FortiAnalyzer. Install Guide. Version 4.0 MR1. Revision 2

Transcription

1 FortiAnalyzer Version 4.0 MR1 Install Guide Revision 2

2 FortiAnalyzer Install Guide Version 4.0 MR1 1 February 2010 Revision 2 Copyright 2010 Fortinet, Inc. All rights reserved. No part of this publication including text, examples, diagrams or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical or otherwise, for any purpose, without prior written permission of Fortinet, Inc. Trademarks Dynamic Threat Prevention System (DTPS), APSecure, FortiASIC, FortiBIOS, FortiBridge, FortiClient, FortiGate, FortiGate Unified Threat Management System, FortiGuard, FortiGuard-Antispam, FortiGuard-Antivirus, FortiGuard-Intrusion, FortiGuard-Web, FortiLog, FortiAnalyzer, FortiManager, Fortinet, FortiOS, FortiPartner, FortiProtect, FortiReporter, FortiResponse, FortiShield, FortiVoIP, and FortiWiFi are trademarks of Fortinet, Inc. in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Regulatory compliance FCC Class A/Class B Part 15 CSA/CUS CAUTION: Risk of explosion if battery is replaced by incorrect type. Dispose of used batteries according instructions.

3 Contents Contents Introduction... 7 Registering your Fortinet product... 7 Customer service and technical support... 7 Fortinet documentation... 7 Fortinet Tools and Documentation CD... 7 Fortinet Knowledge Center... 7 Comments on Fortinet technical documentation... 8 Conventions... 8 IP addresses... 8 CLI constraints... 8 Notes, Tips and Cautions... 8 Typographical conventions... 8 Hardware installation Environmental specifications Cautions and warnings Grounding Rack mount instructions Mounting the FortiAnalyzer unit FortiAnalyzer-100B and 100C models FortiAnalyzer-400B, 800, and 2000 models FortiAnalyzer-800B, 2000A, 4000 and 4000A models FortiAnalyzer-1000B model FortiAnalyzer-2000B model Powering on the FortiAnalyzer unit Connecting to the network Powering off the FortiAnalyzer unit FortiAnalyzer-1000B hardware installation Four-post rack installation Recommended tools and supplies Installation tasks Removing the rack doors Marking the rack Configuring the sliding rail assemblies (sliding rail kits only) Installing chassis static rail modules (static rail kits only) Replacing the rack doors Installing the tray and cable-management arm (sliding rail kits only) Removing the FortiAnalyzer from the rack Revision 2 3

4 Contents Two-post rack installation Recommended tools and supplies Rack kit contents Installation tasks Marking the rack Installing the mounting rails Installing chassis static rail modules Installing the FortiAnalyzer in the rack Removing the FortiAnalyzer from the rack Using the FortiAnalyzer-1000B recovery CD FortiAnalyzer-2000B hardware installation Installing the FortiAnalyzer unit in the rack Removing the FortiAnalyzer unit from the rack Installing the cable management arm Installing the bezel Connecting the power cables Securing the power cord Firmware configuration Connecting to the FortiAnalyzer unit Web-based manager Command line interface Configuring basic network settings Configuring the admin account password Setting the system date and time Collecting FortiGate logs Configuring a FortiGate unit to send logs to the FortiAnalyzer unit Registering a FortiGate unit with a FortiAnalyzer unit Further reading Firmware maintenance Backing up the FortiAnalyzer unit Backing up the configuration Backing up the FortiAnalyzer hard disk Restoring the logs Upgrading and downgrading firmware using the web-based manager Upgrading the firmware Downgrading the firmware Upgrading and downgrading firmware using the CLI Upgrading the firmware Downgrading the firmware Revision 2

5 Contents Installing firmware images from a system reboot using the CLI Index Revision 2 5

6 Contents 6 Revision 2

7 Introduction Registering your Fortinet product Introduction The FortiAnalyzer is a network appliance that provides reporting, data analysis and integrated log collection tools. Detailed log reports provide historical as well as current analysis of network traffic, such as , FTP and web browsing activity, to help identify security issues and reduce network misuse and abuse. The FortiAnalyzer unit provides a selection of reporting tools from detailed reports that can be scheduled or generated on demand, to basic traffic sniffing and real-time network monitoring. Registering your Fortinet product Before you begin, take a moment to register your Fortinet product at the Fortinet Technical Support web site, Many Fortinet customer services, such as firmware updates, technical support, and FortiGuard Antivirus and other FortiGuard services, require product registration. For more information, see the Fortinet Knowledge Center article Registration Frequently Asked Questions. Customer service and technical support Fortinet documentation Fortinet Technical Support provides services designed to make sure that your Fortinet products install quickly, configure easily, and operate reliably in your network. To learn about the technical support services that Fortinet provides, visit the Fortinet Technical Support web site at The Fortinet Technical Documentation web site, provides the most up-to-date versions of Fortinet publications, as well as additional technical documentation such as technical notes. In addition to the Fortinet Technical Documentation web site, you can find Fortinet technical documentation on the Fortinet Tools and Documentation CD, and on the Fortinet Knowledge Center. Fortinet Tools and Documentation CD Many Fortinet publications are available on the Fortinet Tools and Documentation CD shipped with your Fortinet product. The documents on this CD are current at shipping time. For current versions of Fortinet documentation, visit the Fortinet Technical Documentation web site, Fortinet Knowledge Center The Fortinet Knowledge Center provides additional Fortinet technical documentation, such as troubleshooting and how-to-articles, examples, FAQs, technical notes, a glossary, and more. Visit the Fortinet Knowledge Center at Revision 2 7

8 Conventions Introduction Comments on Fortinet technical documentation Conventions IP addresses CLI constraints Please send information about any errors or omissions in this or any Fortinet technical document to Fortinet technical documentation uses the conventions described below. To avoid publication of public IP addresses that belong to Fortinet or any other organization, the IP addresses used in Fortinet technical documentation are fictional and follow the documentation guidelines specific to Fortinet. The addresses used are from the private IP address ranges defined in RFC 1918: Address Allocation for Private Internets, available at CLI constraints, such as <address_ipv4>, indicate which data types or string patterns are acceptable input for a given parameter or variable value. CLI constraint conventions are described in the CLI Reference document for each product. Notes, Tips and Cautions Fortinet technical documentation uses the following guidance and styles for notes, tips and cautions. Tip: Highlights useful additional information, often tailored to your workplace activity. Note: Also presents useful information, but usually focused on an alternative, optional method, such as a shortcut, to perform a step. Caution: Warns you about commands or procedures that could have unexpected or undesirable results including loss of data or damage to equipment. Typographical conventions Fortinet documentation uses the following typographical conventions: Table 1: Typographical conventions in Fortinet technical documentation Convention Button, menu, text box, field, or check box label CLI input CLI output Example From Minimum log level, select Notification. config system dns set primary <address_ipv4> end FGT # get system settings comments : (null) opmode : nat 8 Revision 2

9 Introduction Conventions Table 1: Typographical conventions in Fortinet technical documentation Emphasis File content Hyperlink Keyboard entry Navigation Publication HTTP connections are not secure and can be intercepted by a third party. <HTML><HEAD><TITLE>Firewall Authentication</TITLE></HEAD> <BODY><H4>You must authenticate to use this service.</h4> Visit the Fortinet Technical Support web site, Type a name for the remote VPN peer or client, such as Central_Office_1. Go to VPN > IPSEC > Auto Key (IKE). For details, see the FortiGate Administration Guide. Revision 2 9

10 Conventions Introduction 10 Revision 2

11 Hardware installation Environmental specifications Hardware installation You can install any model of the FortiAnalyzer units as a free-standing appliance on any flat, stable surface, providing you adhere to the environmental and air flow specifications outlined below. You can also choose to install the FortiAnalyzer-400B and higher unit in a standard 19-inch rack or cabinet. This chapter contains the following topics: Environmental specifications Cautions and warnings Mounting the FortiAnalyzer unit Powering on the FortiAnalyzer unit Powering off the FortiAnalyzer unit Environmental specifications Before you begin, review the environmental specifications to ensure proper operation of the FortiGate unit. Operating temperature: 32 to 104 F (0 to 40 C) If you install the Fortinet unit in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient temperature. Therefore, make sure to install the equipment in an environment compatible with the manufacturer's maximum rated ambient temperature. Storage temperature: -13 to 158 F (-25 to 70 C) Humidity: 5 to 90% non-condensing Air flow - For rack installation, make sure that the amount of air flow required for safe operation of the equipment is not compromised. For free-standing installation, make sure that the appliance has at least 1.5 in. (3.75 cm) of clearance on each side to allow for adequate air flow and cooling. This device complies with part FCC Class A or Class B, Part 15, UL/CUL, C Tick, CE and VCCI. Operation is subject to the following two conditions: This device may not cause harmful interference, and This device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Revision 2 11

12 Cautions and warnings Hardware installation Cautions and warnings Grounding Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/tv technician for help. The equipment compliance with FCC radiation exposure limit set forth for uncontrolled Environment. Review the following cautions before installing your Fortinet unit. You must strictly follow the procedures in this document to protect yourself as well as others who may be involved. Your FortiAnalyzer may be very large and heavy and proper preparation and planning are important to prevent injury to yourself and to others. This precaution becomes increasingly important when the FortiAnalyzer units are installed high up in the rack. Before installing For ti Analyzers in a rack, install front and side stabilizers on standalone racks or the front stabilizer on racks joined to other racks. Failure to install stabilizers accordingly before installing For ti Analyzers in a rack could cause the rack to tip over, potentially resulting in bodily injury under certain circumstances. Therefore, always install the stabilizer(s) before installing components in the rack. The VersaRails rack kit is intended to be installed by trained service technicians in a rack that meets the specifications of American National Standards Institute (ANSI)/Electronic Industries Association (EIA) standard ANSI/EIA-310-D-92, International Electrotechnical Commission (IEC) 297, and Deutsche Industrie Norm (DIN) One rack kit is required for each FortiAnalyzer that is installed in a rack. Do not install rack kit components designed for another FortiAnalyzer. Use only the rack kit for your FortiAnalyzer. Using the rack kit for another FortiAnalyzer may result in damage to the FortiAnalyzer and personal injury to yourself and to others. Rack cabinets can be extremely heavy and move easily on their casters. They do not have brakes. Use extreme caution while moving the rack cabinet. Retract the leveling feet when relocating the rack cabinet. Avoid long or steep inclines or ramps where loss of cabinet control may occur. Extend the leveling feet for support and to prevent the cabinet from rolling. When installing multiple For ti Analyzers in a rack, complete all of the procedures for the current FortiAnalyzer before attempting to install the next FortiAnalyzer. To reduce the risk of fire, use only No. 26 AWG or larger UL listed or CSA certified telecommunication line cord. Ensure the FortiAnalyzer unit is connected and properly grounded to a lightning and surge protector. WAN or LAN connections that enter the premises from outside the building should be connected to an Ethernet CAT5 (10/100 Mb/s) surge protector. Shielded Twisted Pair (STP) Ethernet cables should be used whenever possible rather than Unshielded Twisted Pair (UTP). Do not connect or disconnect cables during lightning activity to avoid damage to the Fortinet unit or personal injury. 12 Revision 2

13 Hardware installation Mounting the FortiAnalyzer unit Rack mount instructions Elevated operating ambient - If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer. Reduced air flow - Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised. Mechanical loading - Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading. Circuit overloading - Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. Reliable earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips). Mounting the FortiAnalyzer unit FortiAnalyzer-100B and 100C models Adhere the rubber feet included in the package to the underside of the FortiAnalyzer unit, near the corners of the unit if not already attached. Place the FortiAnalyzer unit on any flat, stable surface. Ensure the FortiAnalyzer unit has sufficient clearance on each side to ensure adequate airflow for cooling. If you remove the rubber feet, you can alternatively mount the FortiAnalyzer unit in a 2Utall space in any standard 19-inch rack unit. FortiAnalyzer-400B, 800, and 2000 models The FortiAnalyzer unit can be placed on any flat surface, or mounted in a standard 19-inch rack unit. When placing the FortiAnalyzer unit on any flat, stable surface, ensure the unit has adequate clearance on each side to ensure adequate airflow for cooling. For rack mounting, use the mounting brackets and screws included with the FortiAnalyzer unit. Note: Fortinet recommends purchasing side rail mounts or similar rack mount aids separately to ensure the FortiAnalyzer unit is attached safely to the rack. Caution: To avoid personal injury, you may require two or more people to install the FortiAnalyzer unit in the rack. To install the FortiAnalyzer unit into a rack 1 Attach the mounting brackets to the side to the unit so that the brackets are on the front portion of the FortiAnalyzer unit if they are not already attached when shipped. Ensure that the screws are tight and not loose. Revision 2 13

14 Mounting the FortiAnalyzer unit Hardware installation 2 Position the FortiAnalyzer unit in the rack to allow for sufficient air flow. 3 Line up the mounting bracket holes to the holes on the rack, ensuring the FortiAnalyzer unit is level. 4 Finger tighten the screws to attach the FortiAnalyzer unit to the rack. 5 Once you verify the spacing of the FortiAnalyzer unit and that it is level, tighten the screws with a screwdriver. Ensure that the screws are tight and not loose. FortiAnalyzer-800B, 2000A, 4000 and 4000A models To mount the FortiAnalyzer unit on a 19 in rack or cabinet, use the slide rails included with the product. The rails enable you to safely pull the FortiAnalyzer units out from the rack to access the back or top of the unit. Caution: To avoid personal injury or damage to the FortiAnalyzer unit, it is highly recommended a minimum of two people perform this procedure. Mounting requires three steps: disassembling the slide rail from the rail housing attaching the slide rail to the sides of the FortiAnalyzer unit mounting the FortiAnalyzer unit to the rack or cabinet. Disassembling the slide rail The slide rail assembly has two moving rails within the rail housing. You need to remove the innermost rail. This rail will attach to the sides of the FortiAnalyzer unit. Figure 1: FortiAnalyzer side rail Rail housing Sliding Rail To remove the side rail 1 Open the slide rails package and remove the rails. 14 Revision 2

15 Hardware installation Mounting the FortiAnalyzer unit 2 Extend the slide rail and locate the slide rail lock on the inside of the top sliding rail. Rail Lock 3 Pull down on the lock while pulling the rail completely out of the slide rail assembly. 4 Repeat these steps for the other slide rail assembly. You will attach this part to the side of the FortiAnalyzer unit. Revision 2 15

16 Mounting the FortiAnalyzer unit Hardware installation Attaching the slide rail to the FortiAnalyzer unit Attach the disconnected slide rails from the previous step to the sides of the FortiAnalyzer unit. Align the holes of the slide rail with the mounting holes on the sides of the FortiAnalyzer unit. Use the screws provided with the slide rail package, being sure to securely fasten the rail to the FortiAnalyzer chassis. Mounting the FortiAnalyzer unit Mounting the FortiAnalyzer-2000A or FortiAnalyzer-4000A is a two step process. First, you must attached the slide rail housing to the rack or cabinet, then insert the FortiAnalyzer unit. To mount the FortiAnalyzer unit 1 Mount the slide rail housing to the rack or cabinet frame. Adjust the outside L-shaped brackets for a proper fit. Ensure that both housings are level to ensure the FortiAnalyzer unit can easily glide into place and is level. 2 Use the screws and additional L-brackets (if required) to securely fasten the housing. 3 Position the FortiAnalyzer unit so that the back of the unit is facing the rack or cabinet, and the slide rails affixed in the previous step line up with the slide rail housing. 4 Gently push the FortiAnalyzer unit into the rack or cabinet. You will hear a click when the slide rail lock has been engaged. 5 Push the FortiAnalyzer unit until it is fully inserted into the rack. FortiAnalyzer-1000B model For instructions on mounting the FortiAnalyzer-1000B in a rack mount unit, see FortiAnalyzer-1000B hardware installation on page 19. FortiAnalyzer-2000B model For instructions on mounting the FortiAnalyzer-2000B in a rack mount unit, see FortiAnalyzer-2000B hardware installation on page Revision 2

17 Hardware installation Powering on the FortiAnalyzer unit Powering on the FortiAnalyzer unit To power on the FortiAnalyzer unit 1 Connect the power cable to the back of the FortiAnalyzer unit. 2 Connect the power cable to a power outlet. Connecting to the network Using the supplied Ethernet cable, connect one end of the cable to your router or switch. Connect the other end to port 1 on the FortiAnalyzer unit. Powering off the FortiAnalyzer unit When powering off the FortiAnalyzer unit, always shut down the unit using the following procedures before disconnecting the power supply. If not following this procedure, you risk damaging the FortiAnalyzer hard disk. To power off the FortiAnalyzer unit 1 From the web-based manager, go to System > Dashboard. 2 In the Unit Operation widget, select Shut Down and select OK. OR from the CLI, enter: execute shutdown 3 Disconnect the power supply when the FortiAnalyzer unit indicates it is safe to disconnect the power. Revision 2 17

18 Powering off the FortiAnalyzer unit Hardware installation 18 Revision 2

19 FortiAnalyzer-1000B hardware installation Four-post rack installation FortiAnalyzer-1000B hardware installation Four-post rack installation You can install the FortiAnalyzer-1000B unit in the following two types of racks: Four-post rack installation Two-post rack installation This installation guide provides instructions for trained service technicians installing one or more FortiAnalyzers in a rack cabinet. The RapidRails rack kit can be installed in all the FortiAnalyzer manufacturer's rack cabinets without tools, and the VersaRails rack kit can be installed in most industry-standard rack cabinets. The procedures for installing both RapidRails and VersaRails rack kits are similar. One rack kit is required for each FortiAnalyzer to be installed in the rack cabinet. This section includes procedures for the following four-post rack kits: Sliding rails rack kit Static rails rack kit (RapidRails and VersaRails versions) (See "Two-Post Rack Installation" on page 27 for instructions on installing a static rails kit in a two-post rack.) Recommended tools and supplies You may need the following items to install the FortiAnalyzer in a four-post rack cabinet: #2 Phillips screwdriver Masking tape or a felt-tip pen, for use in marking the mounting holes to be used Sliding Rails Rack Kit Contents One pair of slide assemblies (convertible to RapidRails or VersaRails configuration) One cable-management arm One tray One status indicator cable (if applicable) Tie wraps to secure the cables to the cable management arm Eight x 0.5-inch flange-head Phillips screws (used in VersaRails configuration only). Note: The nonmetric screws described in illustrations and in procedural steps are identified by size and number of threads per inch. For example, a #10 Phillips-head screw with 32 threads per inch is identified as a screw. Revision 2 19

20 Four-post rack installation FortiAnalyzer-1000B hardware installation Figure 2: Sliding Rails Rack Kit Contents Tray 2 Slide assemblies (2) x 0.5-inch flange-head Phillips screws (8) (VersaRails configuration only) 4 Tie wraps 5 Status indicator cable (if applicable) 6 Cable-management arm Static Rails Rack Kit Contents One pair of static mounting rails with either VersaRails brackets or RapidRails brackets. One pair of chassis static rail modules x 0.5-inch flange-head Phillips screws (8) (VersaRails kits only) Releasable tie wraps (2)) Note: The nonmetric screws described in illustrations and in procedural steps are identified by size and number of threads per inch. For example, a #10 Phillips-head screw with 32 threads per inch is identified as a screw. 20 Revision 2

21 FortiAnalyzer-1000B hardware installation Four-post rack installation Figure 3: Static Rails Rack Kit Contents L FRONT x 0.5-inch flange-head Phillips screws (8) (VersaRails kits only) 2 Static mounting rails (2) 3 Chassis static rail modules (2) Installation tasks Installing a rack kit involves performing the following tasks (described in detail in subsequent sections) in their numbered order: Removing the rack doors Marking the rack Configuring the sliding rail assemblies (sliding rail kits only) Installing chassis static rail modules (static rail kits only) Installing the mounting rails in the rack Installing the FortiAnalyzer in the rack Installing the tray and cable-management arm (sliding rail kits only) Routing cables Replacing the rack doors Removing the rack doors See the procedures for removing doors in the documentation provided with your rack cabinet. Caution: Because of the size and weight of the rack cabinet doors, never attempt to remove or install them by yourself. Revision 2 21

22 Four-post rack installation FortiAnalyzer-1000B hardware installation Caution: Store the two doors where they will not injure someone if the doors accidently fall over. Marking the rack For a 1-U FortiAnalyzer, you must allow 1 U (44 mm, or 1.75 inches) of vertical space for each FortiAnalyzer you install in the rack. Rack cabinets that meet EIA-310 standards have an alternating pattern of three holes per rack unit with center-to-center hole spacing (beginning at the top hole of a 1-U space) of 15.9 mm, 15.9 mm, and 12.7 mm (0.625 inch, inch, and 0.5 inch) for the front and back vertical rails. Rack cabinets may have round or square holes. Note: The vertical rails may be marked by horizontal lines and numbers in 1-U increments. If you want, you can make a note of the number marking on the rack s vertical rail. It is not necessary to mark or place tape on the rack. Figure 4: One Rack Unit 12.7 mm (0.5 inch) 1 U (44 mm or 1.75 inches) 15.9 mm (0.625 inch) 15.9 mm (0.625 inch) 12.7 mm (0.5 inch) Caution: If you are installing more than one FortiAnalyzer, install the mounting rails so that the first FortiAnalyzer is installed in the lowest available position in the rack. To mark the rack: 1 Place a mark (or tape) on the rack's front vertical rails where you want to locate the bottom of the FortiAnalyzer you are installing in the rack. The bottom of each 1-U space is at the middle of the narrowest metal area between holes (marked with a horizontal line on some rack cabinets). 2 Place a mark 44 mm (1.75 inches) above the original mark you made (or count up three holes in a rack that meets EIA-310 standards) and mark the rack's front vertical rails with a felt-tipped pen or masking tape (if you counted holes, place a mark just above the top hole). This mark or piece of tape indicates where the FortiAnalyzer's upper edge will be located on the vertical rails. 22 Revision 2

23 FortiAnalyzer-1000B hardware installation Four-post rack installation Figure 5: Marking the Vertical Rails 1 1 marks on vertical rail (2) Configuring the sliding rail assemblies (sliding rail kits only) The sliding rail assembly has a rotating mounting bracket at each end of the rail. The position of the bracket determines whether the rail assembly is used as a RapidRail or a VersaRail. The RapidRail side of the bracket has a hook and a latch that secure it to the vertical rail. The VersaRail side of the bracket has three holes and uses screws to attach it to the vertical rail. Note: The rack kit ships with the sliding rail assemblies in the RapidRails configuration. To rotate the mounting bracket and change the mounting rails from RapidRails to VersaRails 1 Lift the release lever on the rotating mounting bracket. 2 Rotate the bracket and slide it up off the two shoulder standoffs. 3 Continue to rotate the bracket 180 degrees until you can set the notches back over the shoulder standoffs. 4 Rotate the bracket back in the opposite direction on the shoulder standoffs until the bracket clicks into place. Revision 2 23

24 Four-post rack installation FortiAnalyzer-1000B hardware installation Figure 6: Changing the Position of the Rotating Mounting Bracket Rotating bracket 2 Release lever 3 Shoulder standoffs (2) 4 Notches (2) 5 Mounting bracket flange (RapidRails configuration shown) Installing chassis static rail modules (static rail kits only) Note: You do not need to remove the optional front bezel to install or remove the chassis static rail modules from the chassis. To install a rail module 1 Locate the three keyhole slots on the rail module and the corresponding shoulder screws on the side of the FortiAnalyzer. 2 Place the rail module against the side of the FortiAnalyzer so that the shoulder screws fit through the round portion of the keyhole slots, then slide the module towards the back of the FortiAnalyzer. 3 Repeat steps 1 and 2 to install the other rail module. To remove a rail module from the chassis, pull up on the release latch, then slide the rail forward and remove the rail module from the chassis. 24 Revision 2

25 FortiAnalyzer-1000B hardware installation Four-post rack installation Figure 7: Installing and Removing Static Rail Chassis Modules Keyhole slots (6) 2 Shoulder screws (6) 3 Release latch 4 Rail modules (2) 5 FortiAnalyzer Installing the mounting rails in the rack Note: The following instructions apply to both sliding mounting rails and static mounting rails. To install the RapidRails mounting rails 1 At the front of the rack cabinet, position one of the mounting rails so that its mountingbracket flange fits between the marks or tape you placed (or numbered locations) on the vertical rails in Marking the rack on page 22. The top mounting hook on the front mounting-bracket flange should enter the top hole between the marks you made on the vertical rails. Revision 2 25

26 Four-post rack installation FortiAnalyzer-1000B hardware installation Figure 8: Installing RapidRails Mounting Rails Front of rack 1 Mounting hooks (2) 2 Push buttons (2) 3 Mounting rails (2) 2 Push the mounting rail forward until the mounting hook enters the square hole, and then push down on the mounting-bracket flange until the mounting hook seats and the push button extends through the lower square hole. 3 At the back of the cabinet, pull back on the mounting-bracket flange until the mounting hook enters the upper square hole, and then push down on the flange until the mounting hook seats and the push button extends through the lower square hole. 4 Repeat steps 1 through 3 for the mounting rail on the other side of the rack. 5 Confirm that the mounting rails are mounted at the same vertical position on both sides of the rack. To install the VersaRails mounting rails 1 At the front of the rack cabinet, position one of the mounting rails so that its mountingbracket flange fits between the marks you placed (or numbered locations) on the vertical rails in Marking the rack on page 22. The three holes on the front of the mounting-bracket flange should align with the holes between the marks you made on the front vertical rail. 2 Install two x 0.5-inch flange-head Phillips screws in the upper and lower holes in the mounting-bracket flange to secure the mounting rail to the front vertical rail. 3 At the back of the cabinet, pull back on the mounting-bracket flange until the mounting holes align with their respective holes on the back vertical rail. 26 Revision 2

27 FortiAnalyzer-1000B hardware installation Four-post rack installation 4 Install two x 0.5-inch flange-head Phillips screws in the upper and lower holes in the mounting-bracket flange to secure the mounting rail to the back vertical rail. 5 Repeat steps 1 through 4 for the mounting rail on the other side of the rack. 6 Ensure that the mounting rails are mounted at the same position on the vertical rails on each side of the rack. Figure 9: Installing VersaRails mounting rails Front of rack 1 mounting-bracket flange x 0.5-inch flange-head Phillips screws (4 per mounting rail) 3 mounting rails (2) Installing the FortiAnalyzer unit in the rack Caution: If you are installing more than one FortiAnalyzer, install the first FortiAnalyzer in the lowest available position in the rack. Caution: Because of the size and weight of the FortiAnalyzer, never attempt to install the FortiAnalyzer in the mounting rails by yourself. To install the FortiAnalyzer unit with sliding rails 1 Pull the two inner slide rails out of the rack until they lock in the fully extended position. 2 Lift the FortiAnalyzer into position above the extended slides. The three shoulder screws on each side of the FortiAnalyzer fit into the corresponding J-slots on the inner slide assemblies. Revision 2 27

28 Four-post rack installation FortiAnalyzer-1000B hardware installation 3 Lower the back of the FortiAnalyzer while aligning the back shoulder screws on the sides of the FortiAnalyzer with the back J-slots on the slide assemblies. 4 Engage the back shoulder screws into their respective J-slots. 5 Lower the front of the FortiAnalyzer and fit the middle and front shoulder screws into the J-slots in the slide assemblies. 6 The FortiAnalyzer release latch at the front of the inner slide rail will snap back as the shoulder screw passes into the front slot. Use this FortiAnalyzer release latch when you wish to remove the FortiAnalyzer from the slide assemblies. 7 Press the slide-release latch on the outside of each inner slide, then push the FortiAnalyzer into the rack. 8 Install the cable-management arm. See "Installing the tray and cable-management arm (sliding rail kits only)" on page Tighten the thumbscrews on the rack front panel to secure the slide assemblies to the rack. Figure 10: Installing a FortiAnalyzer With Sliding Rails Shoulder screws (6) 2 Slide-release latch 3 J-slots (6) 4 Front release latch 5 Inner slide rails (2) 28 Revision 2

29 FortiAnalyzer-1000B hardware installation Four-post rack installation Installing a FortiAnalyzer with static rails To install the FortiAnalyzer on the rack: 1 From the front of the FortiAnalyzer, lift the chassis into position so that the chassis rail modules are aligned with the mounting rails on the rack. 2 Push the chassis back into the mounting rails until the FortiAnalyzer stops. 3 Secure both thumbscrews on the front panel of the chassis. 4 Install the optional front bezel (if applicable). See the procedures for installing the bezel in the documentation provided with your FortiAnalyzer. Figure 11: Installing a FortiAnalyzer With Static Rails Mounting rails (2) 2 Chassis rail modules (2) 3 Thumbscrews (2) 4 Release latches (2) 5 Locate the releasable tie wrap attachment points located on the two back mounting-bracket flanges. These tie wraps are used to secure the FortiAnalyzer s cables to the mounting rails. Revision 2 29

30 Four-post rack installation FortiAnalyzer-1000B hardware installation Figure 12: Installing the Releasable Tie Wraps Mounting rails (2) Releasable tie wraps (2) 6 Push the tie wrap s fastener through the attachment point. 7 Push the tie wrap s plunger until it snaps to secure the tie wrap to the mounting rail. 8 Using the releasable tie wrap, secure your FortiAnalyzer s cables to the mounting rail. Replacing the rack doors See the procedures for replacing doors in the documentation provided with your rack. Caution: Because of the size and weight of the rack cabinet doors, never attempt to remove or install them by yourself. Installing the tray and cable-management arm (sliding rail kits only) Note: This procedure does not apply to the static rail kit. To install the Tray 1 At the back of the FortiAnalyzer, fit the ends of the tray between the ends of the mounting rails and slide the tray forward until it latches. 2 In preparation for installing the cable-management arm, press the catch at the center of the cable-management arm retention latch and rotate the latch downward. 30 Revision 2

31 FortiAnalyzer-1000B hardware installation Four-post rack installation Figure 13: Installing the Tray Back of 1 mounting rails (2) 2 tray 3 cable-management arm retention latch Installing the cable-management arm Note: You can attach the cable-management arm to either the right or left mounting rail, depending on how you intend to route cables from the FortiAnalyzer. To install the cable-management arm 1 If necessary, press the catch at the center of the cable-management arm retention latch on the tray, and rotate the latch downwards. 2 At the back of the FortiAnalyzer, fit the latch on the front end of the cable-management arm onto the innermost bracket on the slide assembly, until the latch engages. 3 Fit the latch on the unattached end of the cable-management arm onto the outermost bracket on the slide assembly, until the latch engages. Revision 2 31

32 Four-post rack installation FortiAnalyzer-1000B hardware installation Figure 14: Installing the Cable-Management Arm Back of FortiAnalyzer 4 Routing cables 1 mounting rails (2) 2 brackets (2) 3 latches (2) 4 cable-management arm To route the cables through the cable-management arm 1 Open the wire cable basket lid on the top of the cable-management arm, to enable cables to be routed within the arms. Figure 15: Routing Cables on the Cable-Management Arm Back of FortiAnalyzer Revision 2

33 FortiAnalyzer-1000B hardware installation Four-post rack installation 1 cable-management arm 2 preinstalled tie wraps 3 cable-management arm retention latch 4 basket lid 5 FortiAnalyzer statusindicator cable connector 7 preinstalled tie wraps 6 Velcro strap 2 If applicable, connect the FortiAnalyzer status-indicator cable to its connector on the FortiAnalyzer back panel. Route the FortiAnalyzer status-indicator cable through the cable-management arm and insert the LED end into the slot on the end of the cable-management arm. 3 Attach the I/O cable connectors and power cable connectors to their respective connectors on the FortiAnalyzer back panel. For details on cable connections, see FortiAnalyzer QuickStart Guide. Note: Use the strain-relief loops on the back of the power supplies to provide strain relief for the power cables. 4 Using the tie-wraps provided in the rack kit, bundle the cables together so that they do not interfere with adjacent FortiAnalyzers in the rack. 5 Route the cables through the cable-management arm baskets. 6 Adjust the cable slack as needed at the hinge position and secure the bundled cables with the vertical Velcro strap. 7 Use the pre installed tie wraps at the inner end and hinge point of the cable-management arm to secure the bundled cables in the cable-management arm channel. 8 Close the cable basket lid. 9 Unscrew the thumbscrews that secure the front of the FortiAnalyzer to the front vertical rail. 10 Slide the FortiAnalyzer in and out of the rack to verify that the cables are routed correctly and do not bind, stretch, or interfere with the movement of the cablemanagement arm. Adjust the cable positioning inside the cable management arm as needed. Note: If you pull the FortiAnalyzer out to its furthest extension, the slide assemblies lock in the extended position. To release the lock, press the slide release latch on the side of the slide and then slide the FortiAnalyzer into the rack. 11 When you are satisfied that the cables are routed correctly, push the FortiAnalyzer fully into the rack. 12 Lift the cable-management arm retention latch on the tray to secure the arm. Removing the FortiAnalyzer from the rack To remove the FortiAnalyzer with sliding rails 1 Turn off and unplug the FortiAnalyzer. 2 Remove the I/O cable connectors and power cable connectors from their respective connectors on the FortiAnalyzer back panel. 3 Loosen the thumbscrews on each side of the front chassis panel that secures the FortiAnalyzer to the rack. Revision 2 33

34 Two-post rack installation FortiAnalyzer-1000B hardware installation Two-post rack installation 4 Pull the FortiAnalyzer out of the rack until it locks with the rails in the extended position. 5 Pull up on the front release latch on each rail and slide the FortiAnalyzer forward. 6 Pull the FortiAnalyzer completely out of the rack. To remove the FortiAnalyzer with static rails 1 Turn off and unplug the FortiAnalyzer. 2 Loosen the thumbscrews on each side of the front chassis panel that secures the FortiAnalyzer to the rack. 3 Disconnect all cables from the FortiAnalyzer. 4 Pull the FortiAnalyzer out of the rack until it stops because of the release latches. 5 Push down on the release latches on each side of the FortiAnalyzer. 6 Pull the FortiAnalyzer completely out of the rack. The two-post rack kit is used to install a FortiAnalyzer in a two-post, open-frame relay rack, such as those found in telecommunications equipment facilities. Both 7.62 cm or cm (3 inch and 6 inch) wide two-post racks with universal hole spacing or wide hole spacing are accommodated. You can install this kit in a center-mount or a flush-mount configuration. You must properly secure the two-post relay rack to the floor, the ceiling, or upper wall, and where applicable, to adjacent racks, using floor and wall fasteners and bracing specified or approved by the rack manufacturer or by industry standards. See the two-post rack manufacturer's documentation for warnings before attempting this installation. Recommended tools and supplies Rack kit contents Caution: Do not attempt to install the FortiAnalyzer into a two-post, open-frame relay rack that has not been securely anchored in place. Damage to the FortiAnalyzer and personal injury to yourself and to others may result. #2 Phillips screwdriver 3/8-inch wrench or nut driver (if changing bracket to flush-mount configuration) Masking tape or felt-tip pen to mark the mounting holes The two-post rack kit includes: One pair of mounting rails x 0.5-inch pan-head Phillips screws (8) Releasable tie wraps (2) 34 Revision 2

35 FortiAnalyzer-1000B hardware installation Two-post rack installation Figure 16: Two-Post Rack Kit Components x 0.5-inch panhead Phillips screws (8) 4 Adjustable mounting flange cm (3-inch) wide, flush-mount, threaded studs cm (6-inch) wide, center-mount, threaded studs 5 Center-mount mounting flange 8 Flush-mount mounting flange cm (3-inch) wide, center-mount, threaded studs cm (6-inch) wide, flush-mount, threaded studs 9 Mounting rails (2) Installation tasks Marking the rack Installing a two-post rack kit includes performing the following tasks in order: Marking the rack Universal-hole spacing rack Wide-hole spacing rack Installing the mounting rails in the rack Center-mount installation Flush-mount installation Installing the FortiAnalyzer in the rack Routing cables You must allow 1 U (44 mm, or 1.75 inch) of vertical space for each FortiAnalyzer that you install in the two-post rack. Revision 2 35

36 Two-post rack installation FortiAnalyzer-1000B hardware installation Universal-hole spacing racks Racks with universal-hole spacing have an alternating pattern of three holes per rack unit with center-to-center hole spacing (beginning at the top hole of a 1-U space) of 15.9 mm, 15.9 mm, and 12.7 mm (0.625 inch, inch, and 0.5 inch) for the front and back vertical column of holes. Figure 17: Two-Post, Open-Frame Relay Rack Universal-Hole Spacing 1 U (44 mm or 1.75 inches) 12.7 mm (0.5 inch) 15.9 mm (0.625 inch) 15.9 mm (0.625 inch) Wide-hole spacing racks Racks with wide-hole spacing have an alternating pattern of two holes per rack unit with center-to-center hole spacing (beginning at the top hole of a 1-U space) of 31.7 mm and 12.7 mm (1.25 inches and 0.5 inch) for the front and back vertical columns of holes. Figure 18: Two-Post, Open-Frame Relay Rack Wide-Hole Spacing 12.7 mm (0.5 inch) 1 U (44 mm or 1.75 inches) 31.7 mm (1.25 inches) To mark the rack 1 Place a mark on the rack's front vertical rails where you want to locate the bottom of the FortiAnalyzer you are installing in the two-post rack. The bottom of each 1-U space is at the middle of the narrowest metal area between holes. Note: If your rack has wide-hole spacing, go to step Revision 2

37 FortiAnalyzer-1000B hardware installation Two-post rack installation 2 Place a mark 44 mm (1.75 inches) above the original mark you made, or count up three holes in a rack with universal-hole spacing). Each 1 U (44 mm, or 1.75 inches) of vertical space on a rack with universal-hole spacing has three holes with center-to-center spacing between holes (beginning at the top of a 1-U space) of 15.9 mm, 15.9 mm, and 12.7 mm (0.625 inch, inch, and 0.5 inch). Note: If your rack has universal-hole spacing, you have completed the procedure for marking the rack. 3 Place a mark 44 mm (1.75 inches) above the original mark you made (or count up to the next hole in the rack with wide-hole spacing. Each 1 U (44 mm, or 1.75 inches) of vertical space on a rack with wide-hole spacing has two holes with center-to-center spacing between holes (beginning at the top of a 1- U space) of 31.7 mm (1.25 inches). Installing the mounting rails You can install the mounting rails in a two-post, open-frame rack having either universalhole spacing or wide-hole spacing. You can install the mounting rails in either a flushmount or center-mount configuration. Caution: Do not install another FortiAnalyzer using this rack kit. Use only the rack kit intended for your FortiAnalyzer. Using the rack kit for another FortiAnalyzer may result in damage to the FortiAnalyzer and personal injury to yourself and to others. Center-mount installation The two-post rack kit is shipped with the brackets configured for a 7.62 cm (3 inch) wide center-mount installation. To complete the installation 1 Locate the right mounting rail and push the adjustable mounting bracket toward the back of the mounting rail. 2 Position the right mounting rail in the two-post rack at the location you marked, push the center-mount adjustable mounting bracket forward against the vertical two-post rack, and secure the mounting flange and adjustable mounting bracket to the rack with four x 0.5-inch pan-head Phillips screws. 3 Repeat steps 1 and 2 to install the left mounting rail in the rack. Revision 2 37

38 Two-post rack installation FortiAnalyzer-1000B hardware installation Figure 19: Installing the Mounting Rails for Center-Mount Configuration Two-post open-frame rack Flush-mount installation x 0.5-inch pan-head Phillips screws (4 per rail) 3 Center-mount mounting flange 2 Mounting rails (2) 4 FortiAnalyzer rails (2) 6 Release latch The two-post rack kit is shipped with the brackets configured for a 7.62 cm (3 inch) wide center-mount installation. To prepare the mounting rails for flush-mount installation in the two-post rack 1 Locate the two mounting rails and place them side by side on a smooth work surface, with the front ends of the mounting rails toward you. 2 Using a 3/8-inch wrench or nut driver, remove two nuts from the adjustable mounting bracket. 3 Remove the bracket and then place the bracket on either the 7.62-cm or cm (3- inch or 6-inch) wide flush-mount threaded studs. 4 Using the two nuts that you removed in step 2, tighten the nuts finger tight to secure the adjustable mounting bracket. 5 Repeat steps 2 through 4 to configure the other mounting rail. 38 Revision 2

39 FortiAnalyzer-1000B hardware installation Two-post rack installation Figure 20: Configuring the Adjustable Mounting Bracket for Flush-Mount Installation nuts (2 per bracket) 2 adjustable mounting bracket 4 flush-mount mounting flange cm (3-inch) wide, flush-mount, threaded studs 6 Holding the left mounting rail at the location you marked, position the flush-mount mounting flange against the front of the vertical two-post rack and secure it to the twopost rail with two x 0.5-inch pan-head Phillips screws. 7 Slide the adjustable-mounting bracket so that it is against the back of vertical two-post rack and secure it to the two-post rail with two x 0.5-inch pan-head Phillips screws). 8 Repeat steps 6 and 7 to install the right mounting rail in the rack. 9 Using a 3/8-inch wrench or nut driver, tighten the nuts on the adjustable mounting brackets on both mounting rails. Revision 2 39

40 Two-post rack installation FortiAnalyzer-1000B hardware installation Figure 21: Installing the Mounting Rails for Flush-Mount Configuration two-post open-frame rack x 0.5-inch pan-head Phillips screws (4 per rail) 3 mounting rails (2) Installing chassis static rail modules Note: You do not need to remove the optional front bezel to install or remove the chassis static rail modules from the chassis. To install the rail modules 1 Locate the three keyhole slots on the rail module and the corresponding shoulder screws on the side of the FortiAnalyzer. 2 Place the rail module against the side of the FortiAnalyzer so that the shoulder screws fit through the round portion of the keyhole slots, then slide the module towards the back of the FortiAnalyzer. 3 Repeat steps 1 and 2 to install the other rail module. To remove a rail module from the chassis, pull up on the release latch, then slide the rail forward and remove the rail module from the chassis. 40 Revision 2

41 FortiAnalyzer-1000B hardware installation Two-post rack installation Figure 22: Installing and Removing Static Rail Chassis Modules keyhole slots (6) 2 shoulder screws (6) 3 release latch 4 rail modules (2) 5 FortiAnalyzer Installing the FortiAnalyzer in the rack Caution: If you are installing more than one FortiAnalyzer, install the first FortiAnalyzer in the lowest available position in the rack. To install the FortiAnalyzer in the rack 1 Place one hand on the front-bottom of the FortiAnalyzer and the other hand on the back-bottom of the FortiAnalyzer. 2 Lift the FortiAnalyzer into position so that the side rails at the back of the FortiAnalyzer are aligned with the mounting rails in the rack. Caution: Because of the size and weight of the FortiAnalyzer, never attempt to install the FortiAnalyzer in the mounting rails by yourself. 3 Push the FortiAnalyzer into the mounting rails until the FortiAnalyzer stops. 4 Push in and turn the thumbscrews on each side of the front chassis panel to secure the FortiAnalyzer to the rack. Removing the FortiAnalyzer from the rack To remove the FortiAnalyzer from the rack 1 Turn off and unplug the FortiAnalyzer using the correct procedure as outlined in the Install Guide. Revision 2 41

42 Using the FortiAnalyzer-1000B recovery CD FortiAnalyzer-1000B hardware installation 2 Loosen the thumbscrews on each side of the front chassis panel that secures the FortiAnalyzer to the rack. 3 Disconnect all cables from the FortiAnalyzer. 4 Pull the FortiAnalyzer out of the rack until it stops because of the release latches. 5 Push down on the release latches on each side of the FortiAnalyzer. 6 Pull the FortiAnalyzer completely out of the rack. Using the FortiAnalyzer-1000B recovery CD The CD included with the FortiAnalyzer-1000B is a recovery and documentation CD. If the FortiAnalyzer-1000B unit becomes unresponsive, you can use the recovery CD to reset the FortiAnalyzer unit. Note: The FortiAnalyzer unit may take a few minutes to load the CD. There may be a short delay for the following messages to appear on the screen. To use the recovery CD 1 Connect console cable and power cable to FortiAnalyzer unit. 2 Open a terminal window and set the baud rate to Power on the FortiAnalyzer unit. 4 Insert the recovery CD into CD-ROM drive of the FortiAnalyzer unit. The message Do you want to recover the FortiBootLoader? (Y/N) appears. 5 Enter Y and press enter. After a few minutes, the message Please remove the recover CD, press any key to reboot the system appears. 6 Remove recovery CD from CD-ROM and press any key. The FortiAnalyzer unit reboots with the recovered system. 42 Revision 2

43 FortiAnalyzer-2000B hardware installation Installing the FortiAnalyzer unit in the rack FortiAnalyzer-2000B hardware installation This chapter contains the following topics: Installing the FortiAnalyzer unit in the rack Removing the FortiAnalyzer unit from the rack Installing the cable management arm Installing the bezel Connecting the power cables Securing the power cord Installing the FortiAnalyzer unit in the rack The FortiAnalyzer-2000B comes with a sliding rail kit. Use the instructions below to install the rails. Caution: Only trained service technicians are authorized to remove the system cover and access any of the components inside the system. Before you begin, review the safety instructions that came with the system. Note: The illustrations in this document are not intended to represent a specific server. To install the sliding rail kit 1 Locate the components for installing the rail kit assembly: Two sliding rail assemblies (1) Two Velcro straps (2) Revision 2 43

44 Installing the FortiAnalyzer unit in the rack FortiAnalyzer-2000B hardware installation Figure 1: Rail kit contents In square-hole racks, do the following: Position the left and right rail end pieces of the rail module labeled FRONT facing inward and orient each end piece to seat in the square holes on the front side of the vertical rack flanges (3). 44 Revision 2

45 FortiAnalyzer-2000B hardware installation Installing the FortiAnalyzer unit in the rack Figure 2: Installing and removing the rails (square-hole racks) Align each end piece to seat the pegs in the bottom hole of the first U and the top hole of the second U (4). Engage the back end of the rail until it fully seats on the vertical rack flange and the second tooth on the latch locks in place. Repeat these steps to position and seat the front end piece on the vertical flange (5). To remove the rails, pull on the latch release button on the end piece midpoint and unseat each rail (6). 3 In round-hole racks, do the following: Position the left and right rail end pieces of the rail module labeled FRONT facing inward and orient each end piece to seat in the round holes on the front side of the vertical rack flanges (7). Revision 2 45

46 Installing the FortiAnalyzer unit in the rack FortiAnalyzer-2000B hardware installation Figure 3: Installing and removing the rails (round-hole racks) Align each end piece to seat the pegs in the bottom hole of the first U and the top hole of the second U (8). Engage the back end of the rail until it fully seats on the vertical rack flange and the first tooth on the latch locks in place. Repeat these steps to position and seat the front end piece on the vertical flange (9). To remove the rails, pull on the latch release button on the end piece midpoint and unseat each rail (10). 4 To install the system into the rack, do the following: Pull the inner slide rails out of the rack until they lock into place (11). 46 Revision 2

47 FortiAnalyzer-2000B hardware installation Installing the FortiAnalyzer unit in the rack Figure 4: Installing the system on the rack Locate the three shoulder screws on one side of the system and lower them into the J-slots on the slide assembly (12). Seat the three screws on the other side, lowering the system until all shoulder screws engage in the J-slots (13). Push the system inward until the front release latch clicks into place. Press the slide-release lock buttons on both rails and slide the system into the rack (14). 5 To engage and release the slam latch, do the following: Facing the front, locate the slam latch on either side of the system (15). Revision 2 47

48 Installing the FortiAnalyzer unit in the rack FortiAnalyzer-2000B hardware installation Figure 5: Engaging and releasing the slam latch The latches engage automatically as the system is pushed into the rack and are released by pulling up on the latches (16). To secure the system for shipment in the rack or for other unstable environments, locate the hard-mount screw under each latch and tighten each screw with a #2 Phillips screwdriver (17). 6 To route the cables, do the following: Locate the inner and outer CMA brackets on the interior sides of both rack flanges (18). 48 Revision 2

49 FortiAnalyzer-2000B hardware installation Removing the FortiAnalyzer unit from the rack Figure 6: Routing the cables Bundle the cables gently, pulling them clear of the system connectors to the left and right sides (19). Thread the Velcro straps through the tooled slots on the outer or inner CMA brackets on each side of the system to secure the cable bundles (20). Removing the FortiAnalyzer unit from the rack To remove the system from the rack 1 Locate the lock levers on the front ends of both inner rails (1). Revision 2 49

50 Installing the cable management arm FortiAnalyzer-2000B hardware installation Figure 7: Removing the system from the rack Pull up on each lever into the release position to unlock (2). 3 Grasp the sides of the system firmly and pull forward and up to unseat the system from the J-slots. Lift the system up and away from the rack and place on a level surface (3). Installing the cable management arm The FortiAnalyzer-2000B comes with a Cable Management Arm. Use the instructions below to install the Cable Management Arm. Caution: Only trained service technicians are authorized to remove the system cover and access any of the components inside the system. Before you begin, review the safety instructions that came with the system. Note: The illustrations in this document are not intended to represent a specific server. To install the cable management arm 1 Locate the components for installing the Cable Management Arm (CMA) assembly: Cable Management Arm tray (1) Cable Management Arm (2) Nylon cable tie wraps (3) 50 Revision 2

51 FortiAnalyzer-2000B hardware installation Installing the cable management arm Figure 8: Cable Management Arm kit contents Note: To secure the CMA for shipment in the rack, loop the tie wraps around both baskets and tray and cinch them firmly. For larger CMAs, the tie wraps can be threaded through the inner and outer baskets and around the tray to secure them. Securing the CMA in this manner will also secure your system in unstable environments. 2 To install or remove the Cable Management Arm Tray, do the following: Note: The CMA tray provides support and acts as a retainer for the CMA. Align and engage each side of the tray with the receiver brackets on the inner edges of the rails and push forward until the tray clicks into place (4). Revision 2 51

52 Installing the cable management arm FortiAnalyzer-2000B hardware installation Figure 9: Installing and removing the Cable Management Arm Tray 4 5 To remove the tray, squeeze the latch-release buttons on both sides toward the center and pull the tray out of the receiver brackets (5). 3 To install and remove the CMA, do the following: Note: You can attach the CMA to either the right or left mounting rail, depending on how you intend to route cables from the system. Mounting the CMA on the side opposite of the power supplies is recommended; otherwise, the CMA must be disconnected in order to remove the outer power supply. You must remove the tray before removing the power supplies. At the back of the system, fit the latch on the front end of the CMA on the innermost bracket of the slide assembly until the latch engages (6). 52 Revision 2

53 FortiAnalyzer-2000B hardware installation Installing the cable management arm Figure 10: Installing and removing the Cable Management Arm Fit the other latch on the end of the outermost bracket until the latch engages (7). To remove the CMA, disengage both latches by pressing the CMA release buttons at the top of the inner and outer latch housings (8). 4 To move the CMA away from the CMA tray, do the following: The CMA can be pulled away from the system and extended away from the tray for access and service (9). Revision 2 53

54 Installing the cable management arm FortiAnalyzer-2000B hardware installation Figure 11: Moving the CMA away from the CMA tray 9 10 At the hinged end, lift the CMA up and off of the tray to unseat it from the tray catch. Once it is unseated from the tray, swing the CMA away from the system (10). Note: You can also extend the CMA into the service position once it is cabled to access the back of the system. 5 To cable the system using the CMA, do the following: Caution: To avoid potential damage from protruding cables, secure any slack in the status indicator cable before routing this cable through the CMA. Using the tie wraps provided, bundle the cables together as they enter and exit the baskets so they do not interfere with adjacent systems (11). 54 Revision 2

55 FortiAnalyzer-2000B hardware installation Installing the bezel Figure 12: Cabling the system using the CMA Installing the bezel With the CMA in the service position, route the cable bundle through the inner and outer baskets (12). Use the preinstalled Velcro straps on either end of the baskets to secure the cables (13). Adjust the cable slack as needed at the hinge position (14). Swing the CMA back into place on the tray (15). Install the status indicator cable at the back of the system and secure the cable by routing it through the CMA. Attach the other end of this cable to the corner of the outer CMA basket. (16). A lock on the bezel restricts access to the power button, optical drive, and hard drive(s). The LCD panel and navigation buttons are accessible through the front bezel. To remove the front bezel 1 Using the system key, unlock the bezel. 2 Pull up on the release latch next to the key lock. 3 Rotate the left end of the bezel away from the system to release the right end of the bezel. 4 Pull the bezel away from the system. See Figure 13. Revision 2 55

56 Connecting the power cables FortiAnalyzer-2000B hardware installation Figure 13: Removing the Front Bezel To install the front bezel 1 Insert the hinge tab on the right of the bezel into the slot on the right side of the system front panel. 2 Rotate the left side of the bezel toward the system. 3 Press the bezel to the system to engage the latch. Connecting the power cables 1 release latch 2 bezel 3 hinge tabs 4 key lock Connect the system s power cable(s) to the system and, if a monitor is used, connect the monitor s power cable to the monitor. 56 Revision 2

57 FortiAnalyzer-2000B hardware installation Securing the power cord Figure 14: Connecting the power cables. Securing the power cord Bend the system power cable into a loop as shown in the illustration and secure the cable to the bracket using the provided strap. Plug the other end of the power cables into a grounded electrical outlet or a separate power source such as an uninterruptible power supply (UPS) or a power distribution unit (PDU). Figure 15: Securing the power cord Revision 2 57

58 Securing the power cord FortiAnalyzer-2000B hardware installation 58 Revision 2

59 Firmware configuration Connecting to the FortiAnalyzer unit Firmware configuration The FortiAnalyzer unit ships with a factory default configuration. The default configuration enables you to connect to the FortiAnalyzer web-based manager to configure the FortiAnalyzer unit onto the network. To configure the FortiAnalyzer unit onto the network, you must: change network interface IP addresses add DNS server IP addresses configure basic routing. Once you complete the network configuration, you can perform additional configuration tasks such as setting the administrator password, setting the system time, and adding Fortinet devices. Connecting to the FortiAnalyzer unit Web-based manager There are two methods of connecting and configuring the basic FortiAnalyzer settings: the web-based manager the command line interface (CLI) The web-based manager provides a GUI interface to configure and administer the FortiAnalyzer unit. For more information about FortiAnalyzer features, see the FortiAnalyzer Administration Guide. You can configure and manage the FortiAnalyzer unit using a secure HTTPS connection from any computer running Internet Explorer 6.0 or other current browser. Configuration changes made using the web-based manager are effective immediately without restarting the FortiAnalyzer unit or interrupting service. For all FortiAnalyzer models, use the following procedure to connect to the web-based manager for the first time. To connect to the web-based manager, you need: an Ethernet connection between the FortiAnalyzer unit and management computer Internet Explorer version 6.0 or higher or other current popular web browser on the management computer To connect to the web-based manager 1 Connect the Port1 interface of the FortiAnalyzer unit to the Ethernet port of the management computer. Use straight-through Ethernet cables to connect the devices through a hub or switch. 2 Configure the management computer to be on the same subnet as the FortiAnalyzer LAN interface. 3 To do this, change the IP address of the management computer to and the netmask to To access the FortiAnalyzer web-based manager, start your browser and browse to (remember to include the s in 5 Type admin in the Name field and select Login. Revision 2 59

60 Configuring basic network settings Firmware configuration After connecting to the Web-based manager, you can configure the FortiAnalyzer unit IP address, DNS server IP address, and default gateway to connect the FortiAnalyzer unit to the network. Command line interface You can access the FortiAnalyzer command line interface (CLI) by connecting a management computer serial port to the FortiAnalyzer serial console connector. You can also use Telnet or an SSH connection to connect to the CLI from any network that is connected to the FortiAnalyzer unit, including the Internet. The CLI supports the same configuration as the web-based manager. You cannot use the CLI to view log data or reports. To connect to the FortiAnalyzer CLI console 1 Use a null-modem cable to connect the serial port on your PC to the management console on the FortiAnalyzer unit. 2 Start a terminal emulation program (such as Hyper Terminal) on the management computer, using these settings: Baud Rate (bps) 9600 Data bits 8 Parity None Stop bits 1 Flow Control None. 3 At the login: prompt, type admin and press Enter. After connecting to the CLI, you can configure the unit IP address, DNS server IP address, and default gateway to connect the FortiAnalyzer unit to the network. Configuring basic network settings When shipped, each network interface associated with a physical network port of the FortiAnalyzer unit has a default IP address and netmask (port1: / ). However, this IP address may not be compatible with the design of your unique network. In addition, you must configure the FortiAnalyzer unit with the IP address of your DNS servers and gateway router. You can use either the web-based manager or the CLI to configure these basic network settings. After configuring the basic network settings, your Fortinet unit will be connected to your network. To configure the FortiAnalyzer unit using the web-based manager 1 In the web-based manager, go to System > Network > Interface. 2 Select Edit for Port1. 3 Enter the IP address and netmask and select OK. If the FortiAnalyzer unit will be connected to the internet: 4 Go to System > Network > DNS. 5 Enter the IP address for the Primary DNS Server and Secondary DNS Server (optional). 60 Revision 2

61 Firmware configuration Configuring the admin account password 6 Select Apply. 7 Got to System > Network > Routing. 8 Select Create New and add the Destination IP/Mask and Gateway IP address and any other routes as required. 9 Select OK. For more configuring options, see the FortiAnalyzer Administration Guide. Configuring the admin account password The default administrator account, named admin, initially has no password. Unlike other administrator accounts, the admin administrator account exists by default and cannot be deleted. The admin administrator account is similar to a root administrator account. This administrator account always has full permission to view and change all FortiAnalyzer configuration options, including viewing and changing all other administrator accounts. Its name and permissions cannot be changed. Before you connect the FortiAnalyzer unit to your overall network, you should configure it with a password to prevent others from logging into the FortiAnalyzer unit and changing its configuration. To change the admin administrator password using the web-based manager 1 Go to System > Admin > Administrators. 2 In the row corresponding to the admin administrator account, click Change Password. 3 In the Old Password field, do not enter anything. (In its default state, there is no password for the admin account.) 4 In the New Password field, enter a password with sufficient complexity and number of characters to deter brute force and other attacks. 5 In the Confirm Password field, enter the new password again to confirm its spelling. 6 Click OK. 7 Click Logout. The Fortinet unit logs you out. To continue using the web-based manager, you must log in again. The new password takes effect the next time that administrator account logs in. Setting the system date and time Caution: Set a strong password for the admin administrator account, and change the password regularly. By default, this administrator account has no password. Failure to maintain the password of the admin administrator account could compromise the security of your FortiAnalyzer unit. For many features to work, including scheduling and logging, the FortiAnalyzer system time must be accurate. You can either manually set the FortiAnalyzer system time or configure the FortiAnalyzer unit to automatically keep its system time correct by synchronizing with a Network Time Protocol (NTP) server. Revision 2 61

62 Collecting FortiGate logs Firmware configuration Note: FortiAnalyzer units support daylight savings time (DST), including recent changes in the USA, Canada and Western Australia. To configure the date and time using the web-based manager 1 Go to System > Dashboard. In the System Information widget, in the System Time row, click Change. 2 From Time Zone, select the time zone in which the Fortinet unit is located. 3 Configure the following to either manually configure the system time, or automatically synchronize the FortiAnalyzer unit s clock with an NTP server. Then click OK. Name of the GUI item System Time Time Zone Refresh Automatically adjust clock for daylight saving changes Description The date and time according to the Fortinet unit s clock at the time that this tab was loaded, or when you last selected the Refresh button. Click to update the System Time field with the current time according to the Fortinet unit s clock. Select the time zone in which the Fortinet unit is located. Enable to automatically adjust the clock of the Fortinet unit when its time zone changes between daylight savings time (DST) and standard time. Set Time Select this option to manually set the date and time of the Fortinet unit s clock, then select the Hour, Minute, Second, Year, Month and Day fields before you click Apply. Synchronize with NTP Server Select this option to automatically synchronize the date and time of the Fortinet unit s clock with an NTP server, then configure the Server and Sync Interval fields before you click Apply. Server Sync Interval Enter the IP address or domain name of an NTP server. To find an NTP server that you can use, go to Enter how often in minutes the Fortinet unit should synchronize its time with the NTP server. For example, entering 1440 causes the Fortinet unit to synchronize its time once a day. Collecting FortiGate logs The power of thefortianalyzer unit centers on reporting and network analysis capability collated from log data. The FortiAnalyzer unit can collect log messages from multiple FortiGate, FortiManager, FortiClient and FortiMail devices and Syslog servers, to enable you to generate many different report types from the log data. This section describes a simple example you can use to test the installation by configuring the FortiAnalyzer unit and a FortiGate unit for log collection. For information on collecting log data from other Fortinet products, see the FortiAnalyzer Administration Guide. To collect logs from a FortiGate unit, you must do the following: 1 Configuring a FortiGate unit to send logs to the FortiAnalyzer unit 2 Registering a FortiGate unit with a FortiAnalyzer unit Configuring a FortiGate unit to send logs to the FortiAnalyzer unit A FortiGate unit must be configured to send log messages to a FortiAnalyzer unit. This configuration can occur before or after the FortiAnalyzer unit s configuration to receive those logs. 62 Revision 2

63 Firmware configuration Collecting FortiGate logs The steps to add a device vary according to the log settings you want, and to a FortiAnalyzer unit s configured response to an initial log connection attempt. For details, see Unregistered Device Options in the FortiAnalyzer Administration Guide. The following procedure uses the default options and configures a FortiGate unit running FortiOS 4.0. Note: Due to the nature of connectivity for certain HA modes, full content archiving and quarantining may not be available for FortiGate units in an HA cluster. For details, see the FortiGate HA Overview. To send FortiGate logs to a FortiAnalyzer unit 1 On the FortiGate unit, go to Log&Report > Log Config > Log Setting. 2 Select the Expand Arrow for Remote Logging and Archiving to expand the options. 3 Select FortiAnalyzer and enter the IP Address of the FortiAnalyzer unit. 4 Select a security level to log. 5 Select Apply. For more information on the logging options, see the Log&Report chapter in the FortiGate Administration Guide. Configuring log types You must also configure the FortiGate unit for the type of data you want the FortiGate unit to log and send to the FortiAnalyzer unit. There are two main locations for configuring log types: configure the event logs by going to Log&Report > Log Config > Event Log. enable feature logs by going to Firewall > Protection Profile, and editing a profile. Registering a FortiGate unit with a FortiAnalyzer unit Once the FortiGate unit begins sending log data to the FortiAnalyzer unit, the FortiGate unit will appear in the devices list. To complete the connection, configure the device privileges and port assignments for the log data. To register a FortiGate unit with a FortiAnalyzer unit 1 On the FortiAnalyzer unit, go to Device > All. 2 Select Edit. 3 Expand the Devices Privileges settings. 4 Set the privileges the FortiGate unit has when sending and viewing log files, archived content and quarantined files. Note: Accessing logs, content logs and quarantined files is available on FortiGate units running firmware version 3.0 or later. 5 Expand the Group Membership settings. 6 Select the group where you want to include the FortiGate unit, and select the right arrow button to add the FortiGate unit to the group. A FortiGate unit can belong to multiple groups. You can also add the FortiGate unit to a group later or change the group you assigned. 7 Expand the FortiGate Interface Specification settings. Revision 2 63

64 Further reading Firmware configuration 8 Define the port interface options using the arrow buttons. For details on port interface settings see Defining FortiGate interfaces on page 64. If you want to add a VLAN or other interface, type the name of the interface and select Add. 9 Select OK. For more information, see the FortiAnalyzer Administration Guide. Defining FortiGate interfaces FortiAnalyzer network activity reports include information on inbound and outbound traffic flow. Traffic flow information is based on the source and destination interfaces of the device and how they are configured to send and receive information. To ensure that the traffic information is represented correctly in these reports, you need to assign the FortiGate interfaces to an interface type. The device interface can include an interface name or a defined VLAN on the device. You can classify the device interfaces as one of None, LAN, WAN or DMZ to match the type of traffic the interface will process. When the FortiAnalyzer unit generates the traffic log report, the FortiAnalyzer unit compares the source and destination interface classifications and determines the directional traffic. The traffic direction is one of: incoming outgoing unclassified and the source or destination interface is one of: internal external The table below illustrates how the source and destination interface types are represented in the log report as traffic direction. Table 1: Log report traffic direction identification Source Destination Traffic Direction None All types Unclassified All types None Unclassified WAN LAN, DMZ Incoming WAN WAN External LAN, DMZ LAN, DMZ Internal LAN, DMZ WAN Outgoing Further reading The FortiGate unit and FortiAnalyzer unit are now configured to send and receive log information. Using this log collection, you can view traffic, vulnerability statistics and run reports from a selection of over 200 reports in 15 categories. To help you in further configuration and data analysis, see these other Fortinet documents, available from the Technical Documentation web site ( FortiAnalyzer Administration Guide includes further configuration and technical information on your FortiAnalyzer unit. 64 Revision 2

65 Firmware configuration Further reading FortiAnalyzer CLI Reference describes all the CLI commands you can use to configure the FortiAnalyzer unit. FortiAnalyzer Log Reference describes the FortiAnalyzer local log messages, which can be used for analysis and troubleshooting purposes. FortiGate Administration Guide includes steps for enabling the various logging options and details on the logging levels. FortiGate Log Message Reference describes what each log messages means and its components. Revision 2 65

66 Further reading Firmware configuration 66 Revision 2

67 Firmware maintenance Backing up the FortiAnalyzer unit Firmware maintenance Fortinet periodically updates the FortiAnalyzer firmware to include enhancements and address issues. After you have registered your FortiAnalyzer unit, FortiAnalyzer firmware is available for download at support.fortinet.com. Only the FortiAnalyzer administrators, whose access profiles contain system configuration read and write privileges, and the FortiAnalyzer admin user can change the FortiAnalyzer firmware. Backing up the FortiAnalyzer unit Before upgrading the FortiAnalyzer firmware, it is a good practice to back up the log data and configuration information stored on the hard disk in case something goes wrong during the upgrade. Backing up the configuration Back up the FortiAnalyzer configuration to a local PC using the web-based manager or to a FTP server using the CLI. To back up the configuration using the web-based manager 1 Go to System > Maintenance > Backup & Restore. 2 Select Encrypt if you want a secure configuration file or to save the passwords included in the configuration. 3 Select Backup and select a location to store the configuration file. To back up the configuration using the CLI, enter the following command: execute backup config {[ftp sftp scp tftp] <ip_address> <arg_1> <arg_2> <arg_3> <arg_4>} where arg_1 For FTP, SFTP or SCP enter a user name. For TFTP enter a directory or filename. arg_2 For FTP, SFTP or SCP enter a password or enter -. For TFTP enter the filename or press Enter. arg_3 For FTP, SFTP or SCP enter a directory or filename. For TFTP, press Enter. arg_4 Enter a filename or press Enter. Backing up the FortiAnalyzer hard disk Before upgrading the FortiAnalyzer firmware, it is extremely important that you back up the log data first. Using the CLI, you can perform a global backup of all log information to an FTP server. To back up the log information on the FortiAnalyzer hard disk, use the CLI to enter the following command: execute backup logs {[all <devices_str>] [ftp scp sftp tftp] <server_ipv4> <username_str> <password_str> <directory_str>} Revision 2 67

68 Upgrading and downgrading firmware using the web-based manager Firmware maintenance Restoring the logs Once you complete the firmware upgrade, you can restore the log information to the FortiAnalyzer hard disk. execute restore logs {[all All_FortiClients <device_name(s)] [ftp sftp scp] <ip_address> <user_name> <password> <directory_str> Upgrading and downgrading firmware using the web-based manager The web-based manager provides an easy method of upgrading or downgrading the firmware on the FortiAnalyzer unit. Upgrading the firmware Note: Before using the restore CLI command, ensure you add the FortiGate units for the logs first. The command will not function without the devices to associate with the logs. For details on adding a FortiGate unit, see the chapter Configuring a FortiGate unit to send logs to the FortiAnalyzer unit on page 62. Note: To use this procedure, you must log on using the admin account, or an administrator account that has system configuration read and write privileges. To upgrade the firmware 1 Download the firmware image file to your management computer. 2 Log on to the web-based manager as the admin administrative user. 3 Go to System > Dashboard. 4 Under System Information > Firmware Version, select Update. 5 Select Choose File and locate the file. 6 Select OK. The FortiAnalyzer unit uploads the firmware image file, upgrades to the new firmware version, restarts, and displays the FortiAnalyzer login. This process takes a few minutes. Downgrading the firmware The following procedures install an older version of the firmware and reverts the FortiAnalyzer unit to its factory default configuration. Before beginning this procedure, it is recommended that you: back up the FortiAnalyzer unit configuration back up the log data on the hard disk. Note: To use this procedure, you must log on using the admin account, or an administrator account that has system configuration read and write privileges. To revert to a previous firmware version 1 Download the firmware image file to the management computer. 68 Revision 2

69 Firmware maintenance Upgrading and downgrading firmware using the CLI 2 Log into the FortiAnalyzer web-based manager. 3 Go to System > Dashboard. 4 Under System Information > Firmware Version, select Update. 5 Select Choose File and locate the file. 6 Select OK. The FortiAnalyzer unit uploads the firmware image file, reverts to the old firmware version, resets the configuration, restarts, and displays the FortiAnalyzer login. This process takes a few minutes. 7 Log on to the web-based manager and restore your configuration and log data. Upgrading and downgrading firmware using the CLI The CLI provides another method of upgrading or downgrading the firmware on the FortiAnalyzer unit. Upgrading the firmware To use the following procedure, you must have a TFTP server the FortiAnalyzer unit can connect to. Note: To use this procedure, you must log on using the admin account, or an administrator account that has system configuration read and write privileges. To upgrade the firmware using the CLI 1 Make sure the TFTP server is running. 2 Copy the new firmware image file to the root directory of the TFTP server. 3 Log on to the CLI. 4 Make sure the FortiAnalyzer unit can connect to the TFTP server. You can use the following command to ping the computer running the TFTP server. For example, if the IP address of the TFTP server is : execute ping Enter the following command to copy the firmware image from the TFTP server to the FortiAnalyzer unit: execute restore image {[ftp sftp scp tftp] <ip_address> <arg_1> <arg_2> <arg_3> <arg_4>} Where arg_1 For FTP, SFTP or SCP enter a user name. For TFTP enter a directory or filename. arg_2 For FTP, SFTP or SCP enter a password or enter -. For TFTP enter the filename or press Enter. arg_3 For FTP, SFTP or SCP enter a directory or filename. For TFTP, press Enter. arg_4 Enter a filename or press Enter. The FortiAnalyzer unit responds with the message: This operation will replace the current firmware version! Do you want to continue? (y/n) 6 Type y. Revision 2 69

70 Upgrading and downgrading firmware using the CLI Firmware maintenance The FortiAnalyzer unit uploads the firmware image file, upgrades to the new firmware version, and restarts. This process takes a few minutes. 7 Reconnect to the CLI. 8 To confirm the new firmware image is successfully installed, enter: get system status Downgrading the firmware This procedure reverts the FortiAnalyzer unit to its factory default configuration and deletes IPS custom signatures, web content lists, filtering lists, and changes to replacement messages. Before beginning this procedure you should: back up the FortiAnalyzer unit system configuration back up the log data on the hard disk Note: To use this procedure, you must log on using the admin account, or an administrator account that has system configuration read and write privileges. To use the following procedure, you must have a TFTP server the FortiAnalyzer unit can connect to. To revert to a previous firmware version using the CLI 1 Make sure the TFTP server is running. 2 Copy the firmware image file to the root directory of the TFTP server. 3 Log on to the FortiAnalyzer CLI. 4 Make sure the FortiAnalyzer unit can connect to the TFTP server. You can use the following command to ping the computer running the TFTP server. For example, if the TFTP server's IP address is : execute ping Enter the following command to copy the firmware image from the TFTP server to the FortiAnalyzer unit: execute restore image {[ftp sftp scp tftp] <ip_address> <arg_1> <arg_2> <arg_3> <arg_4>} Where arg_1 For FTP, SFTP or SCP enter a user name. For TFTP enter a directory or filename. arg_2 For FTP, SFTP or SCP enter a password or enter -. For TFTP enter the filename or press Enter. arg_3 For FTP, SFTP or SCP enter a directory or filename. For TFTP, press Enter. arg_4 Enter a filename or press Enter. The FortiAnalyzer unit responds with the message: This operation will replace the current firmware version! Do you want to continue? (y/n) 70 Revision 2

71 Firmware maintenance Installing firmware images from a system reboot using the CLI 6 Type y. The FortiAnalyzer unit uploads the firmware image file. After the file uploads, a message similar to the following is displayed: Get image from tftp server OK. Check image OK. This operation will downgrade the current firmware version! Do you want to continue? (y/n) 7 Type y. The FortiAnalyzer unit reverts to the old firmware version, resets the configuration to factory defaults, and restarts. This process takes a few minutes. 8 Reconnect to the CLI. 9 To confirm the new firmware image has been loaded, enter: get system status Installing firmware images from a system reboot using the CLI This procedure installs a specified firmware image and resets the FortiAnalyzer unit to default settings. You can use this procedure to upgrade to a new firmware version, revert to an older firmware version, or re-install the current firmware version. To use this procedure, you must connect to the CLI using the FortiAnalyzer console port and a RJ-45 to DB-9 or null-modem cable. This procedure reverts the FortiAnalyzer unit to its factory default configuration. For this procedure you: Access the CLI by connecting to the FortiAnalyzer console port using a null-modem cable. Install a TFTP server that you can connect to from the FortiAnalyzer interface. The TFTP server should be on the same subnet as the internal interface. Before beginning this procedure you can: back up the FortiAnalyzer unit configuration back up the log data on the hard disk To install firmware from a system reboot 1 Connect to the CLI using the null-modem or RJ-45 to DB9 cable and FortiAnalyzer console port. 2 Make sure the TFTP server is running. 3 Copy the new firmware image file to the root directory of the TFTP server. 4 Make sure the internal interface is connected to the same network as the TFTP server. 5 Enter the following command to restart the Fortinet unit: execute reboot The FortiAnalyzer unit responds with the following message: This operation will reboot the system! Do you want to continue? (y/n) Revision 2 71

72 Installing firmware images from a system reboot using the CLI Firmware maintenance 6 Type y. As the FortiAnalyzer units starts, a series of system startup messages is displayed. When one of the following messages appears: Press any key to display configuration menu... Immediately press any key to interrupt the system startup. Note: You have only 3 seconds to press any key. If you do not press a key soon enough, the Fortinet unit reboots and you must log in and repeat the execute reboot command. If you successfully interrupt the startup process, one of the following messages appears: [G]: Get firmware image from TFTP server. [F]: Format boot device. [B]: Boot with backup firmware and set as default [C]: Configuration and information [Q]: Quit menu and continue to boot with default firmware. [H]: Display this list of options. Enter G,F,B,C,Q,or H: 7 Type G to get the new firmware image from the TFTP server. The following message appears: Enter TFTP server address [ ]: 8 Type the address of the TFTP server and press Enter. The following message appears: Enter Local Address [ ]: 9 Type an IP address that can be used by the FortiAnalyzer unit to connect to the FTP server. The IP address can be any IP address that is valid for the network the interface is connected to. Make sure you do not enter the IP address of another device on this network. The following message appears: Enter File Name [image.out]: 10 Enter the firmware image file name and press Enter. The TFTP server uploads the firmware image file to the FortiAnalyzer unit and messages similar to the following are displayed: Save as Default firmware/run image without saving:[d/r] 11 Type D. The FortiAnalyzer unit installs the new firmware image and restarts. The installation might take a few minutes to complete. 72 Revision 2

73 Index Index A administrator "admin" account, 61 password, 61 permissions, 61 air flow, 11 ambient temperature, 11 B backup, 67 bezel installing, 55 C cable management arm, 50 cable management arm tray, 50 cable routing, 32 cable tray, installing, 30 cable-management arm installing, 30 routing cables, 33 cables, 33 center-mount configuration, 37 clock, 62 comments, documentation, 8 configuration backup, 67 connecting to the web-based manager, 59 contents listed two-post rack kit, 34 VersaRails kit, 19, 20 customer service, 7 D daylight savings time (DST), 62 default administrator account, 61 IP address, 60 password, 61 define device port interfaces, 64 DNS server, 60 documentation commenting on, 8 Fortinet, 7 doors removing, 21 replacing, 30 downgrade firmware, 68 E earthing, 13 environmental specifications, 11 F firmware downgrade, 68 installing, 71 re-installing current version, 71 reverting to an older version, 71 upgrade, 68 firmware updates, 67 flush-mount configuration, 38 FortiAnalyzer specs, 11 FortiGate adding, 62 port interfaces, 64 registering, 62 FortiGate documentation commenting on, 8 FortiGate unit groups, 63 registering, 63 Fortinet customer service, 7 Fortinet documentation, 7 Fortinet Knowledge Center, 7 four-post rack removing system, 33, 41 four-post rack kit tools and supplies, 19 VersaRails kit contents, 19, 20 further reading, 64 G gateway, 60 grounding, 12 groups FortiGate unit, 63 H humidity, 11 I installing bezel, 55 cable tray, 30 cable-management arm, 30 four-post rack kit, 26 RapidRails mounting rails, 26 static rail modules, 24, 40 system in four-post rack, 27, 41 two-post rack kit, 34 two-post rack mounting rails, 37, 38 VersaRails mounting rails, 25, 27, 28, 41 installing slide rails, 14 interface configuring, 60 interfaces, 60 Revision 2 73

74 Index introduction Fortinet documentation, 7 IP address, 60 K kit contents two-post rack, 34 VersaRails, 20, 21, 30 L log, 61 logs backup, 67 configuring, 63 restore, 67 M marking rack four-post rack kit, 22 two-post rack kit, 35, 36 mounting, 14 N netmask, 60 Network Time Protocol (NTP), 61 null modem, 60 O operating temperature, 11 P password, 61 permissions, 61 port interfaces, 64 power cables, 57 power cord, 57 powering off, 17 on, 17 R rack unit, 22 read & write access level administrator account, 62 read only access level administrator account, 62 recovery CD, 42 Register a FortiGate unit, 63 removing system from the rack, 49 removing system four-post rack, 33, 41 replacing rack doors, 30 restore, 67 reverting, to an older firmware version, 71 root administrator account, 61 round-hole racks, 45 router, 60 routing cables, 32 S scheduling, 61 shielded twisted pair, 12 shut down, 17 slide rails, 14 sliding rail kit, 43 specifications environmental, 11 FortiAnalyzer, 11 square-hole racks, 44 SSL, 61 standard time, 62 sync interval, 62 system time, 61 T technical support, 7 terminal settings, 60 time, 61 tools and supplies four-post rack kit, 19 two-post rack kit, 34 traffic flow on a FortiGate unit, 64 turning off, 17 on, 17 two-post rack kit installing mounting rails, 37 kit contents, 34 marking rack, 35 tools and supplies, 34 U updating firmware, 67 upgrade firmware, 68 V VersaRails installing, 25, 27, 28, 41 kit contents, 19, 20, 21, 30 vertical rails marking, 22 one rack unit, 22 W web-based manager connecting, Revision 2

75

76