Fortinet FortiGate 100A, Руководство администратора

Страница: 125 / 374

System maintenance Enabling push updates
FortiGate-100A Administration Guide 01-28007-0068-20041203
125
8 In the Map to IP section, type the IP address of the FortiGate unit on the internal
network.
If the FortiGate unit is operating in NAT/Route mode, enter the IP address of the
external interface.
If the FortiGate unit is operating in Transparent mode, enter the management IP
address.
9 Set the Map to Port to 9443.
10 Select OK.
To add a firewall policy to the FortiGate NAT device
1 Add a new external to internal firewall policy.
2 Configure the policy with the following settings:
3 Select OK.
To configure the FortiGate unit on the internal network
1 Go to System > Maintenance > Update center .
2 Select the Allow Push Update check box.
3 Select the Use override push check box.
4 Set IP to the external IP address added to the virtual IP.
5 Set Port to the external service port added to the virtual IP.
6 Select Apply.
The FortiGate unit sends the override push IP address and port to the FDN. The FDN
now uses this IP address and port for push updates to the FortiGate unit on the
internal network.
If the external IP address or external service port changes, add the changes to the
Use override push configuration and select Apply to update the push information on
the FDN.
7 You can select Refresh to make sure that push updates work.
Push Update changes to Available.
Support
You can use the Support page to report problems with the FortiGate unit to Fortinet
Support or to register your FortiGate unit with the FortiProtect Distribution Server
(FDS).
Source External_All
Destination The virtual IP added above.
Schedule Always
Service ANY
Action Accept
NAT Selected.