FortiLog unit LED Indicators

LED Power State On Off LAN (back) Error Flashing Off On Off Network (front) Disk access Flashing Off Flashing Off Description The FortiLog unit is powered on. The FortiLog unit is powered off. Network activities at this interface. No link at the interface. The FortiLog unit is in error condition. The FortiLog unit is running normally. Network activities on the FortiLog unit. No network activities. Hard disk activities. No hard disk activities.

FortiLog -100, 400, 800

QuickStart Guide
Copyright 2004 Fortinet Incorporated. All rights reserved. Trademarks Products mentioned in this document are trademarks or registered trademarks of their respective holders. Regulatory Compliance FCC Class A Part 15, CE, and UL 15 November 2004

For technical support please visit http://www.fortinet.com.

01-12000-0083-20041115

Checking the package contents

Check that the package contents are complete.

FortiLog-100
Front
LED indicators: Power, Error, Network, LCD and Disk Access Panel

FortiLog-400
Setting Switches A and B

The FortiLog units are network appliances that you can use to collect and analyze FortiGate log messages. The FortiLog family includes three models. Check the model number on the front panel of your FortiLog unit. All three models are shown in the picture here. FortiLog-100, desktop model with one hard drive. FortiLog-400, desktop model with four hard drives. FortiLog-800, rackmount model with four hard drives.

Reset Switch Power Switch LAN1 (Network Connection) LAN2 and LAN3 For Future Use Reset Switch
4

LCD Setting Switches Panel A and B

Back

Power Switch

Power Connection ATX Redundant Power Supplies

Connectors
Connector LAN for FortiLog-100 LAN1 for FortiLog-400 and 800 Type Speed Protocol Description Connection to the network.
8

LAN

Power Connection

Front

Back

FortiLog-800
Front

Accessories for each model

Ethernet Cables: Orange - Crossover Grey - Straight-through Rack-Mount Brackets

Ethernet RJ-45 10/100Base-T (FortiLog-100 and 400) 10/100/1000Base-T (FortiLog-800) DB-9 9600 bps RS-232 serial

LED indicators: LCD Hard Disk LEDs Power, Error, Network, Panel and Disk Access

Setting Switches A and B

Hard Disk LEDs

Null-Modem Cable (RS-232) for FortiLog-800

Back

AC Adapter for FortiLog-100

CONSOLE (FortiLog-800 only)

Connection to the management computer. Provides access to the command line interface (CLI).

Power Switch
Power Cable

Power ATX Redundant Connection Power Supplies

RS-232 SCSI Connector Serial For Tape Drive Connection For Future Use

LAN2 LAN1 For Future Use (Network Connection)

USER MANUAL

FortiLog-100,400, 800

QuickStart Guide
Copyright 2004 Fortinet Incorporated. All rights reserved. Trademarks Products mentioned in this document are trademarks.

Documentation

Planning the installation

Things you need to know before installing the FortiLog unit.

You can add the FortiLog unit to your local FortiGate network to receive log messages from your local FortiGate units. You can also connect the FortiLog unit to the FortiGate units remotely through the Internet. To connect the FortiLog unit to the FortiGate units remotely, you must configure the DNS server and the default gateway. To manage the FortiLog unit, you can use a computer within the local network or over the Internet.

FortiMail unit
CONSOLE

FortiGate units
Esc Enter Esc Enter

PWE

Internal Network
8

FortiGate unit
Esc Enter

Factory Defaults
Administrator account LAN User name: Password: IP: Netmask: Management Access: admin (none) 192.168.1.99 255.255.255.0 HTTPS, Ping

FortiLog unit

Management PC
Internet

Management PC

Esc

Enter

Esc

Enter

Esc

Enter

FortiGate unit

FortiGate unit

FortiGate unit

Connecting the FortiLog unit

Connect the FortiLog unit to a power outlet and to the network hub or switch.

Place the unit on a stable surface. If you have a FortiLog-800 unit, you can also mount it in a 19-inch rack. The units require 1.5 inches (3.75 cm) clearance on each side to allow for cooling. Make sure the power switch on the back of the unit is turned off before connecting the power and network cables.
FortiLog-400 FortiLog-100
Straight-through Ethernet cable connects to hub or switch on the network
LAN2 and LAN3 For Future Use

Straight-through Ethernet cable connects to hub or switch on the network

FortiLog-800

Straight-through Ethernet cable connects to hub or switch on the network Power cable connects to power supply Power cable connects to power outlet Power cable connects to power outlet

Null modem cable connects to serial port on management computer

Configuring the FortiLog unit

Use the web-based manager or the Command Line Interface (CLI) to configure the FortiLog unit IP address, netmask, DNS server IP address, and default gateway IP address. Remember to change the password.

Using the web-based manager

For all the three FortiLog models, use the following procedure to connect to the web-based manager for the first time. Configuration changes made with the web-based manager are effective immediately without resetting the FortiLog unit or interrupting service. To connect to the web-based manager, you need: An Ethernet connection between the FortiLog unit and management computer. Internet Explorer version 4.0 or higher on the management computer. To connect to the web-based manager 1. Connect the LAN interface of the FortiLog unit to the Ethernet port of the management computer. Use a cross-over Ethernet cable to connect the devices directly. Use straightthrough Ethernet cables to connect the devices through a hub or switch. 2. Configure the management computer to be on the same subnet as the FortiLog LAN interface. To do this, change the IP address of the management computer to 192.168.1.2 and the netmask to 255.255.255.0. 3. To access the FortiLog web-based manager, start Internet Explorer and browse to https://192.168.1.99 (remember to include the s in https://). 4. Type admin in the Name field and select Login. After connecting to the Web-based manager, you can configure the FortiLog unit IP address, DNS server IP address, and default gateway to connect the FortiLog unit to the network. To configure the FortiLog unit using the web-based manager 1. In the web-based manager, go to System > Config > Network. 2. Enter the IP address, netmask, primary DNS server IP address, secondary DNS server IP address (optional), and the default gateway IP address if the FortiLog unit connects to the Internet.

Using the CLI

The FortiLog-800 model has serial port and you can use the null modem cable to connect it to your management computer. The FortiLog-100 and 400 models do not support serial cable connections. But you can use SSH to access the CLI. To connect to the FortiLog-800 unit 1. Use a null modem cable to connect the FortiLog-800 serial port to the management computer serial port. 2. Start a terminal emulation program (such as HyperTerminal) on the management computer. Use these settings: Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, Flow Control None. 3. At the login: prompt, type admin and press Enter twice. (The login prompt is preceded by the server IP address.) After connecting to the CLI, you can configure the FortiLog-800 unit IP address, DNS server IP address, and default gateway to connect the FortiLog-800 unit to the network. To configure the FortiLog unit using the CLI 1. Set the IP address and netmask of the LAN interface: set system interface port1 mode static ip <IP_address> <netmask> 2. Confirm that the address is correct: get system interface 3. Set the primary DNS server IP address: set system dns primary <IP_address> 4. Optionally set the secondary DNS server IP address: set system dns secondary <IP_address> 5. Set the default gateway: set system route number <route_no> dst 0.0.0.0 0.0.0.0 gw1 <gw_ip>

Using the front panel buttons and LCD

You can use the front panel buttons to set up the FortiLog units IP address, netmask, and default gateway.

Adding an administration password

By default, the admin user does not have a password. To restrict access to the FortiLog unit management account, add a password for the admin user account. To add the admin user account password 1. In the web-based manager, go to System > Config > Admin. 2. For the admin user, select the Change Password icon. 3. Enter a new password in the New Password box. Reenter it in the Confirm Password box. 4. Select OK.

5 6

Restarting the FortiLog Unit

Use these procedures if you experience problems operating the FortiLog unit.

Should you mistakenly change a network setting and cannot connect to the unit, reboot the unit and try again or to set the unit back to factory defaults and start over again. To use the web-based manager procedures 1. Go to System > Status. 2. Do one of the following: Select Restart to reboot the unit. Select Restore Factory Default to restore the factory default configuration.

To use the CLI 1. Restart the unit: execute reboot 2. Restore factory default configuration: execute factoryreset

For more information

Congratulations! You have set up the FortiLog unit and finished configuring the basic settings.

Technical documentation
For more information about FortiLog units, see: FortiLog online help FortiLog Administration Guide. For information about FortiGate units, see: FortiGate online help FortiGate Administration Guide FortiGate QuickStart Guide Other FortiGate user guides

Technical support
Fortinet Technical Support Web site: http://support.fortinet.com Fortinet email support: amer_support@fortinet.com apac_support@fortinet.com For customers in the United States, Canada, Mexico, Latin America and South America. For customers in Japan, Korea, China, Hong Kong, Singapore, Malaysia, all other Asian countries, and Australia. For customers in the United Kingdom, Scandinavia, Mainland Europe, Africa, and the Middle East.

eu_support@fortinet.com