fortigate防火墻管理系統(tǒng)應(yīng)用-文庫(kù)吧
2025-08-26 21:23 本頁(yè)面
【正文】 FTTB IPVPN IPVPN HUB/Switch IPSEC VPN ( RouteBased VPN) (OSPF, RIP /IPSEC VPN) SSL VPN ADSL IPSec/SSL VPN HSPDA IPVPN/ G System Dashboard System Information Licensing and Entitlements Content and Attack Statistics Menu Message Console DHCP Server ? A DHCP server may be configured on any interface with a static IP address ? Multiple DHCP servers on a single interface ? Relay a DHCP request to a remote DHCP server CLI Alert Email ? Generates an upon detection of a message meeting ? a defined severity level or ? event category type ? Up to three recipients on specified mail server ? Supports SMTP authentication Firewall Session Table ? View current sessions on the firewall ? Filter based on: ? Protocol ? Source IP/Port ? Destination IP/Port ? Firewall Policy ID ? Allows session removal 防火牆運(yùn)作模式 I n t e r n e tS w i t c hR o u t e rA T U R企業(yè)內(nèi)部Transparent mode 1. 介於 router和 switch間 , 或 2. 介於 ATUR和 Router間 F o r t i g a t e f i r e w a l lF o r t i g a t e f i r e w a l l無(wú)論是 Route/NAT或是 Transparent 模式 , 通過(guò)的封包都會(huì)被 Fortigate進(jìn)行封包檢查 NAT( Network Address Translation) 轉(zhuǎn)址運(yùn)作原理 Inter Internal IP Addresses Public IP Address(es) 企業(yè)網(wǎng)路 ? 將企業(yè)內(nèi)部使用的保留位址轉(zhuǎn)換為合法位址 ? 隱藏內(nèi)部主機(jī)的真實(shí)位址 ,被免遭受攻擊 ? 可以讓企業(yè)內(nèi)部使用更多的主機(jī) NAT ( Network Address Translation) 轉(zhuǎn)址運(yùn)作原理 ? 防火牆 Policy (啓動(dòng) NAT). ? 將內(nèi)部來(lái)源 IP轉(zhuǎn)址成 FG外部網(wǎng)路介面 IP, Fortigate會(huì)記錄 NAT 轉(zhuǎn)址表 . ? 將內(nèi)部來(lái)源 IP轉(zhuǎn)址成 FG所定義 IP pool中的 IP, Fortigate會(huì)記錄 NAT轉(zhuǎn)址表 . ? RFC1918: Indicates Private IP Networks. Inter .5 .5 HttpServer .1 SrcIP DstIP Prot SrcPort DstPort Data 6 12345 80 Get
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1