Fortinet FortiGate 1U, Quick Start Manual

Page: 18 / 272

iv The FortiGate Cookbook 5.0.4
Security Policies & Firewall Objects ........................................................................... 69
Ordering security policies to allow different access levels ...............................................70
Controlling when BYOD users can access the Internet ...................................................74
Using port forwarding on a FortiGate unit ........................................................................77
Using AirPlay with iOS, AppleTV, FortiAP, and a FortiGate unit .......................................82
Using AirPrint with iOS and OS X and a FortiGate unit ....................................................90
Security Features ....................................................................................................... 99
Monitoring your network using client reputation ............................................................100
Controlling network access using application control ...................................................103
Protecting a web server from external attacks ...............................................................109
Blocking outgoing traf fi c containing sensitive data........................................................113
Blocking large fi les from entering the network ...............................................................118
Blocking access to speci fi c websites ............................................................................121
Extra help: Web fi ltering .................................................................................................124
Blocking HTTPS traf fi c with web fi ltering .......................................................................125
Using web fi lter overrides to control website access .....................................................130
Wireless Networking ................................................................................................. 139
Setting up a temporary guest WiFi user .........................................................................140
Setting up a network using a FortiGate unit and a FortiAP unit .....................................147
Providing remote users access to the corporate network and Internet .........................152
Authentication .......................................................................................................... 159
Providing Single Sign-On for a Windows AD network with a FortiGate .........................160
Providing Single Sign-On in advanced mode for a Windows AD network.....................166