", and select the option under "Firewalls", then click "Install." [caption id="attachment_495" align="aligncenter" width="500"] Figure A.3: Search for "FortiGate"[/caption]
4. Press "Next" on this screen: [caption id="attachment_496" align="aligncenter" width="500"] Figure A.4: Install the appliance on the GNS3 VM[/caption]
5. Press "Next" on this screen: [caption id="attachment_497" align="aligncenter" width="500"] Figure A.5: Qemu settings[/caption]
6. Tick the "Allow custom files" box. [caption id="attachment_498" align="aligncenter" width="902"] Figure A.6: Tick Allow custom files[/caption]
7. Click "Yes" on this screen: [caption id="attachment_499" align="aligncenter" width="902"] Figure A.7: Click on Yes[/caption]
8. Highlight a random version. [caption id="attachment_500" align="aligncenter" width="902"] Figure A.8: Highlight a random version[/caption]
9. Click "Create a new version." [caption id="attachment_501" align="aligncenter" width="902"] Figure A.9: Create a new version[/caption]
10. Create a new custom version and select optional name for it. [caption id="attachment_502" align="aligncenter" width="902"] Figure A.10: Create a custom version[/caption]
11. Press OK on this one, too: [caption id="attachment_503" align="aligncenter" width="902"] Figure A.11: Click on OK[/caption]
12. Press OK again. [caption id="attachment_504" align="aligncenter" width="902"] Figure A.12: Click on OK[/caption]
13. Click on any empty30G file, and click Download. Save that file to your computer. [caption id="attachment_505" align="aligncenter" width="902"] Figure A.13: Download empty30G.qcow2[/caption]
14. Scroll down to your custom version and click the arrow on the left: [caption id="attachment_506" align="aligncenter" width="902"] Figure A.14: Select Custom version[/caption]
15. Click the FGT filename under your custom version and click "Import." [caption id="attachment_507" align="aligncenter" width="902"] Figure A.15: Import FortiGate Image[/caption]
16. Navigate to your downloaded FortiGate Firewall image and click "Open." [caption id="attachment_508" align="aligncenter" width="946"] Figure A.16: Select FortiGate Image[/caption]
17. Still under your custom version, click "Import" on the empty30G file. [caption id="attachment_509" align="aligncenter" width="902"] Figure A.17: Select empty30G.qcow2[/caption]
18. Navigate to your downloaded empty30G file and click "Open." [caption id="attachment_510" align="aligncenter" width="946"] Figure A.18: Import empty30G.qcow2 file[/caption]
19. After that, highlight the custom version again and click "Next." [caption id="attachment_511" align="aligncenter" width="902"] Figure A.19: Select custom version and then click on Next[/caption]
20. Click "Yes" on this window: [caption id="attachment_512" align="aligncenter" width="902"] Figure A.20: Click on "Yes"[/caption]
21. Then click "Finish." [caption id="attachment_513" align="aligncenter" width="500"] Figure A.21: Click on "Finish"[/caption]

Configuring Your Palo Alto Firewall Template and Adding the Device

1. Let's start by modifying the GNS3 template of the Palo Alto firewall by right clicking the existing template, and clicking on "Configure template." [caption id="attachment_514" align="aligncenter" width="300"] Figure A.22: Configure Palo Alto template[/caption]
2. Make sure the max amount of RAM is set to at least 4096MB, and the amount of vCPUs are at least 2. [caption id="attachment_515" align="aligncenter" width="450"] Figure A.23: Configure template[/caption]
3. Now close the window, and drag in the Palo Alto device from the left hand pane. [caption id="attachment_516" align="aligncenter" width="450"] Figure A.24: Drag a Palo Alto in the workspace[/caption]
4. Once you've dragged in the Palo Alto device, right click it, then click "Start." [caption id="attachment_517" align="aligncenter" width="300"] Figure A.25: Start Palo Alto[/caption] Keep in mind that this device takes a while to start.

Webterm Installation

1. 1. Let's begin by clicking "New template" on the bottom left hand of GNS3. [caption id="attachment_518" align="aligncenter" width="400"] Figure A.26: Create a new template[/caption]
   2. We want to install this into the GNS3 VM. Click on the option to "Install an appliance from the GNS3 Server," then click next. [caption id="attachment_519" align="aligncenter" width="902"] Figure A.27: Install an appliance from the GNS3 server[/caption]
   3. On the next window, search for "webterm," select the option under "guests," then click "Install." [caption id="attachment_520" align="aligncenter" width="902"] Figure A.28: Search for "webterm"[/caption]
   4. On the next screen, ensure that "Install the appliance on the GNS3 VM" is already selected, then click "Next." [caption id="attachment_521" align="aligncenter" width="902"] Figure A.29: Select "Install the appliance on the GNS3 VM"[/caption]
   5. On the next screen, click "Finish." [caption id="attachment_522" align="alignnone" width="1004"] Figure A.30: Click on Finish[/caption] After that, it should appear under all devices in GNS3

Configuring Your Webterm Device with a Static IP

1. Drag in the webterm device from the left pane. Then once it finishes downloading the docker file, right click it and select "Edit config." [caption id="attachment_523" align="aligncenter" width="300"] Figure A.31: Edit config[/caption]
2. A window will pop up containing the device's network configuration. We want to modify this file to match the specified IP address. The final modification should look like a little like this: [caption id="attachment_524" align="aligncenter" width="400"] Figure A.32: Static IP address configuration[/caption] After these modifications, click on the save button on the bottom right of the window.

Configuring a Webterm DHCP Client

We just need to uncomment these 2 lines to enable DHCP. Click on save and we are done. [caption id="attachment_542" align="aligncenter" width="450"] Figure A.33: DHCP IP address configuration[/caption]

Connecting Devices in GNS3

Please see the example below:[footnote]If using an offline version of the book, navigate to https://opentextbc.ca/fortigatefirewall/back-matter/appendix/ in order to see this animated example.[/footnote] [caption id="attachment_542" align="aligncenter" width="500"] Figure A.34: Connecting devices[/caption]

Using NAT in GNS3

The NAT device in GNS3 will allow devices in our virtual topology to communicate with the internet. This device is under the all devices section of GNS3. [caption id="attachment_542" align="aligncenter" width="400"] Figure A.35: NAT[/caption] Make sure you select the GNS3 VM as the option whenever you see this window (applies for all devices) [caption id="attachment_542" align="aligncenter" width="300"] Figure A.36: Choose GNS3 VM[/caption]

Using Kali in GNS3

Sometimes we need to use Kali to demonstrate an attack. Please keep in mind that Kali is used strictly for testing purposes, and should not be used as a daily driver, to hack your friends, or to pretend to look cool.

1. Let's begin by clicking "New template" on the bottom left hand of GNS3. [caption id="attachment_518" align="aligncenter" width="500"] Figure A.37: Create a new template[/caption]
2. We want to install this into the GNS3 VM. Click on the option to "Install an appliance from the GNS3 Server," then click "Next." [caption id="attachment_519" align="aligncenter" width="500"] Figure A.38: Select "Install an appliance from the GNS3 Server"[/caption]
3. On the next window, search for "kali", and select the non "CLI" option. [caption id="attachment_528" align="aligncenter" width="500"] Figure A.39: Select Kali Linux[/caption]
4. On the next screen, ensure that "Install the appliance on the GNS3 VM" is already selected, then click "Next." [caption id="attachment_521" align="aligncenter" width="500"] Figure A.40: Install the appliance on the GNS3 VM[/caption]
5. "Next" again: [caption id="attachment_529" align="aligncenter" width="500"] Figure A.41: Qemu binary[/caption]
6. Expand the "2019" option, and download both missing files. [caption id="attachment_530" align="aligncenter" width="902"] Figure A.42: Select the Kali-Linux version and then Download[/caption]
7. After that, import the downloaded file to the specified 2019 selection. [caption id="attachment_531" align="aligncenter" width="946"] Figure A.43: Select the Kali-Linux downloaded file[/caption]
8. It should take a second, but GNS3 will start to load up the ISO into the GNS3 VM. [caption id="attachment_532" align="aligncenter" width="902"] Figure A.44: Load the image[/caption]
9. After that, click the 2019 version again, then click "Next." [caption id="attachment_533" align="aligncenter" width="902"] Figure A.45: Ready to install Kali 2019.3[/caption]
10. Then click "Finish." [caption id="attachment_534" align="aligncenter" width="500"] Figure A.46: Click on "Finish"[/caption]

Using WordPress in GNS3

Sometimes we need a basic webserver to demonstrate website functionality. This can be accomplished using the WordPress appliance in GNS3. Start by clicking the new template button on the bottom of the page. [caption id="attachment_542" align="aligncenter" width="400"] Figure A.47: Create a new template[/caption] We want to install an appliance from the GNS3 server. [caption id="attachment_542" align="aligncenter" width="500"] Figure A.48: Install an appliance from the GNS3 server[/caption] Look up "WordPress," then click "Install." [caption id="attachment_542" align="aligncenter" width="500"] Figure A.49: Search for "WordPress"[/caption] Just press next for the following dialogue boxes, and you should now have WordPress! [caption id="attachment_542" align="aligncenter" width="400"] Figure A.50: WordPress installed successfully![/caption]

Running WordPress

After changing the interface configuration, start the machine. You will see a dialogue box: [caption id="attachment_542" align="alignnone" width="1144"] Figure A.51: Running WordPress[/caption] Press enter and you'll see the device under some basic configuration. Once you get to the prompt, you can exit that window, and you will have WordPress ready! [caption id="attachment_542" align="aligncenter" width="1154"] Figure A.52: WordPress is ready![/caption]

Using Switches in GNS3

Usually we just use switches to connect multiple devices together in GNS3. However, it can also be used for VLANs. Start by dragging one in and double clicking it. [caption id="attachment_542" align="aligncenter" width="450"] Figure A.53: Switch configuration[/caption] Here you can see that they are all basically untagged. To configure a specific port, simply double click your desired port [caption id="attachment_542" align="aligncenter" width="450"] Figure A.54: Switch port configuration[/caption] Configure the necessary settings for them (access is for tagging, dot1q is for trunking). [caption id="attachment_542" align="aligncenter" width="450"] Figure A.55: Switch port configuration[/caption] Click on add to Apply the changes. [caption id="attachment_542" align="aligncenter" width="450"] Figure A.56: Switch port configuration[/caption] Then click Apply and OK.]]> 543 0 1 0 https://opentextbc.ca/fortigatefirewall/back-matter/acknowledgements/ Fri, 04 Aug 2023 18:06:34 +0000 https://opentextbc.ca/fortigatefirewall/back-matter/acknowledgements/ BCcampus for the financial support of this project. I would like to thank my great students and friends Mahdad Zakaria, Michael Kheong, Xavier Cawley, Lewis Saludo, and Tung Lee for their thoughtful feedback and great suggestions during this project.]]> 544 0 2 0 https://opentextbc.ca/fortigatefirewall/back-matter/about-the-author/main-pic/ Tue, 29 Aug 2023 20:28:59 +0000 https://opentextbc.ca/wp-content/uploads/sites/438/2023/08/main-pic.jpg 545 546 0 0 https://opentextbc.ca/fortigatefirewall/back-matter/about-the-author/ Fri, 04 Aug 2023 18:07:33 +0000 https://opentextbc.ca/fortigatefirewall/back-matter/about-the-author/ Hamid Talebi is an IT engineer with 14 years of experience and is a faculty member at Computer Information System Administration (CISA), School of Energy at BCIT. He has a Master of Science (MS) degree in Network Security. He has expertise and experience working with FortiGate and Palo Alto Firewalls, and SIEM software such as Qradar IBM, FortiSIEM, Splunk, and ArcSight. Before joining BCIT, Hamid held multiple roles IT security roles with a number of reputable organizations, such as the Canadian Institute for Cybersecurity and Bell. He designed and implemented a honeynet for the CIC and created a large IPS/IDS dataset over AWS for the CSE. He has been working in developing strong information security architectures with an Agile Project Management delivery methodology and assisting in the development of client IT and security strategies. Hamid has taught Network Security Fundamentals, Enterprise Network Security (FortiGate), Advanced Network Security (Palo Alto – Splunk – FortiSIEM), and Network Programming with Python at BCIT.]]> 546 0 3 0 https://opentextbc.ca/fortigatefirewall/back-matter/versioning-history/ Thu, 02 Jun 2022 02:10:14 +0000 https://opentextbc.ca/fortigatefirewall/back-matter/versioning-history/ Report an Error form.

Version	Date	Change	Details
1.00	August 31, 2023	Book published.

]]> 547 0 4 0 https://opentextbc.ca/fortigatefirewall/front-matter/about-bccampus-open-education/fortigate-firewall-style-sheet/ Tue, 29 Aug 2023 21:23:59 +0000 https://opentextbc.ca/fortigatefirewall/wp-content/uploads/sites/438/2022/05/FortiGate-Firewall-Style-Sheet.docx 557 20 0 0 https://opentextbc.ca/fortigatefirewall/?attachment_id=564 Thu, 31 Aug 2023 17:35:07 +0000 https://opentextbc.ca/fortigatefirewall/?attachment_id=564 564 12 0 0 https://opentextbc.ca/fortigatefirewall/front-matter/accessibility-statement/ Tue, 24 May 2022 22:32:28 +0000 https://opentextbc.ca/fortigatefirewall/front-matter/accessibility-statement/ Accessibility of this Textbook The web version of this resource has been designed to meet Web Content Accessibility Guidelines 2.0, level AA. In addition, it follows all guidelines in Appendix A: Checklist for Accessibility of the Accessibility Toolkit – 2nd Edition. It includes:

• Easy navigation. This resource has a linked table of contents and uses headings in each chapter to make navigation easy.
• Accessible images. All images in this resource that convey information have alternative text. Images that are decorative have empty alternative text.
• Accessible links. All links use descriptive link text.

Accessibility Checklist

Element	Requirements	Pass?
Headings	Content is organized under headings and subheadings that are used sequentially.	Yes
Images	Images that convey information include alternative text descriptions. These descriptions are provided in the alt text field, in the surrounding text, or linked to as a long description.	Yes
Images	Images and text do not rely on colour to convey information.	Yes
Images	Images that are purely decorative or are already described in the surrounding text contain empty alternative text descriptions. (Descriptive text is unnecessary if the image doesn’t convey contextual content information.)	Yes
Tables	Tables include row and/or column headers that have the correct scope assigned.	Yes
Tables	Tables include a title or caption.	Yes
Tables	Tables do not have merged or split cells.	Yes
Tables	Tables have adequate cell padding.	Yes
Links	The link text describes the destination of the link.	Yes
Links	Links do not open new windows or tabs. If they do, a textual reference is included in the link text.	Yes
Links	Links to files include the file type in the link text.	Yes
Font	Font size is 12 point or higher for body text.	Yes
Font	Font size is 9 point for footnotes or endnotes.	Yes
Font	Font size can be zoomed to 200% in the webbook or eBook formats.	Yes

Known Accessibility Issues and Areas for Improvement

• The book relies heavily on screenshots from FortiGate Firewall. These screenshots do not have alt text. While many of the screenshots are described in the surrounding text, the book has not been reviewed to ensure that the surrounding text is an adequate alternative for all images in the book.

Let Us Know if You are Having Problems Accessing This Book

We are always looking for ways to make our resources more accessible. If you have problems accessing this textbook, please contact us to let us know so we can fix the issue. Please include the following information:

• The name of the textbook
• The location of the problem by providing a web address or page description.
• A description of the problem
• The computer, software, browser, and any assistive technology you are using that can help us diagnose and solve your issue (e.g., Windows 10, Google Chrome (Version 65.0.3325.181), NVDA screen reader)

You can contact us one of the following ways:

• Web form: BCcampus IT Support
• Web form: Report an Error

This statement was last updated on August 31, 2023. The Accessibility Checklist table was adapted from one originally created by the Rebus Community and shared under a CC BY 4.0 License.]]> 17 0 1 0 https://opentextbc.ca/fortigatefirewall/front-matter/for-students-how-to-access-and-use-this-textbook/ Tue, 24 May 2022 22:33:48 +0000 https://opentextbc.ca/fortigatefirewall/front-matter/for-students-how-to-access-and-use-this-textbook/

Online webbook. You can read this textbook online on a computer or mobile device in one of the following browsers: Chrome, Firefox, Edge, and Safari.

PDF. You can download this book as a PDF to read on a computer (Digital PDF) or print it out (Print PDF).

Mobile. If you want to read this textbook on your phone or tablet, you can use the EPUB (eReader) file.

HTML. An HTML file can be opened in a browser. It has very little style so it doesn't look very nice, but some people might find it useful.

For more information about the accessibility of this textbook, see the Accessibility Statement. You can access the online webbook and download any of the formats for free here: FortiGate Firewall: Practical Guidance and Hands-On Labs. To download the book in a different format, look for the "Download this book" drop-down menu and select the file type you want.

How can I use the different formats?

Format	Internet required?	Device	Required apps	Accessibility Features	Screen reader compatible
Online webbook	Yes	Computer, tablet, phone	An Internet browser (Chrome, Firefox, Edge, or Safari)	WCAG 2.0 AA compliant, option to enlarge text, and compatible with browser text-to-speech tools	Yes
PDF	No	Computer, print copy	Adobe Reader (for reading on a computer) or a printer	Ability to highlight and annotate the text. If reading on the computer, you can zoom in.	Unsure
EPUB	No	Computer, tablet, phone	An eReader app	Option to enlarge text, change font style, size, and colour.	Unsure
HTML	No	Computer, tablet, phone	An Internet browser (Chrome, Firefox, Edge, or Safari)	WCAG 2.0 AA compliant and compatible with browser text-to-speech tools.	Yes

Tips for Using This Textbook

• Search the textbook.
  • If using the online webbook, you can use the search bar in the top right corner to search the entire book for a key word or phrase. To search a specific chapter, open that chapter and use your browser's search feature by hitting [Cntr] + [f] on your keyboard if using a Windows computer or [Command] + [f] if using a Mac computer.
  • The [Cntr] + [f] and [Command] + [f] keys will also allow you to search a PDF, HTML, and EPUB files if you are reading them on a computer.
  • If using an eBook app to read this textbook, the app should have a built-in search tool.
• Navigate the textbook.
  • This textbook has a table of contents to help you navigate through the book easier. If using the online webbook, you can find the full table of contents on the book's homepage or by selecting "Contents" from the top menu when you are in a chapter.
• Annotate the textbook.
  • If you like to highlight or write on your textbooks, you can do that by getting a print copy, using the Digital PDF in Adobe Reader, or using the highlighting tools in eReader apps.

]]> 18 0 2 0 https://opentextbc.ca/fortigatefirewall/front-matter/about-bccampus-open-education/ Tue, 24 May 2022 22:34:49 +0000 https://opentextbc.ca/fortigatefirewall/front-matter/about-bccampus-open-education/ FortiGate Firewall: Practical Guidance and Hands-On Labs by Hamid Talebi was funded by BCcampus Open Education. BCcampus Open Education began in 2012 as the B.C. Open Textbook Project with the goal of making post-secondary education in British Columbia more accessible by reducing students’ costs through the use of open textbooks and other OER. BCcampus supports the post-secondary institutions of British Columbia as they adapt and evolve their teaching and learning practices to enable powerful learning opportunities for the students of B.C. BCcampus Open Education is funded by the British Columbia Ministry of Post-Secondary Education and Future Skills and the Hewlett Foundation. Open educational resources (OER) are teaching, learning, and research resources that, through permissions granted by the copyright holder, allow others to use, distribute, keep, or make changes to them. Our open textbooks are openly licensed using a Creative Commons licence and are offered in various eBook formats free of charge, or as printed books that are available at cost. For more information about open education in British Columbia, please visit the BCcampus Open Education website. If you are an instructor who is using this book for a course, please fill out our Adoption of an Open Textbook form.

This book was produced using the following styles: FortiGate Firewall: Practical Guidance and Hands-On Labs Style Sheet

]]> 20 0 3 0 https://opentextbc.ca/fortigatefirewall/front-matter/introduction/ Fri, 04 Mar 2022 05:29:34 +0000 https://opentextbc.ca/fortigatefirewall/front-matter/introduction/ What is a Firewall?[/footnote] The lack of materials available for students to learn is part of our issue. Since I have been teaching Enterprise Security at BCIT, I have received a lot of feedback from my students. Then, I have decided to collect all labs and make them as a book for students. This book is part of the Enterprise Security Course and is based on the practical labs in the class. Each chapter begins with a learning objective and step-by-step explanations in GNS3 to beginners on how to build different security scenarios from scratch. The book is divided into ten chapters as following:

• Chapter 1. Basic Settings of FortiGate firewall and how to work with CLI or GUI to configure the firewall.
• Chapter 2. Policy: We will focus on firewall policy and how firewall pass the traffic from one port to another port.
• Chapter 3. NAT: We will use Source NAT and Destination NAT. You will learn how to use port forwarding when you are using DNAT.
• Chapter 4. VPN: This is very important chapter focus on SSL VPN and IPsec VPN. You will learn how to set site-to-site VPN.
• Chapter 5. Authentication: This chapter will focus on Captive Portal and FSSO. You will learn how to install FSSO Agent in the server and monitor Active Directory.
• Chapter 6. High Availability: This chapter will focus on High Availability (Active-Passive) in FortiGate firewalls.
• Chapter 7. Security: This chapter will focus on security profile, DDoS prevention and VLANs configuration.
• Chapter 8. VDOM or Virtual Domain is a feature in FortiGate firewalls to manage resources and access. You will learn how to enable VDOM and how to use it.
• Chapter 9. SD-WAN: This chapter will focus on SD-WAN and how to use this feature.
• Chapter 10. Cloud Technologies: This chapter will focus on how to deploy FortiGate in the cloud.
• Appendix: We will cover basic GNS3 settings you need during this book.

As we know “a picture is worth 1000 words” and that is why this book is based on snapshots and screen-capture all the steps and configurations. This will be useful for fast-tracking. This book will be a practical resource/guide that can be used by BCIT students, and students at other institutions as well as IT professionals. Hamid Talebi]]> 21 0 4 0 https://opentextbc.ca/fortigatefirewall/front-matter/dedication/ Fri, 22 Apr 2022 16:27:32 +0000 https://opentextbc.ca/fortigatefirewall/front-matter/dedication/ 22 0 5 0 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/ Sun, 03 Apr 2022 01:21:00 +0000 https://opentextbc.ca/fortigatefirewall/chapter/application-profile/

Learning Objectives

• Work with application profile in FortiGate
• Create a Traffic Shaper
• Apply Traffic Shaping to the traffic

Scenario: Application control uses IPS protocol decoders that can analyze network traffic to detect application traffic, even if the traffic uses non-standard ports or protocols. We are going to block social networks in the first example and then we are going to set Traffic Shaper for the local PCs in the second example. Finally, we will try to verify the connection speed in both PCs in the local network and compare them together.

Working with Application Profile

1. Go to Policy & Objects > Firewall Policy section, select LocalToInternet policy you have created in the previous section. Click on Edit.
2. Go to Security Profile section > Application Control.
   • Create a new Application Control
   • Name: Ban-SocialNetwork
   • In Categories Block Social Media, Video/Audio
   [caption id="attachment_56" align="aligncenter" width="500"] Figure 2.17: Block Social.Media and Video/Audio[/caption] For Application and Filter Overrides. Because a filter override is configured to block applications that use excessive bandwidth, it will block all applications using excessive bandwidth, regardless of categories that allow these applications.
3. In Application and Filter overrides > Create a new.
   1. Select Application
   2. Action: Block
   3. Application: YouTube
   [caption id="attachment_57" align="aligncenter" width="500"] Figure 2.18: Block YouTube[/caption]
4. In Application and Filter overrides > Create a new.
   1. Select Application
   2. Action: Block
   3. Application: Facebook_Chat
   [caption id="attachment_58" align="aligncenter" width="500"] Figure 2.19: Block Facebook[/caption]
5. OK all and now open the browser and go to Twitter.com or YouTube.com and try to search for a video and you should receive an application block page. [caption id="attachment_59" align="aligncenter" width="500"] Figure 2.20: Application Control Blocked page[/caption]
6. Go to Log & Report > Application Control and try to find the logs related to the previous step. [caption id="attachment_60" align="alignnone" width="1194"] Figure 2.21: Application Control logs[/caption]

Working with Application Profile: Part 2

[caption id="attachment_61" align="aligncenter" width="1090"] Figure 2.22: Main scenario[/caption]

Table 2.3: Devices Configuration

Device	Configuration
FortiGate	Port 2: DHCP Server (192.168.1.20 - 192.168.1.30) Port 3: DHCP Client
WebTerm1	DHCP Client
WebTerm3	DHCP Client

1. Remove the application control you have set for policies in the previous step.
2. Add Ethernet Switch and WebTerm3 to your GNS3. WebTerm3 should receive an IP address from DHCP. [caption id="attachment_62" align="aligncenter" width="1281"] Figure 2.23: Verify DHCP address in WebTerm3[/caption]
3. Set traffic shaping for WebTerm3 to save the bandwidth.
   • Create an Address object for WebTerm3. Go to Addresses > Create a new Address with the following information:

   Table 2.4: Create a new Address for WebTerm3

   Field	Value
   Name	WebTerm3
   Type	Subnet
   Subnet/IP Range	192.168.1.21/32 (Check your IP in WebTerm3)
   Interface	any

   [caption id="attachment_63" align="aligncenter" width="450"] Figure 2.24: WebTerm3 IP address[/caption]
4. Go to Policy & Objects > Traffic Shapers and create a new Per-IP traffic shaper. Shared affects upload speed while Per-IP affects download and upload speed.

   Table 2.5: Traffic Shaper Configuration

   Field	Value
   Type	Per-IP
   Name	WebTerm3
   Max Bandwidth	10000
   Max Concurrent Connections	5000

   [caption id="attachment_64" align="aligncenter" width="917"] Figure 2.25: Set traffic shaping[/caption]
5. Go to Policy & Objects > Traffic Shaping Policy and create a new Policy.

   Table 2.6: Traffic Shaping Policy Configuration

   Field	Value
   Source	WebTerm3
   Destination	ALL
   Service	ALL
   Outgoing interface	Port3
   Per-IP Shaper	WebTerm3

   [caption id="attachment_65" align="aligncenter" width="500"] Figure 2.26: Set traffic shaping policy[/caption]
6. To verify open the browser in the WebTerm3 and go to Fast.com. [caption id="attachment_66" align="aligncenter" width="350"] Figure 2.27: WebTerm3 speed test[/caption]
7. Now, open the browser in WebTerm1 and go to Fast.com. [caption id="" align="aligncenter" width="400"] Figure 2.28: WebTerm1 speed test[/caption]
8. We are going to allow only twitter Applications in WebTerm3. Other applications should be blocked. To do:
   1. Add a new Policy from port2 to port3. [caption id="attachment_68" align="aligncenter" width="1162"] Figure 2.29: Set Firewall Policy[/caption]
   2. Add and Application Control and Block all applications except Twitter. Then, assign the WebTerm3 profile to Application Control. [caption id="attachment_70" align="aligncenter" width="923"] Figure 2.30: WebTerm3 Application Control Settings[/caption] [caption id="attachment_70" align="aligncenter" width="588"] Figure 2.31: Set Application Control[/caption]
   3. Then, put the policy you have created above LocalToInternet Policy. [caption id="attachment_71" align="aligncenter" width="982"] Figure 2.32: Priority of policies[/caption]
   4. Verify: in WebTerm1, you should be able to reach any websites. [caption id="attachment_72" align="aligncenter" width="1000"] Figure 2.33: Verify the result in WebTerm1[/caption]

]]> 73 37 10 0 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/ Sun, 03 Apr 2022 20:14:42 +0000 https://opentextbc.ca/fortigatefirewall/chapter/destination-nat/

Learning Objectives

• Create a virtual IP address
• Create a Destination NAT
• Create a Port Forwarding

Scenario: We are going to enable Destination NAT (DNAT) and able to reach WordPress from WebTerm1. That means if someone from WebTerm1 opens the browser and types http://10.10.10.1 should be able to reach WordPress.

[caption id="attachment_76" align="aligncenter" width="1125"] Figure 3.8: Main scenario[/caption]

VIP (Virtual IP address)

Go to Policy Objects > Virtual IPs and Create a new Virtual IP:

• Name: outsideToDMZ
• Interface: Port 4
• External IP address: 10.10.10.1
• Mapped IP address: 192.168.1.X (Find the local IP address of your WordPress)
• Enable Port Forwarding:
  • External Service Port: TCP 80 
  • Map to Port: TCP 80

[caption id="attachment_76" align="aligncenter" width="500"] Figure 3.9: Configure Virtual IP[/caption]

Create a Firewall Policy

You will create a new firewall policy to match a specific source, destination, service, and action set to Accept.

Table 3.2: Firewall policy configuration

Field	Value
Name	Outside-DMZ
Incoming Interface	Port 4
Outgoing Interface	Port 2
Source	All
Destination	Select your VIP Name (outsideToDMZ)
Schedule	Always
Service	HTTP
Action	ACCEPT
Log Violation Traffic	<enable>
Enable this policy	<enable>

Click OK to save the changes. [caption id="attachment_76" align="aligncenter" width="500"] Figure 3.10: Set Firewall Policy[/caption] To confirm traffic matches, go to WebTerm1, open the browser and type http://10.10.10.1 in the browser. You should be able to reach WordPress. [caption id="attachment_76" align="aligncenter" width="500"] Figure 3.11: Verify configuration[/caption]

Port Forwarding

[caption id="attachment_76" align="aligncenter" width="1125"] Figure 3.12: Main scenario[/caption]

1. Set the interface of Kali as a DHCP client and enable SSH in Kali. To enable SSH in Kali type Figure 3.13 command: [caption id="attachment_89" align="aligncenter" width="530"] Figure 3.13: Enable SSH service in Kali[/caption] [caption id="attachment_89" align="aligncenter" width="758"] Figure 3.14: Verify you've received an IP address from DHCP[/caption]
2. Repeat the previous steps we have done for DNAT and try to reach Kali from port 8080 (Port Forwarding: 8080 → 22) [caption id="attachment_91" align="aligncenter" width="1094"] Figure 3.15: Map External port 8080 to local port 22[/caption] [caption id="attachment_91" align="aligncenter" width="843"] Figure 3.16: Set Firewall Policy[/caption]
3. Verify your connection from WebTerm (Hint: ssh user@10.10.10.1 -p 8080). [caption id="attachment_92" align="aligncenter" width="814"] Figure 3.17: Verify SSH connection[/caption]

]]> 93 75 4 0 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/ Sun, 03 Apr 2022 21:25:01 +0000 https://opentextbc.ca/fortigatefirewall/chapter/ssl-vpn/

Learning Objectives

• Configure a tunnel-based SSL VPN
• Configure a web-based SSL VPN (Web Portal)

Scenario: We are going to have SSL VPN from Windows to FortiGate Firewall. First, we will install FortiClient on Windows and then we will configure the firewall for FortiClient. We have two types of SSL VPN, Web based mode and Tunnel mode. Web based mode doesn't need any agents and you should be able to reach WordPress and SSH Server from Windows. Tunnel mode is through FortiClient. The goal of this scenario is to have connectivity from Windows to WordPress and SSH Server.

[caption id="attachment_135" align="aligncenter" width="1242"] Figure 4.38: Main scenario[/caption]

Table 4.3: Devices configuration

Device	IP address	Access
FortiGate	Port3: 192.168.1.1/24 - DHCP (192.168.1.20 to 192.168.1.30) Port2: DHCP Client	ICMP-HTTP-HTTPS
WebTerm (FMC)	192.168.1.2/24	-
KALI Linux (SSH Server)	192.168.1.3/24	-
WordPress	192.168.1.4/24
KALI-outside	DHCP Client
Windows	DHCP Client

Configure the interfaces of the firewall. Port2 and Port3 should be configured in the terminal to access the firewall.

1. Port 3 Configuration: [caption id="attachment_136" align="aligncenter" width="500"] Figure 4.39: Port3 settings[/caption]
2. Port 2 Configuration: [caption id="attachment_137" align="aligncenter" width="500"] Figure 4.40: Port2 settings[/caption]
3. Configure DHCP Server on port3. [caption id="attachment_138" align="aligncenter" width="997"] Figure 4.41: Enable DHCP Server on port3[/caption]
4. Configure user and user group. Go to User & Authentication > User Definition to create a local user sslvpnuser1. [caption id="attachment_141" align="aligncenter" width="500"] Figure 4.42: Create a local user[/caption] [caption id="attachment_141" align="aligncenter" width="500"] Figure 4.43: Configure login credentials[/caption] Go to User & Authentication > User Groups to create a group sslvpngroup with the member sslvpnuser1. [caption id="attachment_141" align="aligncenter" width="500"] Figure 4.44: Create a group[/caption]
5. Configure SSL VPN web portal and Tunnel mode. Go to VPN > SSL-VPN Portals:
   • Split-Tunneling: Disabled
   • Source IP Pools: SSLVPN_TUNNEL_ADDR1
   [caption id="attachment_145" align="aligncenter" width="1146"] Figure 4.45: SSL-VPN Portal[/caption] Go to VPN > SSL-VPN Portals, add KALI IP address (SSH Server: IP Address of Kali) and WordPress (IP Address of WordPress) in the bookmark section. [caption id="attachment_145" align="aligncenter" width="400"] Figure 4.46: Create an SSH bookmark[/caption] [caption id="attachment_145" align="aligncenter" width="400"] Figure 4.47: Create an HTTP/HTTPS bookmark[/caption] [caption id="attachment_145" align="aligncenter" width="1092"] Figure 4.48: Bookmark settings[/caption]
6. Configure SSL VPN settings. Go to VPN > SSL-VPN Settings:
   • For Listen on Interface(s), select Port2.
   • Set Listen on Port to 8080.
   • Server Certificate: Fortinet
   • In restrict Access, select “Allow access from any host”
   • Address range: Automatically assign address.
   • In Authentication/Portal Mapping All Other Users/Groups, set the Portal to MyPortal
   • Create new Authentication/Portal Mapping for group sslvpngroup mapping portal MyPortal.
   [caption id="attachment_148" align="aligncenter" width="1092"] Figure 4.49: Enable SSL-VPN Settings[/caption] [caption id="attachment_148" align="aligncenter" width="400"] Figure 4.50: Assign sslvpngroup to MyPortal[/caption] [caption id="attachment_148" align="aligncenter" width="500"] Figure 4.51: Authentication/Portal Mapping[/caption]
7. Configure SSL VPN firewall policy:
   1. Go to Policy & Objects > Firewall Policy.
   2. Fill in the firewall policy name. In this example, SSLVPN full tunnel access.
   3. The incoming interface must be SSL-VPN tunnel interface(ssl.root).
   4. Choose an Outgoing Interface. In this example, port3.
   5. Set the Source to all and group to sslvpngroup.
   6. Set the Destination to all.
   7. Set Schedule to always, Service to ALL, and Action to Accept.
   [caption id="attachment_149" align="aligncenter" width="500"] Figure 4.52: Create a Firewall Policy for SSLVPN[/caption]
8. Now connect to Kali outside and open the browser https://IP-PORT 2-Firewall:8080 Enter the username and password you created earlier. Then try to connect to the KALI SSH Server and WordPress through the browser. [caption id="attachment_153" align="aligncenter" width="400"] Figure 4.53: SSL-VPN Portal[/caption] [caption id="attachment_153" align="aligncenter" width="400"] Figure 4.54: SSL-VPN Portal[/caption] [caption id="attachment_153" align="aligncenter" width="400"] Figure 4.55: Verify WordPress[/caption] [caption id="attachment_153" align="aligncenter" width="400"] Figure 4.56: Verify SSH[/caption]
9. Now, go to Windows and install FortiClient on Windows. Try to use FortiClient to connect through SSLVPN. [caption id="attachment_156" align="aligncenter" width="400"] Figure 4.57: Download FortiClient[/caption] [caption id="attachment_156" align="aligncenter" width="400"] Figure 4.58: FortiClient Installation[/caption] [caption id="attachment_156" align="aligncenter" width="400"] Figure 4.59: FortiClient Installation[/caption]
10. Configure FortiClient. [caption id="attachment_158" align="aligncenter" width="400"] Figure 4.60: Configure FortiClient[/caption] [caption id="attachment_158" align="aligncenter" width="500"] Figure 4.61: Configure SSLVPN[/caption]
11. Verify configuration. Enter the Username and Password you have set for SSLVPN. [caption id="attachment_164" align="aligncenter" width="400"] Figure 4.62: SSLVPN Credentials[/caption] Accept the Certificate Issuer to have a secure connection. [caption id="attachment_164" align="aligncenter" width="450"] Figure 4.63: Click on Yes in Security Alert[/caption] [caption id="attachment_164" align="aligncenter" width="400"] Figure 4.64: Verify SSLVPN Connection[/caption] Verify your connectivity by entering the IP address of WordPress. [caption id="attachment_164" align="aligncenter" width="400"] Figure 4.65: Verify WordPress[/caption] Verify your connectivity by entering the IP address of SSH Server. [caption id="attachment_164" align="aligncenter" width="450"] Figure 4.66: Verify SSH[/caption] [caption id="attachment_164" align="aligncenter" width="450"] Figure 4.67: Verify SSH connection[/caption]

]]> 165 95 5 0 https://opentextbc.ca/fortigatefirewall/chapter/fsso/ Tue, 05 Apr 2022 21:55:39 +0000 https://opentextbc.ca/fortigatefirewall/chapter/fsso/

Learning Objectives

• Install FSSO Agent on Windows Server
• Configure a FSSO

Scenario: FSSO stands for Fortinet Single Sign-on and it is used to allow users to login into the network with one single login credential. In this scenario, we are going to focus on agent-based FSSO and we are going to install the agent on Windows Server. Then, anyone logins through Active Directory, we can track them through FortiGate Logs and Events.

1. In this scenario, we are going to join windows 10 to Active Directory that we have set already. The domain controller name is Hamid.local. First, we will join Windows 10 to the domain controller. [caption id="attachment_182" align="aligncenter" width="1004"] Figure 5.11: Join Windows to the Active Directory[/caption] [caption id="attachment_182" align="aligncenter" width="350"] Figure 5.12: Enter Domain name[/caption] [caption id="attachment_182" align="aligncenter" width="350"] Figure 5.13: Enter username and password of AD administrator[/caption]
2. Install FSSO Agent on the AD server. [caption id="attachment_185" align="aligncenter" width="400"] Figure 5.14: Install FSSO Agent[/caption] [caption id="attachment_185" align="aligncenter" width="400"] Figure 5.15: Install FSSO Agent[/caption] The password you set here for the agent is going to be used in the FortiGate firewall when you want to connect to the FSSO Agent. [caption id="attachment_185" align="aligncenter" width="917"] Figure 5.16: Configure FSSO Agent[/caption]
3. In the FortiGate firewall, go to Security Fabric > External Connectors > FSSO Agent on Windows AD. [caption id="attachment_188" align="aligncenter" width="1333"] Figure 5.17: Set external connectors[/caption] Enter the same password you have set in step 2. [caption id="attachment_188" align="aligncenter" width="500"] Figure 5.18: Set FSSO Agent settings[/caption] [caption id="attachment_188" align="aligncenter" width="500"] Figure 5.19: FSSO Agent status[/caption]
4. You should be able to connect to FSSO Agent and you can verify the status of the external connector.
5. Verify your configuration by going to Log & Report > Events > User Events. [caption id="attachment_189" align="alignnone" width="1578"] Figure 5.20: FSSO event logs[/caption]
6. After connecting to the Agent, you should be able to see users and groups in AD when you are creating a new user. [caption id="attachment_190" align="alignnone" width="1272"] Figure 5.21: Verify configuration[/caption]

]]> 191 167 3 0 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/ Wed, 06 Apr 2022 04:36:03 +0000 https://opentextbc.ca/fortigatefirewall/chapter/ddos-prevention/

Learning Objectives

• Configure a DDoS prevention profile

Scenario: In this lab, we are going to set a DDoS Prevention on traffic from Port1 to Port2. In Kali, we are going to install a script to do a DOS attack and in the firewall, we will set a DDoS Prevention Policy to block DOS traffic.

[caption id="attachment_207" align="aligncenter" width="1207"] Figure 7.1: Main scenario[/caption]

Table 7.1: Devices configuration

Device	IP address	Access
Kali1	DHCP Client	-
FortiGate	Port 1: DHCP Client Port 2: 192.168.0.1/24, DHCP Server (192.168.0.10-192.168.0.20)	ICMP-HTTP-HTTPS
WebTerm1 (FMC)	192.168.0.2/24	-
WebTerm2	DHCP Client	-

1. FortiGate CLI Configuration for port2.
   FGVM01TM19008000 # config system interface FGVM01TM19008000 (interface) # edit port2 FGVM01TM19008000 (port2) # set ip 192.168.0.1/24 FGVM01TM19008000 (port2) # set allowaccess http https ping FGVM01TM19008000 (port2) # end
2. Go to Kali and Download the pentmenu repository and run DOS > UDP FLOOD > Enter port1 IP address > Port 443. [caption id="attachment_209" align="aligncenter" width="1053"] Figure 7.2: Download and execute pentmenu script[/caption] [caption id="attachment_209" align="aligncenter" width="600"] Figure 7.3: Running UDP Flood[/caption]
3. Go to Policy & Object > IPV4 DOS Policy:
   • Name: DOS
   • Incoming Interface: Port1
   • Source, Destination, Service: all
   • L3 Anomalies: Status and Logging: Enable, Action Block
   • L4 Anomalies: Status and Logging: Enable, Action Block
   [caption id="attachment_211" align="aligncenter" width="1227"] Figure 7.4: IPv4 DoS Policy[/caption] [caption id="attachment_211" align="aligncenter" width="500"] Figure 7.5: IPv4 DOS Policy Settings[/caption]
4. Now, start the attack again and go to Log & Report > Anomaly. [caption id="attachment_213" align="alignnone" width="1265"] Figure 7.6: View anomaly report[/caption] Go to Dashboard > Security > Top Threats and verify your result. [caption id="attachment_213" align="alignnone" width="1130"] Figure 7.7: Verify result[/caption]
5. Go to FortiGate CLI and configure DOS Policy for ICMP_flood as follows:
   FGVM01TM19008000 # config firewall DoS-policy FGVM01TM19008000 (DoS-policy) # edit 2 FGVM01TM19008000 (2) # set interface "port1" FGVM01TM19008000 (2) # set srcaddr "all" FGVM01TM19008000 (2) # set dstaddr "all" FGVM01TM19008000 (2) # set service "ALL" FGVM01TM19008000 (2) # config anomaly FGVM01TM19008000 (anomaly) # edit "icmp_flood" FGVM01TM19008000 (icmp_flood) # set status enable FGVM01TM19008000 (icmp_flood) # set log enable FGVM01TM19008000 (icmp_flood) # set quarantine attacker FGVM01TM19008000 (icmp_flood) # set quarantine-expiry 2m FGVM01TM19008000 (icmp_flood) # set quarantine-log disable FGVM01TM19008000 (icmp_flood) # set threshold 10 FGVM01TM19008000 (icmp_flood) # next FGVM01TM19008000 (anomaly) # end FGVM01TM19008000 (2) # end
6. Go to Kali and run this command. First, 10 packets were allowed, and the 11th packet triggered the following block.root@ubuntu:~# ping -c 2000 -i 0.01  Port1-IP-Address. [caption id="attachment_214" align="alignnone" width="806"] Figure 7.8: Verify DOS prevention[/caption]

]]> 215 206 1 0 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/ Thu, 07 Apr 2022 18:39:29 +0000 https://opentextbc.ca/fortigatefirewall/chapter/vlan-and-security-profile/

Learning Objectives

• Configure VLANs in FortiGate firewall
• Configure a Security Policy for VLANs

Scenario: In this lab, we are going to learn how to set VLAN on Port2 of the firewall. WebTerm1 is belong to Vlan10 and WebTerm2 is belong to Vlan20. We will set different policies on each VLAN and try to verify configuration.

[caption id="attachment_231" align="aligncenter" width="1106"] Figure 7.22: Main scenario[/caption]

Table 7.2: Devices configuration

Device	IP address	Access
FortiGate	Port 1: DHCP Client Port 2: Vlan 10: 192.168.10.1/24 Vlan 20: 192.168.20.1/24	ICMP-HTTP-HTTPS
WebTerm1	DHCP Client	-
WebTerm2	DHCP Client	-

1. Configure switches. Right-click on the Switch > Configure, configure eth0, eth1, and eth2 as Table 7.3:

   Table 7.3: Switch configuration

   Port	VLAN	Type
   0	1	Dot1q
   1	10	Access
   2	20	Access

   [caption id="attachment_232" align="aligncenter" width="400"] Figure 7.23: Switch configuration[/caption]
2. You should create two sub-interfaces on port2 of the firewall. [caption id="attachment_235" align="aligncenter" width="1151"] Figure 7.24: Vlan10 Configuration[/caption] [caption id="attachment_235" align="aligncenter" width="1190"] Figure 7.25: Vlan20 Configuration[/caption] [caption id="attachment_235" align="aligncenter" width="1054"] Figure 7.26: Vlan10 and Vlan20 IP addresses[/caption]
3. Block YouTube and Social Media on Vlan 20:
   1. Create an application profile as Figure 7.27. [caption id="attachment_236" align="aligncenter" width="863"] Figure 7.27: Block Social.Media and Video/Audio[/caption]
   2. Configure Firewall Policy from Vlan 20 to Port1 and assign application control to the Firewall Policy. [caption id="attachment_237" align="aligncenter" width="1200"] Figure 7.28: Create vlan20 Firewall Policy and assign Application Control Profile[/caption]
   3. Verify your configuration by visiting Twitter.com or YouTube.com. [caption id="attachment_238" align="aligncenter" width="400"] Figure 7.29: Verify configuration[/caption]
4. Filter .zip, .pdf files on Vlan 10:
   1. Create a File filtezr profile. File filter only works on the unencrypted protocol. Set traffic for both and finally set the action to block. [caption id="attachment_239" align="aligncenter" width="1234"] Figure 7.30: Block PDF and ZIP files[/caption]
   2. Make sure to set the feature set as flow-based. [caption id="attachment_240" align="aligncenter" width="400"] Figure 7.31: Block profile[/caption]
   3. Create a Firewall Policy in the firewall from vlan10 to port1, inspection mode should be Proxy-based, and assign the profile you have created to File Filter. [caption id="attachment_241" align="aligncenter" width="1027"] Figure 7.32: Create vlan10 Firewall Policy and assign File Filter Profile[/caption]
   4. Verify your configuration by downloading a zip or pdf file from HTTP websites. [caption id="attachment_242" align="aligncenter" width="450"] Figure 7.33: Verify configuration[/caption]

]]> 243 206 3 0 https://opentextbc.ca/fortigatefirewall/chapter/vdom/ Fri, 11 Mar 2022 09:24:51 +0000 https://opentextbc.ca/fortigatefirewall/chapter/vdom/

Learning Objectives

• Create a VDOM
• Configure a security policy in VDOMs

Scenario: This example illustrates how to use VDOMs to host two FortiOS instances on a single FortiGate unit. Virtual Domains (VDOMs) can be used to divide a single FortiGate unit into two or more virtual instances of FortiOS that function as independent FortiGate units. This example simulates an ISP that provides Company A and Company B with distinct internet services. Each company has its own VDOM, IP address, and internal network.

[caption id="attachment_246" align="aligncenter" width="400"] Figure 8.1: Main scenario[/caption]

Enable VDOMs

Table 8.1: Devices configuration

Device	IP address	Access
WebTerm-VDOMA	DHCP Client	HTTPS
WebTerm-VDOMB	DHCP Client	HTTPS
FortiGate	Port 2: DCHP Client – VDOM B Port 3: DHCP Client – VDOM A Port 4: DHCP SERVER - VDOM A Port 5: DHCP SERVER - VDOM B	Port 2 - Management Access
Ethernet Switch	-	-
NAT	-	-

1. In order to enable Virtual Domains, the following CLI command is required:
   config system global set vdom-mode multi-vdom end
2. Log out FortiGate and log in again. You should be able to see the Figure 8.2 result. [caption id="attachment_247" align="aligncenter" width="350"] Figure 8.2: Default VDOMs[/caption]
3. Go to Global > System > VDOM. Create two VDOMS, VDOM-A and VDOM-B. Leave both VDOMs as Enabled, with Operation Mode set to NAT and NGFW mode to profile-based. [caption id="attachment_249" align="aligncenter" width="450"] Figure 8.3: VDOM-A configuration[/caption] [caption id="attachment_249" align="aligncenter" width="981"] Figure 8.4: VDOM-B configuration[/caption]
4. Go to Global > Network > Interfaces. Edit Port2 and add it to VDOM-B. Set Addressing Mode to DHCP. [caption id="attachment_250" align="aligncenter" width="1141"] Figure 8.5: Port2 configuration[/caption]
   If the port is under root and you can’t modify it to VDOM-B, you should first delete the references related to the port.
5. Go to Global > Network > Interfaces. Edit Port4 and add it to VDOM-A. Set Addressing Mode to Manual and assign an IP/Network mask to the interface (192.168.91.1/255.255.255.0) and finally Enable DHCP Server. [caption id="attachment_251" align="aligncenter" width="1250"] Figure 8.6: Port4 configuration[/caption]
6. Go to Global > Network > Interfaces. Edit Port3 and add it to VDOM-A and set Addressing Mode to DHCP. [caption id="attachment_252" align="aligncenter" width="1164"] Figure 8.7: Port3 configuration[/caption]
7. Go to Global > Network > Interfaces. Edit Port5 and add it to VDOM-B. Set Addressing Mode to Manual and assign an IP/Network Mask to the interface (192.168.92.1/255.255.255.0) and set Administrative Access to HTTPS, PING, and SSH. Enable DHCP Server. [caption id="attachment_253" align="aligncenter" width="1249"] Figure 8.8: Port5 configuration[/caption]

Creating Administrators for Each VDOM

1. Go to Global > System > Administrators. Create an administrator for VDOM-A, called vdom-a. Set Type to Local User, enter and confirm a password, set Administrator Profile to prof_admin, and set Virtual Domain to VDOM-A. Make sure to remove the root VDOM from the Virtual Domain list. [caption id="attachment_254" align="aligncenter" width="1256"] Figure 8.9: Administrators for VDOM-A[/caption]
2. Go to Global > System > Administrators. Create an administrator for VDOM-B, called vdom-b. Set Type to Local User, enter and confirm a password, set Administrator Profile to prof_admin, and set Virtual Domain to VDOM-B. Make sure to remove the root VDOM from the Virtual Domain list. [caption id="attachment_255" align="aligncenter" width="1246"] Figure 8.10: Administrators for VDOM-B[/caption]

Security Policy Setting for VDOM-A

1. Virtual Domains > VDOM-A > Network > Static Routes. Click Create New to create a default route for the VDOM. Set Destination IP/Mask to 0.0.0.0/0.0.0.0, set Device to port3, and set Gateway to the IP of the gateway router. [caption id="attachment_256" align="aligncenter" width="1142"] Figure 8.11: Static route in VDOM-A[/caption]
2. Go to Policy & Objects > Firewall Policy. Create a policy to allow internet access. Set Incoming Interface to port4 and Outgoing Interface to port2. Ensure NAT is turned ON. Set Source Address to all, Destination Address to all, and Service to ALL. [caption id="attachment_257" align="aligncenter" width="1237"] Figure 8.12: Firewall Policy in VDOM-A[/caption]
3. Now, you should be able to reach the internet from WebTerm VDOM-A. [caption id="attachment_258" align="aligncenter" width="500"] Figure 8.13: Verify configuration in VDOM-A[/caption]

Security Policy Setting for VDOM-B

1. Virtual Domains > VDOM-B > Network > Static Routes. Click Create New to create a default route for the VDOM. Set Destination IP/Mask to 0.0.0.0/0.0.0.0, set Device to port2, and set Gateway to the IP of the gateway router. [caption id="attachment_259" align="aligncenter" width="1131"] Figure 8.14: Static route in VDOM-B[/caption]
2. Go to Policy & Objects > Policy > IPv4. Create a policy to allow internet access. Set Incoming Interface to port5 and Outgoing Interface to port2. Ensure NAT is turned ON. Set Source Address to all, Destination Address to all, and Service to ALL. [caption id="attachment_260" align="aligncenter" width="1053"] Figure 8.15: Firewall Policy in VDOM-B[/caption]
3. Create a Traffic shaping under Policy & Objects as follows: [caption id="attachment_261" align="aligncenter" width="1034"] Figure 8.16: Create a traffic shaper in VDOM-B[/caption]
4. Create a Traffic Shaping Policy with the following configuration:
   • Name: VDOMB
   • Source: All
   • Destination: All
   • Service: All
   • Outgoing Interface: Port2
   • Shared Shaper: VDOMB
   • Reverse Shaper: VDOMB
   [caption id="attachment_262" align="aligncenter" width="924"] Figure 8.17: Traffic Shaping Policy in VDOM-B[/caption]
5. Now open the browser in WebTerm VDOM-B and go to Fast.com and verify your configuration. [caption id="attachment_263" align="aligncenter" width="350"] Figure 8.18: Verify configuration in VDOM-B[/caption]

]]> 264 245 5 0 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/ Sun, 10 Apr 2022 02:27:45 +0000 https://opentextbc.ca/fortigatefirewall/chapter/inter-vdom-routing/

Learning Objectives

• Configure a VDOM to pass traffic between VDOMs
• Configure an Inter-VDOM routing

Scenario: Inter-VDOM routing is the communication between VDOMs. VDOM links are virtual interfaces that connect VDOMs. A VDOM link contains a pair of interfaces, each one connected to a VDOM and forming either end of the inter-VDOM connection. We want to create a link between VDOM Sales and Accounting, then the traffic from WebTerm1 should be reached to WebTerm2.

[caption id="attachment_266" align="alignnone" width="906"] Figure 8.19: Main scenario[/caption]

Table 8.2: Devices configuration

Device	IP address	Access
WebTerm1	192.168.1.2/24	-
WebTerm2	172.16.1.2/24	-
FortiGate	Port 1: DHCP Client Port 2: 172.16.1.1/24 Port 3: 192.168.1.1/24	Port 1: https, ping
Cloud1		-

1. First, enable VDOMs in the firewall.
   FGVM01TM19008000 # config system global FGVM01TM19008000 (global) # set vdom-mode multi-vdom FGVM01TM19008000 (global) # end
2. Create two VDOMs, Sales and Accounting. [caption id="attachment_268" align="aligncenter" width="450"] Figure 8.20: Create a VDOM Sales[/caption] [caption id="attachment_268" align="aligncenter" width="450"] Figure 8.21: Create a VDOM Accounting[/caption]
3. Configure IP addresses for the Interfaces Port2 and Port3. Assign port3 to Sales Vdom and port2 to Accounting Vdom. [caption id="attachment_271" align="alignnone" width="1145"] Figure 8.22: Port2 and Port3 IP address configuration[/caption] [caption id="attachment_271" align="alignnone" width="1129"] Figure 8.23: Port2 configuration[/caption] [caption id="attachment_271" align="alignnone" width="1185"] Figure 8.24: Port3 configuration[/caption]
4. Go to Global VDOM > Network Interfaces > Create a new VDOM Link, and configure it as Figure 8.25: [caption id="attachment_272" align="aligncenter" width="1192"] Figure 8.25: Create a VDOM link between Sales and Accounting[/caption]
5. In Accounting VDOM, Create two static routes:
   • Destination: 192.168.1.0/255.255.255.0
   • Interface: Accounting-Sales
   • Gateway: 10.10.10.2
   [caption id="attachment_274" align="aligncenter" width="400"] Figure 8.26: Create a static route in Accounting VDOM[/caption]
   • Destination: 172.16.1.0/255.255.255.0
   • Interface: Accounting-Sales
   • Gateway: 10.10.10.2
   [caption id="attachment_274" align="aligncenter" width="400"] Figure 8.27: Create a static route in Accounting VDOM[/caption]
6. In Accounting VDOM, Create two Firewall Policies:
   • Incoming: Port 2
   • Outgoing: AS0
   • NAT Disable
   [caption id="attachment_276" align="aligncenter" width="400"] Figure 8.28: Create a Firewall Policy in Accounting VDOM from Port2 to AS0[/caption] Incoming:
   • Incoming: AS0
   • Outgoing: Port2
   • NAT Disable
   [caption id="attachment_276" align="aligncenter" width="400"] Figure 8.29: Create a Firewall Policy in Accounting VDOM from AS0 to Port2[/caption]
7. In Sales VDOM, Create two static routes:
   • Destination: 192.168.1.0/255.255.255.0
   • Interface: AS1
   • Gateway: 10.10.10.1
   [caption id="attachment_278" align="aligncenter" width="400"] Figure 8.30: Create a static route in Sales VDOM[/caption]
   • Destination: 172.16.1.0/255.255.255.0
   • Interface: AS1
   • Gateway: 10.10.10.1
   [caption id="attachment_278" align="aligncenter" width="400"] Figure 8.31: Create a static route in Sales VDOM[/caption]
8. In Sales VDOM, Create two Firewall Policies:
   • Incoming: Port3
   • Outgoing: AS1
   • NAT Disable
   [caption id="attachment_280" align="aligncenter" width="400"] Figure 8.32: Create a Firewall Policy in Sales VDOM from Port3 to AS1[/caption]
   • Incoming: AS1
   • Outgoing: Port3
   • NAT Disable
   [caption id="attachment_280" align="aligncenter" width="400"] Figure 8.33: Create a Firewall Policy in Sales VDOM from AS1 to Port3[/caption]
9. Now, you should verify your configuration and should be able to ping from WebTerm1 to WebTerm2. [caption id="attachment_281" align="aligncenter" width="711"] Figure 8.34: Verify configuration[/caption] To delete a VDOM link in the CLI:
   config system vdom-link delete <VDOM-LINK-Name> end

]]> 282 245 6 0 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/ Fri, 11 Mar 2022 09:25:22 +0000 https://opentextbc.ca/fortigatefirewall/chapter/sd-wan/

Learning Objectives

• Create a Demo of SDWAN
• Configure SDWAN features

Scenario: Software-defined wide-area network (SD-WAN) solutions transform an organization’s capabilities by leveraging the corporate wide-area network (WAN) as well as multi-cloud connectivity to deliver high-speed application performance at the WAN edge of branch sites. One of the chief benefits of SD-WAN is that it provides a dynamic path selection among connectivity options—MPLS, 4G/5G, or broadband—ensuring organizations can quickly and easily access business-critical cloud applications.[footnote]SD-WAN Document Library[/footnote] In this scenario, we are simulating SD-WAN by using OpenWrt and this allows you to play with the features of SD-WAN. Port 4 and Port 5 acts like your different connection and you can manage them through SD-WAN.

[caption id="attachment_293" align="alignnone" width="1109"] Figure 9.1: Main scenario[/caption]

Table 9.1: Devices configuration

Device	IP address
WebTerm1 (WRT Manager)	192.168.1.2/24
WebTerm2 (Firewall Manager)	192.168.20.2/24, GW: 192.168.20.1, DNS: 4.2.2.4
FortiGate	Port 3: 192.168.20.1/24 Port 4: 10.200.2.1/24 Port 5: 10.200.3.1/24
OpenWrt	Eth0: connected to WRT Manager Eth1: connected to NAT Eth2: 10.200.2.254/24 Eth3: 10.200.3.254/24
NAT

Configure OpenWrt

To configure OpenWrt, you should connect through port eth0. By default, the IP address of eth0 is 192.168.1.1/24. So, you can set the WRTManager as 192.168.1.2/24 and connect to OpenWrt through the web browser. You can type in the browser: http://192.168.1.1, and click on "Login" without entering any password. [caption id="attachment_293" align="aligncenter" width="1227"] Figure 9.2: OpenWrt[/caption] Then, go to network > interfaces > Add new interface … And Enter the following information:

• Name of Interface: LAN2
• Cover the following interface: eth2
• Then, submit and add IPV4: 10.200.2.254, netmask: 255.255.255.0
• And finally, under Firewall Settings select firewall-zone as Lan

[caption id="attachment_293" align="aligncenter" width="1123"] Figure 9.3: Add a new interface[/caption] [caption id="attachment_293" align="aligncenter" width="600"] Figure 9.4: LAN2 IPv4 configuration[/caption] [caption id="attachment_293" align="alignnone" width="1123"] Figure 9.5: Firewall settings for LAN2[/caption]

• Name of Interface: LAN3
• Cover the following interface: eth3
• Then, submit and add IPv4: 10.200.3.254  netmask: 255.255.255.0
• And finally, under Firewall Settings select firewall-zone as Lan

[caption id="attachment_293" align="aligncenter" width="1119"] Figure 9.6: Add a new interface (LAN3)[/caption] [caption id="attachment_293" align="aligncenter" width="500"] Figure 9.7: IP configuration for LAN3[/caption] [caption id="attachment_293" align="alignnone" width="1119"] Figure 9.8: Firewall settings for LAN3[/caption] Your interfaces in OpenWrt should be like Figure 9.9: [caption id="attachment_293" align="aligncenter" width="1235"] Figure 9.9: OpenWrt Interfaces[/caption]

Firewall Configuration

1. Set the port3 as a management port and connect it to Firewall Manager (WebTerm2).
   FGVM01TM19008000 # config system interface FGVM01TM19008000 (interface) # edit port3 FGVM01TM19008000 (port3) # set ip 192.168.20.1/24 FGVM01TM19008000 (port3) # set allowaccess http https FGVM01TM19008000 (port3) # end
2. Go to Firewall > Network > Interfaces > port4. Set Name as WAN2 and IPv4 as 10.200.2.1/24. [caption id="attachment_294" align="alignnone" width="1148"] Figure 9.10: Port4 configuration[/caption]
3. Go to Firewall > Network > Interfaces > port 5. Set Name as WAN3 and IPv4 as 10.200.3.1/24. [caption id="attachment_295" align="aligncenter" width="1088"] Figure 9.11: Port5 configuration[/caption]
4. Go to Network > SD-WAN > Select Interface Port4. Gateway: 10.200.2.254. [caption id="attachment_296" align="aligncenter" width="500"] Figure 9.12: Add port4 as SD-WAN members[/caption]
5. Add SD-WAN > Select Interface Port5. Gateway: 10.200.3.254. [caption id="attachment_298" align="aligncenter" width="500"] Figure 9.13: Add port5 as SD-WAN members[/caption] [caption id="attachment_298" align="aligncenter" width="500"] Figure 9.14: SD-WAN Zones[/caption]
6. Create a static route as Figure 9.15. [caption id="attachment_299" align="aligncenter" width="500"] Figure 9.15: Create a static route to SD-WAN[/caption]
7. Create a firewall policy as following table:

   Table 9.2: Firewall Policy configuration

   Field	Value
   Name	SDWAN
   Incoming Interface	LAN (PORT3)
   Outgoing Interface	SD-WAN
   Source	ALL
   Destination	ALL
   Schedule	Always
   Service	ALL

   [caption id="attachment_300" align="aligncenter" width="500"] Figure 9.16: Create a Firewall Policy[/caption]
8. Go to Network > SD-WAN Rule, create a rule as follows:
   • Name: MyRule
   • Source Address: All
   • Destination Address: All
   • Protocol Number: Any
   • Strategy: Best Quality
   • Interface Preference: Port 4, Port 5
   [caption id="attachment_301" align="aligncenter" width="500"] Figure 9.17: Priority Rule[/caption]
9. Measured SLA. Create a SLA:
   • Name: MySLA
   • Protocol: Ping
   • Server: 4.2.2.4
   • Add Target and leave the default parameters
   [caption id="attachment_304" align="aligncenter" width="450"] Figure 9.18: Add target[/caption] [caption id="attachment_304" align="aligncenter" width="400"] Figure 9.19: Create a SLA[/caption] [caption id="attachment_304" align="aligncenter" width="924"] Figure 9.20: SD-WAN Configuration[/caption]
10. Go to Network > SD-WAN and verify your SD-WAN Usage. [caption id="attachment_305" align="aligncenter" width="986"] Figure 9.21: SD-WAN usage[/caption]
11. Now, go to GN3 and disconnect port4. You should be able to reach the Internet from Firewall Manager. [caption id="attachment_306" align="aligncenter" width="350"] Figure 9.22: Verify configuration[/caption]
12. Go to Network > SD-WAN and verify your SD-WAN Usage. [caption id="attachment_307" align="alignnone" width="983"] Figure 9.23: Status of interfaces[/caption]
13. Open the browser in the Firewall Manager and type msn.com and then go to the Dashboard > FortiView Sessions. Verify your result. [caption id="attachment_309" align="aligncenter" width="400"] Figure 9.24: Verify configuration[/caption] [caption id="attachment_309" align="aligncenter" width="1241"] Figure 9.25: FortiView Sessions[/caption]
14. Go to Log & Report > Event > SD-WAN Event. Verify your result. [caption id="attachment_310" align="alignnone" width="1242"] Figure 9.26: SD-WAN Events[/caption]

]]> 311 284 6 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/ Thu, 28 Apr 2022 02:11:05 +0000 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-azure/

Learning Objectives

• Configure a Virtual Network Gateway in Azure
• Configure a local network gateway
• Create an IPSEC VPN between Firewall on-Premise and Azure

Scenario: We are going to connect on premise FortiGate to Azure Virtual Gateway. This is going to be IPsec VPN between FortiGate and Azure. First, we will configure Azure and then connect FortiGate through Port1 to Azure Virtual Gateway.

[caption id="attachment_349" align="alignnone" width="1275"] Figure 10.1: Main scenario[/caption]

Table 10.1: On-premise devices configuration

Device	Configuration	Access
FortiGate	Port 1: DHCP Client Port 2: 192.168.10.1/24	Port1: HTTP, HTTPS, PING
WebTerm1	192.168.10.2/24	-

Azure Configuration

1. Create a resource group in Azure as following:
   • Resource group: FG
   • Region: West US
   [caption id="attachment_317" align="aligncenter" width="1905"] Figure 10.2: Create a resource group[/caption] [caption id="attachment_317" align="aligncenter" width="1062"] Figure 10.3: Create a resource group[/caption] [caption id="attachment_317" align="aligncenter" width="400"] Figure 10.4: Create a resource group[/caption]
2. Create a virtual network as following:
   • Resource group: FG
   • Name: Azure-FG
   • Region: West US
   • Change the default subnet: 10.0.1.0/24
   [caption id="attachment_322" align="aligncenter" width="1039"] Figure 10.5: Create a virtual network[/caption] [caption id="attachment_322" align="aligncenter" width="1493"] Figure 10.6: Create a virtual network (change default subnet)[/caption] [caption id="attachment_322" align="aligncenter" width="1069"] Figure 10.7: Create a virtual network[/caption] [caption id="attachment_322" align="alignnone" width="1086"] Figure 10.8: Create a virtual network[/caption] [caption id="attachment_322" align="aligncenter" width="450"] Figure 10.9: Create a virtual network[/caption]
3. Create a virtual network gateway as following:
   • Name: Azure-VPN-FG
   • Region: West US
   • Generation: Generation1
   • Gateway subnet address range: 10.0.0.0/24
   • Public IP address name: AzurePublic
   Click on "Create and Review". It takes around 25 minutes to deploy a virtual network gateway in Azure. [caption id="attachment_328" align="alignnone" width="1905"] Figure 10.10: Create a virtual network gateway[/caption] [caption id="attachment_328" align="alignnone" width="1007"] Figure 10.11: Create a virtual network gateway[/caption] [caption id="attachment_328" align="alignnone" width="1058"] Figure 10.12: Create a virtual network gateway[/caption] [caption id="attachment_328" align="aligncenter" width="400"] Figure 10.13: Create a virtual network gateway (review + create)[/caption] [caption id="attachment_328" align="alignnone" width="1878"] Figure 10.14: Create a virtual network gateway (deployment)[/caption] [caption id="attachment_328" align="alignnone" width="1908"] Figure 10.15: Deployment of virtual network gateway[/caption]
4. Create a local network gateway as following:
   • Resource Group: FG
   • Region: West US
   • Name: FortiGate
   • IP Address: IP_Address_of_Port1_FortiGate (On premise)
   • Address Space: IP_Address_LocalNetwork
   [caption id="attachment_332" align="alignnone" width="1902"] Figure 10.16: Create a local network gateway[/caption] [caption id="attachment_332" align="alignnone" width="1225"] Figure 10.17: Create a local network gateway[/caption] [caption id="attachment_332" align="aligncenter" width="400"] Figure 10.18: Create a local network gateway (review + create)[/caption] [caption id="attachment_332" align="alignnone" width="1487"] Figure 10.19: Verify local network gateway deployment[/caption]
5. Go to Virtual network gateway and create a connection in Virtual network gateways > connections > Add: [caption id="attachment_335" align="aligncenter" width="1910"] Figure 10.20: Add connections[/caption] [caption id="attachment_335" align="aligncenter" width="400"] Figure 10.21: Connection configuration[/caption] Based on the Microsoft article “About cryptographic requirements and Azure VPN gateways”, by default, integrity is SHA384, SHA256, SHA1, MD5 and encryption is AES256, AES192, AES128, DES3, DES. So, we will select SHA1 and AES128 in FortiGate. After doing this step, you should receive a Public IP address in Overview tab. [caption id="attachment_335" align="aligncenter" width="1883"] Figure 10.22: Verify public IP address[/caption]

FortiGate Configuration

1. First, we will configure port 2 IP address. [caption id="attachment_336" align="alignnone" width="1233"] Figure 10.23: Set an IP address for port2[/caption] [caption id="attachment_336" align="alignnone" width="1100"] Figure 10.24: Port1 and Port2 IP addresses[/caption]
2. Create a static route to port1 (WAN Port) as Figure 10.25. [caption id="attachment_337" align="alignnone" width="1277"] Figure 10.25: Create a static route[/caption]
3. Create a IPsec Wizard as a custom. [caption id="attachment_341" align="alignnone" width="1382"] Figure 10.26: Create a custom VPN[/caption]
   • Remote Gateway IP Address: Public_IP_Address_Azure_Virtual_Gateway
   • Nat Traversal: Disable
   • Pre-shared Key: The same as Azure key (123456789)
   • Local Address: 192.168.10.0/24
   • Remote Address: 10.0.0.0/16
   • Phase 1: Encryption: AES128, Authentication: SHA-1, DH: 2, lifetime: 28800
   • Phase 2: Encryption: AES128, Authentication: SHA-1, DH: 2, lifetime: 27000
   [caption id="attachment_341" align="aligncenter" width="500"] Figure 10.27: Create a custom VPN[/caption] [caption id="attachment_341" align="aligncenter" width="500"] Figure 10.28: Create a custom VPN[/caption] [caption id="attachment_341" align="aligncenter" width="500"] Figure 10.29: Create a custom VPN[/caption]
4. Create a firewall policy from Port 2 to Tunnel and from Tunnel to Port2. We will create a subnet for LAN on premise and a subnet for Microsoft Azure. Like site-to-site VPN we learned previously, NAT should be disabled here. [caption id="attachment_347" align="aligncenter" width="400"] Figure 10.30: Create a subnet for local network[/caption] [caption id="attachment_347" align="aligncenter" width="400"] Figure 10.31: Create a subnet for Azure local[/caption] [caption id="attachment_347" align="aligncenter" width="1270"] Figure 10.32: Create a policy from port2 to FG-Azure Tunnel[/caption] [caption id="attachment_347" align="alignnone" width="1920"] Figure 10.33: Create a policy from FG-Azure Tunnel to port2[/caption] [caption id="attachment_347" align="aligncenter" width="1258"] Figure 10.34: Create a policy from FG-Azure Tunnel to port2[/caption] [caption id="attachment_347" align="alignnone" width="1915"] Figure 10.35: Firewall Policies[/caption]

Verify Connections

If you navigate to IPsec Tunnel, the status should be up. [caption id="attachment_349" align="alignnone" width="1904"] Figure 10.36: Verify status in FortiGate[/caption] [caption id="attachment_349" align="alignnone" width="1876"] Figure 10.37: Verify status in Azure[/caption]]]> 350 313 1 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/ Fri, 13 May 2022 22:58:33 +0000 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-azure/

Learning Objectives

• Create a FortiGate firewall in Azure through Marketplace
• Identify FortiGate subnets in Azure

Scenario: In this lab, we'll learn how to deploy FortiGate in Azure.

1. Go to Azure Marketplace and search for FortiGate. [caption id="attachment_352" align="aligncenter" width="500"] Figure 10.38: Search for FortiGate[/caption]
2. Select Fortinet FortiGate Next-Generation Firewall. [caption id="attachment_353" align="aligncenter" width="887"] Figure 10.39: Select Fortinet FG Next-Gen[/caption]
3. Then, Select Single VM from dropdown list. [caption id="attachment_354" align="aligncenter" width="500"] Figure 10.40: Select Single VM[/caption]
4. Create a firewall information as Figure 10.41. [caption id="attachment_355" align="aligncenter" width="500"] Figure 10.41: Create a Fortinet firewall[/caption]
5. Leave other tabs as default and press on “Review+ create”. It will validate your information and then you can create a FortiGate Firewall. [caption id="attachment_356" align="aligncenter" width="500"] Figure 10.42: Validate configuration[/caption]
6. Then, it will start deployment of FortiGate. It takes around 5 minutes to deploy FortiGate. [caption id="attachment_358" align="aligncenter" width="856"] Figure 10.43: Deployment is in progress[/caption] [caption id="attachment_358" align="aligncenter" width="1085"] Figure 10.44: Deployment is complete[/caption]
7. After deployment is completed, go to Resource group > FortiGate > Overview and look for FortiGate Public IP address. [caption id="attachment_360" align="aligncenter" width="1351"] Figure 10.45: FortiGate public IP address[/caption] [caption id="attachment_360" align="aligncenter" width="1115"] Figure 10.46: FortiGate public IP address[/caption]
8. Type the IP address in the browser. You should be able to see the FortiGate credentials page. Enter your username and password to login in the firewall. [caption id="attachment_362" align="aligncenter" width="1470"] Figure 10.47: FortiGate firewall credential page[/caption] [caption id="attachment_362" align="aligncenter" width="500"] Figure 10.48: FortiGate dashboard[/caption]
9. Based on Fortinet description, we have three subnets in Azure for FortiGate. External, Internal and Protected. If you are planning to connect a new virtual machine to the firewall internal interface, you should connect it to the Protected subnet.

Table 10.2: FortiGate Subnet description in Azure

Subnet	Description
Subnet1	External subnet used to connect the FortiGate-VM to the Internet.
Subnet2	Internal subnet used as a transit network to one or multiple protected networks containing backend services, such as the web server.
Subnet3	Protected subnet used to deploy services. You can deploy multiples of these subnets. The traffic is sent to the FortiGate for inspection using UDR.

]]> 363 313 2 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/ Wed, 18 May 2022 22:44:43 +0000 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-azure/

Learning Objectives

• Configure a VPN Wizard in Azure
• Configure site-to-site VPN between FortiGate on premise and Azure
• Identify FortiGate subnets in Azure

[caption id="attachment_365" align="aligncenter" width="1265"] Figure 10.49: Main scenario[/caption]

Scenario: In this lab, we are going to create a site-to-site VPN from FortiGate on premise to FortiGate in the Azure. Knowing the configuration from section 10.2 is necessary for this lab. Port1 is set as a DHCP, so they will receive an IP address from Cloud.

Table 10.3: Devices configuration

Device	Interface	IP address
FortiGate	Port 1	DHCP Client
	Port 2	192.168.10.1/24
WebTerm	Eth0	192.168.10.2/24

1. On Premise FortiGate Configuration. Follow these steps:
   1. Configure the interfaces of the firewall. Port2 by default is an internal interface and name as a "LAN" and Port1 is an external interface and name as a "WAN". [caption id="attachment_366" align="aligncenter" width="1126"] Figure 10.50: Firewall interfaces[/caption]
   2. Create a site-to-site VPN from IPsec Wizard as Figures 10.51 to 10.53. [caption id="attachment_369" align="aligncenter" width="1103"] Figure 10.51: Select VPN name[/caption] [caption id="attachment_369" align="aligncenter" width="1085"] Figure 10.52: Set remote IP address[/caption] [caption id="attachment_369" align="aligncenter" width="1126"] Figure 10.53: Set Policy & Routing[/caption]
   3. Create a static route to the default gateway. [caption id="attachment_370" align="aligncenter" width="500"] Figure 10.54: Set a default gateway[/caption]
2. Azure Configuration. Follow these steps:
   1. Create a FortiGate firewall in Azure and configure the interfaces. You need to do all steps found in section 10.1.
   2. Create a VPN from IPsec Wizard as Figures 10.55 to 10.57. [caption id="attachment_373" align="aligncenter" width="1060"] Figure 10.55: Select VPN name[/caption] [caption id="attachment_373" align="aligncenter" width="1063"] Figure 10.56: Set a remote IP address[/caption] [caption id="attachment_373" align="aligncenter" width="1094"] Figure 10.57: Set Policy & Routing[/caption]
   3. Add a Linux or Windows Virtual Machine to Protected subnet. You don't need to enable public IP address. Your private IP address should be in the range of 10.0.2.0/24.
   4. Go to VPN > IPsec Tunnels and check status of the tunnel. [caption id="attachment_374" align="aligncenter" width="1402"] Figure 10.58: Check status of tunnel[/caption]
   5. You should be able to ping from WebTerm to the Virtual Machine. [caption id="attachment_375" align="aligncenter" width="531"] Figure 10.59: Ping from WebTerm to Windows VM[/caption]

]]> 376 313 3 0 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/ Fri, 27 May 2022 02:00:21 +0000 https://opentextbc.ca/fortigatefirewall/chapter/ipsec-vpn-fortigate-aws/

Learning Objectives

• Configure a Customer Gateway in AWS
• Configure a Virtual Private Gateway
• Create an IPsec VPN between FortiGate on-Premise and AWS

Scenario: We are going to connect on premise FortiGate to AWS Virtual Gateway. This is going to be IPsec VPN between FortiGate and AWS. First, we will configure AWS and then connect FortiGate through Port1 to AWS Virtual Gateway

  [caption id="attachment_424" align="aligncenter" width="969"] Figure 10.60: Main scenario[/caption]

Table 10.4: On-premise devices configuration

Device	Configuration	Access
FortiGate	Port 1: DHCP Client Port 2: 192.168.10.1/24	Port1: HTTP, HTTPS, PING
WebTerm1	192.168.10.2/24	-

AWS Configuration

1. Create a VPC for AWS as follows:
   • Name tag: AWS Subnet
   • IPv4 CIDR: 10.0.0.0/16
   [caption id="attachment_380" align="aligncenter" width="1411"] Figure 10.61: Create a VPC[/caption] [caption id="attachment_380" align="aligncenter" width="450"] Figure 10.62: Create a VPC named "AWS Subnet"[/caption]
2. Create a private subnet under AWS VPC as follows:
   • VPC: AWS Subnet
   • Subnet Name: Private
   • IPv4 CIDR block: 10.0.1.0/24
   [caption id="attachment_381" align="aligncenter" width="400"] Figure 10.63: Create a subnet under AWS VPC[/caption]
3. Create an internet gateway as follows: [caption id="attachment_385" align="aligncenter" width="1380"] Figure 10.64: Create an internet gateway[/caption] [caption id="attachment_385" align="aligncenter" width="500"] Figure 10.65: Select Name as AWS-IGW[/caption] [caption id="attachment_385" align="aligncenter" width="1380"] Figure 10.66: Attach the internet gateway to VPC[/caption] [caption id="attachment_385" align="aligncenter" width="500"] Figure 10.67: Attach the internet gateway to VPC[/caption]
4. Create a static route to the internet gateway (AWS-IGW). Edit Routes as follows: [caption id="attachment_389" align="aligncenter" width="1376"] Figure 10.68: Edit routes[/caption] [caption id="attachment_389" align="aligncenter" width="1367"] Figure 10.69: Add a new route 0.0.0.0/0 to your internet gateway[/caption] [caption id="attachment_389" align="aligncenter" width="1361"] Figure 10.70: Add a new route 0.0.0.0/0 to your internet gateway[/caption] [caption id="attachment_389" align="aligncenter" width="1330"] Figure 10.71: Route tables overview[/caption]
5. Create a customer gateway as follows: [caption id="attachment_391" align="aligncenter" width="1380"] Figure 10.72: Create a customer gateway[/caption] [caption id="attachment_391" align="aligncenter" width="500"] Figure 10.73: Create a customer gateway[/caption]
6. Create a virtual private gateway as follows: [caption id="attachment_395" align="aligncenter" width="1376"] Figure 10.74: Create a virtual private gateway[/caption] [caption id="attachment_395" align="aligncenter" width="500"] Figure 10.75: Create a virtual private gateway on FortiGate[/caption] [caption id="attachment_395" align="aligncenter" width="1379"] Figure 10.76: Attach virtual private gateway to VPC[/caption] [caption id="attachment_395" align="aligncenter" width="500"] Figure 10.77: Attach virtual private gateway to VPC[/caption]
7. Create a Site-to-Site VPN connection as follows:
   • Name Tag: VPNAWS
   • Target gateway type: Virtual private gateway
   • Virtual Private Gateway: FortiGate
   • Customer Gateway ID: AWS-VPN-FG
   • Routing options: Static
   • Static IP prefixes: 192.168.10.0/24
   • Local IPv4 network CIDR: 192.168.10.0/24
   • Remote IPV4 network CIDR: 10.0.1.0/24
   • Tunnel 1 and Tunnel 2 options: leave it as default
   [caption id="attachment_401" align="aligncenter" width="1377"] Figure 10.78: Create a site-to-site VPN connection[/caption] [caption id="attachment_401" align="aligncenter" width="500"] Figure 10.79: Create a site-to-site VPN connection with FortiGate[/caption] [caption id="attachment_401" align="aligncenter" width="500"] Figure 10.80: Create a site-to-site VPN connection with FortiGate[/caption] [caption id="attachment_401" align="aligncenter" width="1145"] Figure 10.81: Create a site-to-site VPN connection with FortiGate[/caption] [caption id="attachment_401" align="aligncenter" width="400"] Figure 10.82: Download configuration[/caption] [caption id="attachment_401" align="aligncenter" width="1145"] Figure 10.83: Verify public IP address[/caption]
8. Open the file that you have downloaded on AWS. It will show phase 1 and phase 2 configuration. [caption id="attachment_403" align="aligncenter" width="959"] Figure 10.84: IPsec Phase 1[/caption] [caption id="attachment_403" align="aligncenter" width="878"] Figure 10.85: IPsec Phase 2[/caption]

FortiGate Configuration

1. First, we will configure port1 and port2 IP addresses. port1 should be set as DHCP client and port2 should be set as 192.168.10.1/24. [caption id="attachment_405" align="aligncenter" width="500"] Figure 10.86: Set an IP address for port2[/caption] [caption id="attachment_405" align="aligncenter" width="935"] Figure 10.87: Port1 and Port2 IP addresses[/caption]
2. Create a static route to port1 (WAN Port) as Figure 10.88. [caption id="attachment_406" align="aligncenter" width="1060"] Figure 10.88: Create a static route[/caption]
3. Create an IPsec Wizard as a custom as follows:
   • Remote Gateway IP Address: Public_IP_Address_AWS_Virtual_Gateway
   • Nat Traversal: Disable
   • Pre-shared Key: The same as AWS key(psWvIznNXaD3e1bWB9mVrODkrYALmrBO)
   • Local Address: 192.168.10.0/24
   • Remote Address: 10.0.0.0/16
   • Phase 1: Encryption: AES128, Authentication: SHA-1, DH: 2, lifetime: 28800
   • Phase 2: Encryption: AES128, Authentication: SHA-1, DH: 2, lifetime: 3600
   • IKE: version 2
   [caption id="attachment_410" align="aligncenter" width="1143"] Figure 10.89: Create a custom VPN[/caption] [caption id="attachment_410" align="aligncenter" width="500"] Figure 10.90: Create a custom VPN[/caption] [caption id="attachment_410" align="aligncenter" width="500"] Figure 10.91: Create a custom VPN[/caption] [caption id="attachment_410" align="aligncenter" width="500"] Figure 10.92: Create a custom VPN[/caption]
4. Set an IP address for FG-AWS tunnel. We will set the IP address based on the configuration file. [caption id="attachment_413" align="aligncenter" width="500"] Figure 10.93: Configuration file for setting an IP address for FG-AWS tunnel[/caption] [caption id="attachment_413" align="aligncenter" width="964"] Figure 10.94: Set an IP address for FG-AWS tunnel[/caption] [caption id="attachment_413" align="aligncenter" width="500"] Figure 10.95: Set an IP address for FG-AWS tunnel[/caption]
5. Create a static route from FG-LAN to AWS-LAN. We will set a static route based on the configuration file. [caption id="attachment_416" align="aligncenter" width="731"] Figure 10.96: Configuration file for creating a static route from FG-LAN to AWS-LAN[/caption] [caption id="attachment_416" align="aligncenter" width="1055"] Figure 10.97: Create a static route from FG-LAN to AWS-LAN[/caption] [caption id="attachment_416" align="aligncenter" width="1076"] Figure 10.98: Create a static route from FG-LAN to AWS-LAN[/caption]
6. Create a firewall policy from Port2 to Tunnel and from Tunnel to Port2. We will create a subnet for LAN on premise and a subnet for AWS. Also, in site-to-site VPN, NAT should be disabled here. [caption id="attachment_422" align="aligncenter" width="400"] Figure 10.99: Create a subnet for local network[/caption] [caption id="attachment_422" align="aligncenter" width="400"] Figure 10.100: Create a subnet for AWS local network[/caption] [caption id="attachment_422" align="aligncenter" width="1044"] Figure 10.101: Create a policy from port2 to FG-AWS Tunnel[/caption] [caption id="attachment_422" align="aligncenter" width="1007"] Figure 10.102: Create a policy from FG-AWS Tunnel to port2[/caption] [caption id="attachment_422" align="aligncenter" width="1047"] Figure 10.103: Create a policy from AWS-FG Tunnel to port2[/caption] [caption id="attachment_422" align="aligncenter" width="1253"] Figure 10.104: Firewall Policies Overview[/caption]

Verify Connections

If you navigate to IPsec Tunnel, the status should be up. [caption id="attachment_424" align="aligncenter" width="1340"] Figure 10.105: Verify tunnel status in FortiGate (on premise)[/caption] [caption id="attachment_424" align="aligncenter" width="1167"] Figure 10.106: Verify tunnel status in AWS[/caption]]]> 425 313 4 0 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/ Fri, 27 May 2022 02:00:53 +0000 https://opentextbc.ca/fortigatefirewall/chapter/deploy-fortigate-in-aws/

Learning Objectives

• Create a VPC, public and private subnet, internet gateway, route tables
• Create a FortiGate firewall in AWS through Marketplace
• Identify FortiGate subnets in AWS

Scenario: In this lab, we’ll learn how to deploy FortiGate in AWS.

AWS Configuration

1. Create a VPC. [caption id="attachment_428" align="aligncenter" width="1391"] Figure 10.107: Create a VPC[/caption] [caption id="attachment_428" align="aligncenter" width="400"] Figure 10.108: Create a VPC named "AWS-VPC"[/caption]
2. Create a subnet. [caption id="attachment_431" align="aligncenter" width="1382"] Figure 10.109: Create a subnet[/caption] [caption id="attachment_431" align="aligncenter" width="400"] Figure 10.110: Create a public subnet under AWS-VPC[/caption] [caption id="attachment_431" align="aligncenter" width="400"] Figure 10.111: Create a private subnet under AWS-VPC[/caption]
3. Create an internet gateway. [caption id="attachment_435" align="aligncenter" width="1385"] Figure 10.112: Create an internet gateway[/caption] [caption id="attachment_435" align="aligncenter" width="400"] Figure 10.113: Create an internet gateway[/caption] [caption id="attachment_435" align="aligncenter" width="1364"] Figure 10.114: Attach an internet gateway to VPC[/caption] [caption id="attachment_435" align="aligncenter" width="450"] Figure 10.115: Attach an internet gateway to VPC[/caption]
4. Create a new Public RouteBy default, name of the “built-in route” is “-”. Rename it to Private Route. [caption id="attachment_441" align="aligncenter" width="1351"] Figure 10.116: Edit private route[/caption] Go to Route tables > create route table. [caption id="attachment_441" align="aligncenter" width="400"] Figure 10.117: Create a public route[/caption] [caption id="attachment_441" align="aligncenter" width="1365"] Figure 10.118: Edit routes on Public Route[/caption] [caption id="attachment_441" align="aligncenter" width="1340"] Figure 10.119: Create a new default route to the internet gateway[/caption] [caption id="attachment_441" align="aligncenter" width="1308"] Figure 10.120: Associate Public Subnet to Public Route[/caption] [caption id="attachment_441" align="aligncenter" width="1347"] Figure 10.121: Associate Public Subnet to Public Route[/caption]
5. Create Key Pair. Go to EC2 - Key Pairs > Create Key Pair. [caption id="attachment_442" align="aligncenter" width="450"] Figure 10.122: Create a key pair[/caption]
6. Create Instances. Go to EC2 – Instances > Launch instances. [caption id="attachment_453" align="aligncenter" width="1369"] Figure 10.123: Launch a FortiGate instance[/caption] [caption id="attachment_453" align="aligncenter" width="1329"] Figure 10.124: Select Fortinet FortiGate Next-Generation Firewall[/caption] [caption id="attachment_453" align="aligncenter" width="1047"] Figure 10.125: Accept FortiGate licence[/caption] [caption id="attachment_453" align="aligncenter" width="877"] Figure 10.126: Select FortiGate instance type[/caption] [caption id="attachment_453" align="aligncenter" width="839"] Figure 10.127: Select Network is “AWS-VPC”, Subnet is "Public Subnet" and Auto-assign Public IP is "Enable"[/caption] [caption id="attachment_453" align="aligncenter" width="1079"] Figure 10.128: Leave the Add storage as the default[/caption] [caption id="attachment_453" align="aligncenter" width="979"] Figure 10.129: Assign Tag with Key is Name and Value is FG[/caption] [caption id="attachment_453" align="aligncenter" width="1076"] Figure 10.130: Change to FortiGate Security Group and add RDP and ICMP to the Security Group[/caption] [caption id="attachment_453" align="aligncenter" width="450"] Figure 10.131: Accept key pair and launch instances[/caption] [caption id="attachment_453" align="aligncenter" width="1234"] Figure 10.132: FG instance has been launched successfully[/caption] [caption id="attachment_453" align="aligncenter" width="1334"] Figure 10.133: Change default interface name to FG Public Subnet[/caption]
7. Add a new private subnet interface. [caption id="attachment_458" align="aligncenter" width="450"] Figure 10.134: Create FG Private Subnet[/caption] [caption id="attachment_458" align="aligncenter" width="450"] Figure 10.135: Create FG Private Subnet[/caption] [caption id="attachment_458" align="aligncenter" width="1126"] Figure 10.136: Change to FG Private Subnet[/caption] [caption id="attachment_458" align="aligncenter" width="1101"] Figure 10.137: Attach the FG Private Subnet to FG[/caption] [caption id="attachment_458" align="aligncenter" width="400"] Figure 10.138: Attach the FG Private Subnet to FG[/caption]
8. Disable Source and Destination check on both FG Private and Public Subnet. [caption id="attachment_461" align="aligncenter" width="1130"] Figure 10.139: Disable source/destination check on FG Private Subnet[/caption] [caption id="attachment_461" align="aligncenter" width="400"] Figure 10.140: Disable source/destination check on FG Private Subnet[/caption] [caption id="attachment_461" align="aligncenter" width="1131"] Figure 10.141: Disable source/destination check on FG Public Subnet[/caption] [caption id="attachment_461" align="aligncenter" width="400"] Figure 10.142: Disable source/destination check on FG Public Subnet[/caption]
9. Edit private route table. [caption id="attachment_464" align="aligncenter" width="1164"] Figure 10.143: Edit Private Route[/caption] [caption id="attachment_464" align="aligncenter" width="1366"] Figure 10.144: Add a default route and select Network Interface[/caption] [caption id="attachment_464" align="aligncenter" width="400"] Figure 10.145: Add a default route to target FG Private Subnet[/caption]
10. Verify Public and Private IP address of FG. [caption id="attachment_465" align="aligncenter" width="1072"] Figure 10.146: Verify public and private IP address of FG[/caption]
11. Accessing FortiGate on AWS.Type the IP address in the browser. You should be able to see the FortiGate credentials page. Enter your username and password to login to the firewall. [caption id="attachment_470" align="aligncenter" width="400"] Figure 10.147: Access FortiGate[/caption] [caption id="attachment_470" align="aligncenter" width="400"] Figure 10.148: Access FortiGate[/caption] [caption id="attachment_470" align="aligncenter" width="300"] Figure 10.149: Username is admin and password is instance ID of FortiGate[/caption] [caption id="attachment_470" align="aligncenter" width="300"] Figure 10.150: Change password[/caption] [caption id="attachment_470" align="aligncenter" width="1021"] Figure 10.151: FortiGate dashboard[/caption] You should set port1 and port2 as DHCP client to receive an IP address from External and LAN subnet. Port1 is belong to External subnet or the internet and port2 is belong to the LAN.

Table 10.5: Port1 and Port2 description

Subnet	Description
Port1	External subnet used to connect the FortiGate-VM to the internet.
Port2	LAN subnet used to deploy services.

[caption id="attachment_472" align="aligncenter" width="400"] Figure 10.152: Change port2 to DHCP Client[/caption] [caption id="attachment_472" align="aligncenter" width="500"] Figure 10.153: FortiGate interfaces[/caption]]]> 473 313 5 0 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/ Fri, 27 May 2022 02:01:20 +0000 https://opentextbc.ca/fortigatefirewall/chapter/s2s-vpn-fortigate-on-prem-aws/

Learning Objectives

• Configure a VPN Wizard in AWS
• Configure site-to-site VPN between FortiGate on premise and AWS
• Identify FortiGate subnets in AWS

[caption id="attachment_475" align="aligncenter" width="1050"] Figure 10.154: Main scenario[/caption]

Scenario: In this lab, we are going to create a site-to-site VPN from FortiGate on premise to FortiGate in the AWS. Knowing the configuration of section 10.5 is necessary for this lab. Port1 FortiGate on premise is set as a DHCP, so it will receive an IP address from Cloud.

On-Premise FortiGate Configuration

Table 10.6: Devices configuration

Device	Interface	IP address
FortiGate	Port 1	DHCP Client
Port 2	192.168.10.1/24	-
WebTerm	Eth0	192.168.10.2/24

1. Configure the interfaces of the firewall. Port2 by default is an internal interface and named “LAN” and Port1 is an external interface and named “WAN”. [caption id="attachment_476" align="aligncenter" width="841"] Figure 10.155: Firewall interfaces[/caption]
2. Create a site-to-site VPN from IPsec Wizard as Figures 10.156 to 10.158. [caption id="attachment_479" align="aligncenter" width="856"] Figure 10.156: Select VPN name[/caption] [caption id="attachment_479" align="aligncenter" width="870"] Figure 10.157: Set remote IP address[/caption] [caption id="attachment_479" align="aligncenter" width="866"] Figure 10.158: Set Policy & Routing[/caption]
3. Create a static route to the default gateway. [caption id="attachment_480" align="aligncenter" width="812"] Figure 10.159: Set a default gateway[/caption]

AWS Configuration

1. Create a FortiGate firewall in AWS and configure the interfaces. You need to do all steps in section 10.5.
2. Create a VPN from IPsec Wizard as Figures 10.160 to 10.162. [caption id="attachment_483" align="aligncenter" width="852"] Figure 10.160: Select VPN name[/caption] [caption id="attachment_483" align="aligncenter" width="855"] Figure 10.161: Set a remote IP address[/caption] [caption id="attachment_483" align="aligncenter" width="856"] Figure 10.162: Set Policy & Routing[/caption]
3. Create static routes on FortiGate. We are going to create two static routes as follows: [caption id="attachment_486" align="aligncenter" width="400"] Figure 10.163: Set a default gateway via 10.0.0.1[/caption] [caption id="attachment_486" align="aligncenter" width="400"] Figure 10.164: Create a static route to 10.0.0.0/16 network via 10.0.1.1[/caption] [caption id="attachment_486" align="aligncenter" width="937"] Figure 10.165: Overview of static routes on FortiGate[/caption]
4. Go to VPN > IPsec Tunnels and check status of the tunnel. [caption id="attachment_488" align="aligncenter" width="1200"] Figure 10.166: Check the status of the tunnel on AWS[/caption] [caption id="attachment_488" align="aligncenter" width="1081"] Figure 10.167: Check status of tunnel on FortiGate on premise[/caption]
5. You should be able to ping from WebTerm to Virtual Machine on AWS and vice versa. [caption id="attachment_490" align="aligncenter" width="685"] Figure 10.168: Ping from WebTerm to Windows VM[/caption] [caption id="attachment_490" align="aligncenter" width="450"] Figure 10.169: Ping from Windows VM to WebTerm[/caption]

]]> 491 313 6 0 https://opentextbc.ca/fortigatefirewall/authors/ Tue, 29 Aug 2023 20:25:59 +0000 https://opentextbc.ca/fortigatefirewall/authors/ ]]> 3 0 0 0 https://opentextbc.ca/fortigatefirewall/ Tue, 29 Aug 2023 20:26:00 +0000 https://opentextbc.ca/fortigatefirewall/cover/ ]]> 4 0 0 0 https://opentextbc.ca/fortigatefirewall/table-of-contents/ Tue, 29 Aug 2023 20:26:00 +0000 https://opentextbc.ca/fortigatefirewall/table-of-contents/ ]]> 5 0 0 0 https://opentextbc.ca/fortigatefirewall/about/ Tue, 29 Aug 2023 20:26:00 +0000 https://opentextbc.ca/fortigatefirewall/about/ ]]> 6 0 0 0 https://opentextbc.ca/fortigatefirewall/buy/ Tue, 29 Aug 2023 20:26:00 +0000 https://opentextbc.ca/fortigatefirewall/buy/ ]]> 7 0 0 0 https://opentextbc.ca/fortigatefirewall/access-denied/ Tue, 29 Aug 2023 20:26:00 +0000 https://opentextbc.ca/fortigatefirewall/access-denied/ ]]> 8 0 0 0 https://opentextbc.ca/fortigatefirewall/?metadata=book-information Tue, 29 Aug 2023 20:26:00 +0000 https://opentextbc.ca/fortigatefirewall/?p=12 12 0 1 0 FortiGate Firewall: Practical Guidance and Hands-On Labs by Hamid Talebi is licensed under a CC BY 4.0 licence. If you redistribute all or part of this book, it is recommended the following statement be added to the copyright page so readers can access the original book at no cost:

Download for free from the B.C. Open Collection.

Sample APA-style citation (7th Edition):

Talebi, H. (2023). FortiGate firewall: Practical guidance and hands-on labs. BCcampus. https://opentextbc.ca/fortigatefirewall/

Cover image attribution:

"Firewall" by Chanut-is-Industries is licensed under a Flaticon licence.

Ebook ISBN: 978-1-77420-225-8 Print ISBN: 978-1-77420-224-1 Visit BCcampus Open Education to learn about open education in British Columbia.]]> https://opentextbc.ca/fortigatefirewall/part/main-body/ Fri, 04 Mar 2022 05:29:34 +0000 https://opentextbc.ca/fortigatefirewall/part/main-body/ 23 0 1 0 https://opentextbc.ca/fortigatefirewall/part/policy/ Sun, 03 Apr 2022 01:21:26 +0000 https://opentextbc.ca/fortigatefirewall/part/policy/ 37 0 2 0 https://opentextbc.ca/fortigatefirewall/part/chapter-3-nat/ Sun, 03 Apr 2022 20:13:45 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-3-nat/ 75 0 3 0 https://opentextbc.ca/fortigatefirewall/part/chapter-4-vpn/ Sun, 03 Apr 2022 21:24:13 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-4-vpn/ 95 0 4 0 https://opentextbc.ca/fortigatefirewall/part/chapter-5-authentication/ Tue, 05 Apr 2022 21:53:13 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-5-authentication/ 167 0 5 0 https://opentextbc.ca/fortigatefirewall/part/chapter-6-high-availability/ Wed, 06 Apr 2022 01:09:33 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-6-high-availability/ 193 0 6 0 https://opentextbc.ca/fortigatefirewall/part/chapter-7-security/ Wed, 06 Apr 2022 04:35:21 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-7-security/ 206 0 7 0 https://opentextbc.ca/fortigatefirewall/part/chapter-8-vdom/ Thu, 07 Apr 2022 05:33:48 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-8-vdom/ 245 0 8 0 https://opentextbc.ca/fortigatefirewall/part/chapter-9-sdwan/ Thu, 07 Apr 2022 05:35:03 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-9-sdwan/ 284 0 9 0 https://opentextbc.ca/fortigatefirewall/part/chapter-10-cloud/ Thu, 28 Apr 2022 02:10:04 +0000 https://opentextbc.ca/fortigatefirewall/part/chapter-10-cloud/ 313 0 10 0 https://opentextbc.ca/fortigatefirewall/h5p-listing/ Tue, 29 Aug 2023 20:29:14 +0000 https://opentextbc.ca/fortigatefirewall/h5p-listing/ ]]> 551 0 1 0