Firewall Installation and Configuration for my Home Network | FortiGate 80D - Fortinet
ฝัง
- เผยแพร่เมื่อ 9 มิ.ย. 2024
- I am installing a new firewall for my home network, a FortiGate 80D.
In this video, I give reasons why I decided to acquire the Fortinet, I perform a password recovery for a factory reset and proceed with basic configuration for a home use.
My home lab (datacenter):
• A tour of my home rack...
KBTrainings is an online training platform created to share my knowledge in the IT. In a world where technologies are radically changing the way we live and future economies, KBTrainings has set itself the goal of popularizing IT concepts and allowing many to start or boost their careers in IT.
The contents range from basic notions and introductions to advanced concepts for engineers. We will cover the following areas: applications, networking and security, web design & development, programming and automation.
In computer networks and security we will focus on Cisco, which is a benchmark in the industry, helping you to get Cisco CCNA and CCNP certificates. These certificates are highly respected in the industry and are a very practical way to prove your knowledge and start or advance your career.
Visit KBTrainings at: www.kbtrainings.com
Follow us on the following platforms:
TH-cam: / @kbtrainings
Instagram: / kbtrainings
Facebook: / kbtrainings-6855822152...
Twitter: / kbtrainings
I have watched a few videos on Fortigate configuration and you are by far the most coherent teacher of the subject. You seem like a truly brilliant person. I appreciate your efforts on helping myself and others understand these techniques. Keep moving forward along your path of positivity. Cheers my friend
Thank you Keith! These words mean a lot!
Glad you appreciate what I do.
Cheers!
Excellent video. I recently passed a few NSE FortiGate certifications and was granted a free FG-70F appliance. I followed your video to migrate my home network to the new FortiGate, and everything worked as expected.
Thank you again for putting these together.
Hi, I am fairly new to fortigate firewalls as this is something we use at work, but I need to understand how they work and build VPNs and so on, would you be able to tell me where you took classes or what you study and where you took the exam please?
@@albertoh2414idk if you’ve been able to find anything yet, but udemy could POSSIBLY have a few courses on that. Not entirely sure but considering it’s a site with so many different courses and studies there should be something. Goodluck!
This is an wonderful video on FortiGate or Firewall for the beginners. Nothing beats the hands on experience. Keep up the good work man!
Glad you enjoyed it!
This is a great video. I start a systems engineer role in a week. So all of the information you provided is good for a refresher. I'm actually going to watch it a few more times.
Thank you Will...
And congrats 🥳
My firewall has been finally connected! Thank you KBT for your help videos. Keep recording! Good luck
Glad to help!
You're welcome sir!
I watched so many videos but your video was very helpful for me. Thanks so much for such as easy and great tutorial. Subscribed now!
Good to know!
Thank you for your viewership.
Will be adding more videos on the FortiGate
Thank you for this. This has given me an idea on how to install a hardware firewall.
You are welcome Blecyn!
I am glad it helped.
Regards from Madrid with mi 600d fortinet, you are very profesional thanks
Great video! Keep up the excellent content.
Thank you Bart!
Great Video! Keep them coming buddy.
Thanks Patrick!
Thank you for sharing 🤗👌
explained very nicely .. thank you
my pleasure!
you are a genius dude, keep it up
Thank you bro.
Will try 🙂
HELLO, WELL EXPLAINED..... EXCELLENT CONTENT.
Thank you sir! Glad you liked it!
Great video
Nice i installed a 60D in my home and is the best Router/Firewall with UTM !!
Yes, it is for me too.
You get full control on your home network and a lot traffic details!
Thank you for your viewership
Great intro. Thanks
Thank you!
Thanks for the awesome video
You are welcome!
Thx buddy really helped alot🙌🙌💯
Glad it helped
thank you
thank you for you
You're welcome!
Thank you so much!
Thank you for watching!
Just found your channel and I like it and I subscribed, too. I also realized that you always make two versions of your videos: one in English and the other in French.
Awesome, thank you!
thanks for sharing
You’re welcome!
Wow, what a fantastic video. I've always wanted to learn the basic about configuring a firewall for my home. This helps tremendously. Now just need to figure out what's best for my home environment. Any suggestions for a home with 30+ devices which includes wifi cameras, smart devices, IPTV watching, and 2 business PCs? And of course I subbed to your channel.
Glad it was helpful!
Ubiquiti can help at an almost affordable price with the UDM, USW and UAPs.
Thank you for the visit Derrick!
Thx for the video Will Smith 😁
You're welcome! 😀😀
Hey , great video i just subscribed!
One quick question, i do not see how you are not using default route to the internet i would think is always sort of this:
in network> static route> 0.0.0.0 gateway .
In this case how is the default route? and what is the gateway configured in the default route?
thanks
Good info KBT. Although I am from central EU haven't scanned your network yet :)
🤣🤣🤣🤣
Great Video Sir
Sir can you make a video on how to set up a DMZ lab using fortigate 6.2 and setting some policy on it
So nice of you
Thank you
De rien!
Hi its very convenient video thanks
I just want to know if I have router witch is connect with fiber unit how to can I configure second router
Which Netgear router do you recomed use in 2022? that also has a fiber port and remote vpn
Hi, foremost thanks for your videos. myself have a doubt whether we need to configure static routes in fortigate setup as shown in cookbook or not necessary?
Thank you for your viewership Kanthan.
I assume you're talking about static route on WAN1...?
In my case I didn't have to because the default route installed itself with the ISP DHCP configuration.
But If I had another internal network that has no interface on the FortiGate, I would've had to configure static routes.
Not sure if this answers your question. 🙂
Thank you soooo much Sir
My pleasure !
Thanks for watching.
subscribed !!!!!!!
Thank you!
I'd like to run one of these for home use and see these at a good price on ebay. Do I need additional licenses to run and keep up to date?
Hello Great video. Very informative. Can you provide a logical diagram of how you connected the devices ?
Sure, I will make a social media post about it.
Actually, I have a new setup that I am going to be installing soon with more details. More coming
Guy, I would like to get the FortiGate 80D for my homework, how does the licensing work? do you pay every year? Are there any other models you can recommend for a home network?
Any particular reason why you decided to choose a fortigate over a ubiquity firewall?
Hey, maybe silly question but does this firewall has implicite deny on incoming connection from outside or di we have to define a rule for that. Also i guess that established connection are implicitely accepted is that right? Thanks for your videos, very helpful. Take care
Hi Medz,
I need to verify about the deny all rule, it should be there at the end of all the rules, if not, you need to create one.
Not sure if it comes with the device.
This is a stateful firewall, so outbound connections do not need a rule to be accepted back in the network.
Thank you,
Guy
Thank you, Thank you......Fan Here
Humble requests down
1) "Please please make a video on how to configure Hp switch step by step with VLAN and How to connect cable connectivity to other HP switch if exceeds employees port limit, PLEASE
2) Make a step by step video on configuring AVAYA IP telephone system with one phone activation.
Thank you so much
Go bless you
Thank you for your viewership!
I don't have these devices (HP switch and Avaya phone) but I will look into having them to make a video about them. Coming...!
Hi can you do video on how you setup the ubiquiti switch and access points with fortigate
Sure,
I have a video coming on it.
hiii when you bought it, did you ask the seller to reach fortigate in order to transfer the device registration? and if you did that, did fortigate just transfered the device to you for free? I wanna buy one but I'm unaware of the process
bro! excelent tutorials! thanks a lot. I have a question. give me your hand on it please 🙂! my ISP is using RG 45 network. the cable is coming to my router first and to the fortigate after router...
I would like to get rid of the router and connect ISPs cable directly to the fortigate. My ISP is using L2TP for the connection. However when I try to configure WAN on my fortigate I can not see L2TP for co figuration. can such connection be created on my fortigate? please advise. thank you!
Hey Roman,
Thank you for watching.
I am not familiar with L2TP being use for hand off by the ISP, usually use it for VPN.
But anyway, you should talk to the ISP, they might be able to help.
Good luck!
Hi, first of all thank you for sharing. The video is simple to understand. I have few questions and hope you can help.
1) For a small home, which one you recommend.. Fortigate 60D or 80D?
2) In this video, the WAN interface you set it to DHCP. What if my ISP is using PPPoE? How does the configuration look like? Can you share it? Thank you very much..
For a small business, I would advise anything between the 30E and the 80F, depending on the throughput you are looking for.
Check out this link and select entry level: www.fortinet.com/products/next-generation-firewall?tab=models-specs#models-specs
But between the 80D and 60D, I will pick the 80D.
For PPPo#, under the WAN interface, change the "Addressing mode" to PPPoE and insert your credentials.
@@KBTrainings thank you for the replied...will go through the link you provided.. 👍👍👍
You are welcome
Curious how you'd use the fortigate if I have a mesh network router today. Would the fortigate be the nat router or would my Orbi?
You can use the mesh devices as access points only and delegate all the routing/nating to the FortiGate.
Thank you for your viewership Ben!
@@KBTrainings Could I use the as only the firewall for inbound/outbound to the internet. Do routing and dhcp from the orbi mesh?
Could I use the as only the firewall for inbound/outbound to the internet. Do routing and dhcp from the orbi mesh?
Yes, I think you can do that by setting the physical ports to switch mode. Check out this article: cookbook.fortinet.com/choosing-fortigate-switch-mode/index.html
Thank you for your viewership Ben!
Wow you make IT so easy to learn. Pls I want I want to network my desktop computer laptop and a printer in my room. I want a peer to peer network with wireless printer connections pls.
I think there is a way to connect the laptop to the printer's wireless network, not sure about that, many brands and models out there, my HP printer could do it,
Last resort, use a cable.
Thank you Ronny!
I like to watching your videos, as we always learn something new from your videos.
Also i installed fortinet fw on vmware now i want to pass my home traffic from my fortinet firewall, is that possible. can you please help me.
First of all i am totally new to firewalls. I would like to know what is the concept of public IP. If i got one then can i use on this Device ?
Public IPs are ranges of IPs that can be use on the internet. They must be unique for everything to work well.
You need one from your ISP to connect to the internet.
I will make a video about it. And I talk about it in this CCNA lesson: kbtrainings.com/topic/lesson-1-1-4-ip-address/
Hey KBT. Why I am unable to connect internet on my port1 ISP?? First I used static IP with ISPs gatway - didnt have internet. Now I got rid off static route and connected ISP to give me IP address but still unable to surf internet. What I do wrong ?? please help
What happened to the complete physical hookup???
Hi, I work in access security control, so I manage AD and software application, but I've never managed a Firewall, currently I'm working over my CISSP, so what is your recommendation to begin to set up a Firewall.
Just do that
Which is better Cisco ASA or the device you using in this video?
The ASA is not a NGFW (New Generation Firewall), so this FortiGate 80D is better and provides more options and control. If I want to go Cisco, I would buy a Cisco Firepower.
Can you have your WAN subnet and LAN subnet different ?
Yes, sure. They have to be different as they are two distinct networks.
Hi, this is a question from a begineer, does it required to know the no of user in purchasing a firewall.?
When building a network or planning for a firewall, it helpsnto know the number of users you will have for many reason... Bandwidth, VPN clients...
For exemple, firewalls have a certains numbers of VPN tunnels they can build at a given time, usually depending on some kind of license you have...
Did you get fortiguard bundle with it ?
Yes, I did. And then it expired.
Do you still running this setup after two years? How is your experince? I am getting a Fortigate 80D today to also access my Eve-Ng lab at home remotely. I will let you know how it goes. Thanks for the idea
The experience is good.
I went from the 80D to the 60E about 4 months ago because the 80D can't receive OS updates anymore, which is not a big deal.
2 days ago I switches to the UDM Pro SE, that is what I am using now.
Cool, let me know how it goes.
@@KBTrainings aaa that is why the 80D are now lower in price than the 60E in eBay. Thanks for the reply. I will report back in few weeks.
Hello brother is there a way to contact you? Thanks so much for your tutorials.
Hello Richard,
You can email me at contact@kbtrainings.com.
Anytime!
Are the FortiGate 80D ports POE? For the life of me I cannot find documentation.
Np, they're not PoE
You only have 36 pinned icons on your taskbar, I think you need more! =)
😀😀 Was thinking the same!
Did you really plug the wan port from your Netgear to your Fortinet ?
Yes, I did.
I don't get the question...? What is wrong with it? lol
Why connecting cable from ISP to port 1 I have no connectivity to the intrnet ??
Sorry, I am not sure I understand the question.
But you have only 4 ports on the 80D and you need to configure one of them as WAN, I picked port 1.
@@KBTrainings yes. That what I have been trying to do for last two days. I have set everything. The ISP gateway, policy object and still no Internet on ports 2, 3 and 4. I think I am having problem to set ISPs gateway.
Yeah. Your ISP can probably help.
You need know what kinds of connections you have. Mine currently is a PPPoE where I need credentials and a VLAN tag 201 on the port to connect, so there might be a lot to do there.
You can call your ISP for details.
Thanks,
Guy.
@@KBTrainings cheers man
Anytime!
Compare to Ubiquiti ?
Ubiquity is great too. Both of them have their pros and cons, but I think Fortinet has mastered his game and is great for big players and I personally love it (Fortinet).
Can you use it without license?
Yes you can.
Actually, my licenses just expired and I will make a video about it.
Thank you for your viewership.
KBtrainings Thank you!
You would of sold me on the sunglasses if they were offered in reading strength for older people 2x 3x etc
🙂
Trying out their hardware against Sophos and Watchguard, pfsense, Zyxel, Netgear and juniper has been painful. Maybe they are not caring about the small 40F wifi after touting it as just not sure. My first update took out WPA3 even though it continues to be available as an option. The wireless cookbook refuses to acknowledge anything about WPA3? The next latest update never fixed that and now took out all favorites. You make them and now they are all dropped in minutes. At this point it is offline and will check for future updates but how much of this downgrading one can take is crazy.
Yep, these things can sometimes have unpredictable behaviors.
Having worked with an MSP supporting thousands of customers running FortiGates, I have seem some strange things. The unit might be defective or needs a full reset.
@@KBTrainings Not going to reset after all the programming... that would be a first especially after being on call 18 years and also seeing some strange things. thx
I see.
Can't you backup all the configs?
@@KBTrainings I do but resetting makes me think the config has an issue also so why restore it?
Do you need fixed ip address
Yes. And if you don’t have fixed IP, you can use DDNS.
My bandwidth consumes a lot
I need help
Where is this Fortinet 7.0? See it nowhere after the announcement.
Not sure.
It might still be in beta or it takes some time before the deployment.
@@KBTrainings Guess so seems odd to make that announcement if so. Guess there was a problem at the last moment. thx for the reply
Anytime sir!
How much is it
Depends. Most of them are used now, maybe 80$
@KBTrainings I got mine for 20 € on ebay yesterday
do you need a license?
No, I don't.
cabling, ip addresses .... before the software...
Au début je cru que c'était en français
😊
How to see the password?
Sorry, I don't get the question, can you clarify? What password?
@@KBTrainings can router connected to mobile phone
In a way yes.
You can use the browser.
But there is no mobile app that I know of.
If you're talking about VPN you can use the FortiClient on the phone.
Dude you are talking about security, that's why you bought device that isn't manufactured since 2018 and you won't be receving updates in 2022? Doesn't seem like long term decision.
I know it is not the top of the line, but for a home network it does more than a regular router you get from your ISP, even without updates or licenses. I wouldn't advise this to a business though.
Thank you for your viewership Wiziek!
@@KBTrainings What's the difference between home and enterprise setup if you open ports or service? Routers were attacked even through simple NAT with no opening ports, it is even worse state for devices without software update. I'm not talking about buying something expensive, just device that is hardware and software supported. No updates means no security...
The difference is that, in case of open ports, I have a list of allowed IP that can get through those ports (Workplace IP, Friends IP...) So they are not widely opened to all the internet. Which wouldn't be the case if I were hosting a website of any other kind of public services.
I can do port forwarding with any other home router, but not all of them can let me choose which IPs to accept.
No updates, no security! 🤔... It depends.
I get your point and you're right, but there is a way to go around all the weaknesses and have a secured network with an old device. And I started using this device for my own training and I will definitely get another one in the future, looking into USG to match the rest of my network devices or Pfsense, not sure.
@@wiziek you can update the firewall to the latest OS no problem.
les explications en français frere seront meilleur, la communiauté française souffre
Tu as raison Richard, c'est pourquoi je publie toutes mes videos dans les deux langues. Les contenus en francais ne sont pas aussi abondants qu'en anglais.
@@KBTrainings Merci Ir, et continue de nous donner de bonne chose, nous attendons aussi les configurations avencées de fortinet. pensés aussi sur la voip avec CUCM et voir aussi à nous partagées l'image iso de CUCM car plus part utilise le milieu virtuel.