FortiWeb 1000E

QuickStart Guide
 Register for Support

QuickStart Guide
Register your Fortinet product to receive:
• Technical Support
• New product features
• Protection from new threats

Vous devez enregistrer le produit pour recevoir:

• Support technique
• Nouvelles fonctionnalitées du produit
• Protection contre de nouvelles menaces

La reistrazione ti permette di usufruire di:

• Supporto Tecnico
• Nuove funzionalita
• Proteezione dalle ultime minaccce

Debe registrar el producto para recibir:

• Apoyo técnico
• Nuevas funcionalidades del producto
• Protección contra ataques

登録のお願い
本日、フォーティネット製品の登録をしてください。
登録すると次のメリットがあります。
テクニカルサポート • 新機能の追加 • 新しい脅威への防御

请马上注册
您的飞塔产品
您在注册以后才能得到技术支持、新产品特点信息、最新威胁防护
October 15, 2018

3rd Edition

Copyright© 2017–2018 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,

FortiCare® and FortiGuard®, and certain other marks are registered trademarks
of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names
herein may also be registered and/or common law trademarks of Fortinet.
All other product or company names may be trademarks of their respective
owners. Performance and other metrics contained herein were attained in
internal lab tests under ideal conditions, and actual performance and other
results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any
binding commitment by Fortinet, and Fortinet disclaims all warranties, whether
express or implied, except to the extent Fortinet enters a binding written
contract, signed by Fortinet’s General Counsel, with a purchaser that expressly
warrants that the identified product will perform according to certain expressly-
identified performance metrics and, in such event, only the specific performance https://support.fortinet.com
metrics expressly identified in such binding written contract shall be binding on
Fortinet. For absolute clarity, any such warranty will be limited to performance Toll free: 1 866 648 4638
in the same ideal conditions as in Fortinet’s internal lab tests. In no event
does Fortinet make any commitment related to future deliverables, features or Phone: 1 408 486 7899
development, and circumstances may change such that any forward-looking
statements herein are not accurate. Fortinet disclaims in full any covenants, Fax: 1 408 235 7737
representations, and guarantees pursuant hereto, whether express or implied.
Fortinet reserves the right to change, modify, transfer, or otherwise revise this Email: [email protected]
publication without notice, and the most current version of the publication shall
be applicable.
 Box Includes Before You Begin
Write down details that you may need from your network administrator or ISP.

FortiWeb 1000E FortiWeb 1000E

DSL PPPoE
QuickStart Guide

Username Password
QuickStart Guide

2 Power cables

Cable Modem DHCP

Ethernet cable It is normal to not require a hostname but your ISP may require it.

Hostname

Console cable

4 Rubber feet
T1/E1, Static broadband, Cable, or DSL with a static
IP

IP Address Subnet Mask

4 M4 screws for rack mount ear brackets

Default Gateway Primary/Secondary DNS
2 M5 screws for rack mount screws

2 Rack mount ear brackets

2 Sliding rails

2 3
 1 Basic Connections 2 FortiWeb Setup Options

Internet A Web Browser B Terminal Emulation

With Ethernet cable (p.5) With console cable (p.6 )

Ethernet Port A Web Browser with Ethernet cable

Power Connection

https://

MGMT1
Connect your device to a power outlet and an Internet connection with an Ethernet port
(ports 1-12). This is usually a modem, but could also be another device on your network.

Web-based Manager

1. Use the Ethernet cable to connect MGMT port of the FortiWeb unit to the
management computer.
2. Configure the management computer to match the FortiWeb unit’s default MGMT
subnet. For example:

IP address: 192.168.1.2
Netmask: 255.255.255.0

3. Visit 192.168.1.99 in your web browser.

4. Login using username “admin” and no password.
5. Configure your device and save your settings.
6. Register your device from the dashboard page.

4 5
 B Terminal Emulation with Console 3 General Installation
Cable
The FortiWeb unit can be mounted in any standard 19 inch rack unit with the provided
rail mount kit.

Please read the “Cautions and Warnings” on page 20 prior to installing your device.
Serial Port
To install the FortiWeb unit into a rack:
Console Port
1. Ensure that the FortiWeb unit is placed on a stable surface prior to rack-mount
installation.

2. Assemble the rails and install the system in the rack following the safety instructions
and the rack installation instructions in Rail Installation (p. 8).
To Connect to the CLI
3. Verify that the spacing around the FortiWeb unit conforms to requirements and that
1. Connect the FortiWeb unit console port to the management computer using the the unit is level.
provided console cable.
2. Start a terminal emulation program on the management computer. Select the COM 4. Connect the provided power cables to the system.
port and use the following settings:
5. Plug the other end of the power cables into separate power sources, such as
Baud Rate: 9600 uninterruptible power supplies (UPS) or power distribution units (PDU).
Data bits: 8
Parity: None 6. Insert one end of the provided Ethernet cable into one of the Ethernet ports on the
Stop bits: 1 FortiWeb unit. Insert the other end to a router or switch that is connected to the
Flow Control: None Internet.

3. Press Enter on your keyboard to connect to the CLI. 7. Press the power button on the system to turn on the device.
4. Login using username “admin” and no password. You can now proceed with
configuring your FortiWeb unit. Do not place heavy objects on the unit.

Get started by typing “?” for a list of available commands.

Begin typing a command and type “?” for a list of available ways to complete.
For example “config ?” shows the lowest level of configuration options.

For a detailed guide, visit http://docs.fortinet.com/fortiweb/reference.

6 7
 4 Rail Installation
Release safety lock
before mounting
To install the FortiWeb unit using the rail mount kit:

1. To remove the chassis (inner) member, pull the slide open, and then press the trigger
down as shown on the drawing, and pull the chassis (inner) member out.

Press the trigger

down to release

Push the safety lock forward to secure

Pull chassis (inner)

member out
4. To mount the chassis into the cabinet, first ensure that the ball retainer is in the fully
open position. Then, insert the chassis (inner) member into the cabinet member.
When you push the chassis back into the cabinet, press the trigger down to release
the slide from the locked position.

2. Use the standoffs to mount the chassis (inner) member to the chassis.
Retainer is in fully open position

Press trigger down to unlock slides

3. To attach the cabinet (outer) member to the rail, first ensure that the safety lock is in
the unlocked position. Then, insert the stag into the upper and lower square holes on
the EIA rail from the back of the rail.
Finally, push the safety lock forward to secure the bracket.

8 9
 SFP Transceivers 5. Press the transceiver firmly into the cage socket with
your thumb.
Caution: Do not
6. Verify that the transceiver is latched correctly by grasping
force the SFP
the sides of the transceiver and trying to pull it out
transceivers into
without lowering the extraction lever.
Transmit Optical Bore SFP Cage Sockets the cage slots.
Caution: SFP If the transceiver cannot be removed, it is installed and
If the transceiver
transceivers are latched correctly.
does not easily
static sensitive If the transceiver can be removed, reinsert it and press
slide in and click
devices. Use harder with your thumb.
into place, it may
an ESD wrist If necessary, repeat this process until the transceiver is
not be aligned
strap or similar securely latched into the cage socket.
correctly or may
grounding device Receive Optical Bore be upside down.
when handling To remove the SFP transceivers If this happens,
transceivers. Extraction Lever Socket Latch remove the SFP
1. Ensure that you are properly grounded. transceiver, realign
Do not install 2. If applicable, disconnect the fiber-optic cable from the it or rotate it and
or remove SFP To install the SFP transceivers transceiver connector and install a clean dust plug in the slide it in again.
transceivers while transceiver’s optical bores.
fiber-optic cables 1. Ensure that you are properly grounded. 3. Pull the extraction lever out and down to eject the Note: Follow
are still attached. 2. Remove the caps from the SFP cage sockets on the transceiver. If you are unable to use your finger to open proper fiber-
This can cause front panel of the unit. the lever, use a small flat-head screwdriver or other optic handling
damage to the 3. Position the SFP transceiver in front of the cage socket similar tool to open the lever. procedures when
cables, cable opening and ensure that the transceiver is correctly installing and
connectors, oriented. When the transceiver is correctly oriented, the removing
and the optical extraction lever will be level with the socket latch. SFP transceivers
interfaces. It may Note: SFP cage socket orientation may vary. Ensure that to ensure the
also prevent the the SFP transceiver module is correctly oriented each devices remain
transceiver from time that you are inserting a transceiver. clean and are not
latching correctly 4. Hold the sides of the SFP transceiver and slide it into the damaged.
into the socket cage socket until it clicks into place.
connector. 4. Hold the sides of the transceiver and carefully pull it away
from the cage socket.
Note: Installing
and removing
SFP transceivers
can shorten their
useful life. Do not
install or remove
transceivers more
than is necessary.

5. Replace the cap on the SFP cage socket and place the
removed SFP transceiver into an antistatic bag.

10 11
 Device Guide

Console
Optional connection to the management
computer. Provides access to the CLI. 2x HDD Bay
Hot-swappable HDD bays
2x USB for Log Disk usage.
Reserved for future use.

NMI Button
Reserved for software application.
4x RJ-45 Port 3-6 with FAIL-OPEN 4x SFP Ports 7-10
2x MGMT ports 4x RJ-45 Gigabit Ethernet ports 4x SFP Gigabit Ethernet ports for
Dedicated Gigabit Ethernet Management with hardware LAN bypass for connections to your network.
Port for system management. connections to your network.

2x RJ-45 Port 1-2 2x SFP+ Ports 11-12

2x RJ-45 Gigabit Ethernet ports. 2x SFP+ 10 Gigabit Ethernet ports
for connections to your network.

12 13
 Device Guide

Power Switch
Power Connections
To turn the power ON/OFF.
100 – 240VAC, 50 – 60 Hz, 5 – 2.5 A
redundant power supply.

Grounding Screws Power Supply Warning Buzz Reset Button

Provides extra grounding. To disable power supply warning buzz.

14 15
 Device Guide
Power HDD Activity Indicator
Green: The unit is ON. Flashing Green: HDD in use.
Off: The unit is OFF. HDD Power Indicator
Status Blue: The HDD is in service.
Off: System is normal. Off: The HDD is OFF or not installed.
Flashing Amber: Minor system alarm.
Amber: System failure. Refer to fail-open port
status during system failure.

SFP Ethernet Port Link/Activity

RJ-45 Ethernet Port Speed (Left)
Flashing Green: Transmitting &
Green: Port is connected at 1Gbps.
receiving data at 1Gbps.
Amber: Port is connected at 100Mbps.
Off: No link established.
Off: Port is connected at 10Mbps or is not in use.
RJ-45 Ethernet Port Link/Activity (Right)
Flashing Green: Transmitting & receiving data.
SFP+ Ethernet Port Link/Activity (Top)
Off: No link established.
Flashing Green: Transmitting & receiving data.
Off: No link established.
Fail-open Port Status During System Failure (Port 3-6)
SFP+ Ethernet Port Speed (Bottom)
Amber: Fail-open feature is working.
Flashing Green: Port is connected at 10Gbps.
Flashing Amber: Fail-open feature is disabled.
Flashing Amber: Port is connected at 1Gbps.
Off: No link established.

16 17
 Device Guide

Power Supply Status

Green: Power supply is operating normally.
Red: Power supply is not connected to power or failure.

18 19
Cautions and Warnings Regulatory Notices
Environmental specifications Federal Communication Commission (FCC) – USA
Ambient operating temperature: 0°C to 40°C This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause undesired operation.
Rack Mount Instructions - The following or similar rack-mount instructions are included with the installation instructions:
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are
Instructions de montage en rack - Les instructions de montage en rack suivantes ou similaires sont incluses avec les instructions d’installation: designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause
Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the
be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum user will be required to correct the interference at his own expense.
ambient temperature (Tma) specified by the manufacturer.
Température ambiante élevée – S’il est installé dans un rack fermé ou à unités multiples, la température ambiante de fonctionnement de WARNING: Any changes or modifications to this product not expressly approved by the party responsible for compliance could void the user’s
l’environnement du rack peut être supérieure à la température ambiante de la pièce. Par conséquent, il est important d’installer le matériel dans un authority to operate the equipment.
environnement respectant la température ambiante maximale (Tma) stipulée par le fabricant.
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada
Reduced Air Flow - Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is CAN ICES-3 (A) / NMB-3 (A)
not compromised. This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regula¬tions
Ventilation réduite – Installation de l’équipement dans un rack doit être telle que la quantité de flux d’air nécessaire au bon fonctionnement de of the Canadian Department of Communications.
l’équipement n’est pas compromise.
Cet appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe A prescrites
Mechanical Loading - Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical dans le Règlement sur le brouillage radioélectrique édicte par le ministère des Communications du Canada.
loading.
Chargement Mécanique – Montage de l’équipement dans le rack doit être telle qu’une situation dangereuse n’est pas lié à un chargement
mécanique inégal. European Conformity (CE) - EU
This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take
Circuit Overloading - Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the adequate measures.
circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when
addressing this concern.
Surtension – Il convient de prendre l’ensemble des précautions nécessaires lors du branchement de l’équipement au circuit d’alimentation et être
particulièrement attentif aux effets de la suralimentation sur le dispositif assurant une protection contre les courts-circuits et le câblage. Ainsi, il est
recommandé de tenir compte du numéro d’identification de l’équipement.
Voluntary Control Council for Interference (VCCI) – Japan
この装置は、
クラスＡ情報技術装置です。この装置を 家庭環境で使用すると電波妨害を引き起こすことがあります。この場合には使用者が適切な対策を
Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections
講ずるよう要求されることがあります。ＶＣＣＩ－Ａ
other than direct connections to the branch circuit (e.g. use of power strips).
Fiabilité de la mise à la terre– Fiabilité de la mise à la terre de l’équipement monté en rack doit être maintenue. Une attention particulière devrait
être accordée aux connexions d’alimentation autres que les connexions directes au circuit de dérivation (par exemple de l’utilisation de bandes de
puissance). Product Safety Electrical Appliance & Material (PSE) ‒ Japan
日本では電気用品安全法(PSE)の規定により、同梱している電源コードは本製品の専用電源コードとして利用し、他の製品に使用しないでください。
Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude)
Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales (Température de fonctionnement, température de stockage, humidité
et l’altitude). Bureau of Standards Metrology and Inspection (BSMI) – Taiwan
The presence conditions of the restricted substance (BSMI RoHS table) are available at the link below:
Safety 限用物質含有情況表 (RoHS Table) 請到以下 網址下載：
https://www.fortinet.com/bsmi
Moving parts — Hazardous moving parts. Keep away from moving fan blades.
此為甲類資訊技術設備，於居住環境中使用時，可能會造成射頻擾動，在此種情況下，使用者會被要求採取某些適當的對策。
Pièces mobiles – Pièces mobiles dangereuses. Se tenir éloigné des lames mobiles du ventilateur.
英屬蓋曼群島商防特網股份有限公司台灣分公司
地址：台北市內湖區行愛路176號2樓
Warning: Equipment intended for installation in Restricted Access Location. 電話：(02) 27961666
Avertissement: Le matériel est conçu pour être installé dans un endroit où l’accès est restreint.

Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries in a fire. They may explode. Dispose of used
China
batteries according to your local regulations. IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries. 此为A级产品，在生活环境中，该产品可能会造成无线电干扰。这种情况下，可能需要用户对其采取切实可行的措施。
Batterie – Risque d’explosion si la batterie est remplacée par un type incorrect. Ne jetez pas les batteries au feu. Ils peuvent exploser. Jetez les piles
usagées conformément aux réglementations locales. IMPORTANT: Suisse: l’annexe 4.10 de SR814.013 s’appliquent aux batteries.
Korea Certification (KC) – Korea
警告 A급 기기 (업무용 방송통신기자재)
本電池如果更換不正確會有爆炸的危險 이 기기는 업무용(A급) 전자파적합기기로서 판매자 또는 사용자는 이 점을 주의하시기를 바라며, 가정외의 지역에서 사용하는 것을 목적으로 합니다.
請依製造商說明書處理用過之電池

CAUTION: Shock Hazard. Disconnect all power sources.

ATTENTION: Risque d'électrocution. Débranchez toutes les sources d'alimentation.

Caution: Slide/rail mounted equipment is not to be used as a shelf or a work space.

Attention: Un équipement monté sur bâti ne doit pas être utilisé sur une étagère ou dans un espace de travail.

Laser Class 1 optical transceiver shall be used only

L'émetteur-récepteur optique de classe 1 laser doit être utilisé uniquement
 Fortinet Customer Service & Support
Create a support account, register and manage your products,
download updates, firmware images and release notes, and create
technical support tickets.
https://support.fortinet.com

Fortinet Document Library

Up-to-date versions of Fortinet publications for the entire family of

Fortinet products.
http://docs.fortinet.com

Training Services

Course descriptions, availability, schedules, and location of training

programs in your area.
http://www.fortinet.com/support/training.html

Technical Discussion Forums

Communicate with other customers and Fortinet partners about

Fortinet products, services, and configuration issues.
https://support.fortinet.com/forum

FortiGuard Threat Research and Response

Up-to-date information on vulnerabilities and threats, includes a virus

scanner, IP signature look-up, and web filtering tools.
http://www.fortiguard.com

Fortinet Product License Agreement / EULA

and Warranty Terms

https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf

Fortinet.com