QuickStart GuideFortiGate 4800F SeriesFG-4800F and FG-4801F http://support.fortinet.com November 21, 2022 Copyright 2022 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinets General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. For Product License Agreement / EULA and Warranty Terms, visit https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf 2 3 Before you beginRegister your device to access FortiGuard updates, cloud management, firmware upgrades, technical support and warranty coverage.Scan the QR Code or visit: https://links.fortinet.com/fortiexplorer/downloads FortiExplorer AppRapidly provision, deploy, and monitor Security Fabric components including FortiGate and FortiWiFi devices from your mobile. Download now for free.This guide covers: FG-4800F and FG-4801F 4 5 Package ContentsFortiGate 4800F Series FG-4800F and FG-4801FFortiGate Device1x Ethernet CableQuickStart Guide4x C15 Power Cables 1x Console Cable6x Rubber Feet2x SFP+ Transceivers1x Rail KitThe EssentialsFor a detailed Getting Started guide, setup and configuration information, refer to the Admin Guide on https://docs.fortinet.com/For contracts, licensing, product registration and account management, contact FortiCare Support at https://www.fortinet.com/support/contactAccess our knowledge base, forums, videos and technical experts at https://www.fortinet.com/support/support-services/forticare-supportDefault Loginshttps://192.168.1.99 Username: admin Password: leave blankAdmin GuideCustomer ServiceSelf-service ResourcesThank you for choosing FortinetMGMT1 IP is 192.168.1.99 MGMT2 IP is 192.168.2.99 66 7 Additional Setup OptionsSet up your Fortinet device locally or connect using forticloud.comGUIEthernet CableManagement ComputerMGMT1https://192.168.1.99Username: admin No PasswordNote: For static IP configuration, use 192.168.1.1 with subnet mask 255.255.255.0Console PortManagement ComputerNote: For a detailed CLI guide, visit docs.fortinet.comUSB Console Cable CLI 112233Speed (default): 9600Data bits: 8 Stop bits: 1Parity: NoneFlow Control: None Quick SetupUnpack the box, power the device, plug the Ethernet cable from a WAN port to the Internet and launch FortiExplorer using one of the following:33Follow the on-screen instructions to complete your setupFollow the on-screen instructions to complete your setup111222FortiExplorer will automatically detect your deviceIf the device is not detected, navigate to My Fabric, tap Add and follow the FortiExplorers on-screen instructionsScan the FortiGate Cloud Key located on your Fortinet deviceEnable Bluetooth on your Fortinet device and your mobile, then place them near each other Connect your mobile to your Fortinet device with a USB cableNavigate to My Fabric, then tap AddBLE Auto Detection Note: FortiExplorer can manage FortiGates without WiFi capabilities once they have been provisioned to allow HTTP/S admin accessUSB ConnectivityFortiGate Cloud Key Registration-or--or-SFP Modules SFP Modules Installation Removal Cage Socket 1 2 Tx SFP Rx Cage Socket 1 2 SFP Lock 8 9 Desktop Installation Rack Installation 1.5in 1.5in 1.5in 1.5in Note: Place the device on a flat, clean and stable surface. 3 2 1 Note: The recommended clearance is 1.5 inches above and below the device in a 19 inch rack. Caution: To avoid personal injury or damage to the device, it is recommended that two or more people mount the device on a rack. 10 11 Rail Assembly Attach the Inner Rails to the Appliance 1. Detach the inner rail from the rail assembly by pressing the lock out tab 2. Place an inner rail against a side of the appliance 3. Align the inner rail keyholes with the appliance pins 4. Slide the rail towards the front of the appliance until the metal clip locks into place 5. For inner rails with five keyholes and a chassis with three pins and a thread hole, use the provided M4 shoulder screw to secure the rail to the appliance 6. Repeat steps 1 to 5 for the remaining inner rail The rail kit includes a left and a right rail assembly Each rail assembly includes an inner rail, a middle rail, and an outer rail The inner rail has locking keyholes used to secure the rail to the appliance The inner rail rear end has a lock out tab which slides into the middle rail The middle rail is in the outer rail and used to guide the inner rail into the outer rail The outer rail has front and rear mounting pins that push into to the rack holes The outer rail also has front and rear locking latches to secure the rail to the rack 2 Inner Rail Locking Latch Mounting Pins Lock Out Tab Outer Rails Inner Rails Metal Clip 3 Align Rail 2 Inner Rail Unlocked 4 Slide Forward Locked Release Tab Locking Keyhole 5 Install M4 Shoulder Screw 12 13 Attach the Outer Rails to the Rack Install the Appliance Front Outer Rail 1. Place an outer rail against a side of the rack 2. Align the front outer rail with the front of the rack 3. Push the front outer rail mounting pins into the rack post holes 4. Lock the locking latch to safely secure the front outer rail to the post Rear Outer Rail 5. Extend the rear outer rail just past the rack post 6. Level the rail and align the mounting pins 7. Push the rear mounting pins into the rack post holes 8. Lock the locking latch to safely secure the rear outer rail to the post 9. Repeat steps 1 to 8 for the remaining outer rail 7 Mount Rail 5 Extend Rail 6 Align and Level 8 Lock Latch 1 Right Rail 2 Front Rail 4 Lock Latch 3 Mount Rail 14 Safety Precautions 1. Check that the inner rails are secured to the appliance 2. Inspect that the rack posts and outer rails are secured and level Rail Installation 3. Slide the middle outer rails forward until they fully extend and lock into place 4. Using a lifting device, lift the appliance and align the inner rails with the middle rails 5. Slide the appliance and inner rails into the middle rails until there is a stop System Lock 6. Apply even pressure and slide the release tabs outward while sliding the appliance all the way into the rack until the system release tabs click and lock into position 7. Use four rack screws (not provided) to secure the appliance to the rack System Lock Out Tab Release Tab Inner Rail Metal Clip System Release Button 7 2 Inspect Posts 3 Extend Rails 5 Slide Rails 4 Align Rails 1 Check Rail Locks System Lock Out Tab System Lock Out Tab 6 Release Tab Release Tab 15 FG-4800F Series Front Panel FortiGate 4800F MGMT1 HA1 AUX1 CONSOLE BLE USB MGMT2 HA2 AUX2 21 3 4 5 1 2 3 4 5 6 7 8 SFP56 6 9 11 13 15 17 19 21 23 25 27 10 12 14 QSFP56 16 18 20 22 24 26 28 QSFP-DD 7 8 1 BLE Blue: BLE is activated and connected Flashing Blue: BLE activated, waiting for pairing Off: BLE is deactivated 2 STATUS HA Green: Normal operation Flashing Green: Booting up Green: Operating in an HA cluster Red: HA failure Off: HA disabled ALARM POWER Red: Major alarm detected Amber: Minor alarm detected Off: No errors detected Green: Device is on Flashing Green: Checking PFR Off: Device is off 3 Console (RJ45) CLI interface USB (USB A) USB 3.0 server port MGMT Ports MGMT1 HA1 1 7 9 11 13 15 17 19 21 23 25 27 29 31 33 35 MGMT2 HA2 2 8 10 12 14 16 18 20 22 24 26 28 30 32 SFP+/SFP28 34 QSFP28 36 3 4 5 6 LINK/ACT 4 MGMT 1 and MGMT 2 (RJ45) 10GE management ports Green: Link established Flashing Green: Data activity Off: No link established STATUS FortiGate 3500F SPEED ALARM Green: Connected at 10 Gbps Amber: Connected at 1 Gbps Off: Linked at 100 Mbps or no link established HA POWER CONSOLE USB LINK/ACT SPEED 5 6 7 8 Ports HA1, HA2, AUX1, and AUX2 Green: Connected at 50/25/10/1 Gbps Flashing Green: Data activity Off: No link established Ports 1 to 8 (SFP56) Green: Connected at 50/25/10/1 Gbps Flashing Green: Data activity Off: No link established Ports 9 to 20 (QSFP56) SFP28/SFP56 Ports Bottom Port Top Port Green: Connected at 400/200/100/50/40/25/10/1 Gbps Flashing Green: Data activity Off: No link established QSFP-DD Ports Ports 21 to 28 (QSFP-DD) Green: Connected at 400/200/100/50/40/25/10/1 Gbps Flashing Green: Data activity Off: No link established 16 17 FG-4800F Series Rear Panel SSD1 SSD2 FAN1 FAN2 FAN3 2 1 1 Power Supplies 200-240VAC, 7-6A, 50/60Hz (x4) 1+1 Redundant, hot-swappable power supplies Power Supply LED Indicators OK Green: Standby rail and main output on Flashing Green: Standby rail and main output off Off: Error or no AC power input FAIL Amber: Main output or fan error detected Flashing Amber: Power supply warning event detected Off: No errors or no power 18 19 CAUTION/ATTENTIONSHOCK HAZARD. DISCONNECT ALL POWER SOURCES.RISQUE DLECTROCUTION. DBRANCHEZ TOUTES LESSOURCES DALIMENTATION. Cautions and Warnings Environmental specifications Ambient operating temperature: 0C to 40C IEC 60825-1:2014 transfer to FDA/CDRH Complies with FDA performance standards for laser products except for conformance with IEC 60825-1 Ed.3., as described in Laser Notice No. 56, dated May 8, 2019. IEC 60825-1:2014 transfert la FDA/CDRH Conforme aux normes de performance de la FDA pour les produits laser, lexception de la conformit la norme IEC 60825-1 Ed.3., comme dcrit dans lavis laser n 56, dat du 8 mai 2019. Rack Mount Instructions - The following or similar rack-mount instructions are included with the installation instructions:
Instructions de montage en rack - Les instructions de montage en rack suivantes ou similaires sont incluses avec les instructions dinstallation:
The SFP ports should use UL Listed Optional Transceiver product, Rated 3.3Vdc, Laser Class 1. Les ports SFP doivent utiliser un produit metteur-rcepteur en option rpertori UL, 3,3 Vdc, classe laser 1. Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer. Temprature ambiante leve Sil est install dans un rack ferm ou units multiples, la temprature ambiante de fonctionnement de lenvironne-
ment du rack peut tre suprieure la temprature ambiante de la pice. Par consquent, il est important dinstaller le matriel dans un environnement respectant la temprature ambiante maximale (Tma) stipule par le fabricant. Reduced Air Flow - Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised. Ventilation rduite Installation de lquipement dans un rack doit tre telle que la quantit de flux dair ncessaire au bon fonctionnement de lquipe-
ment nest pas compromise. Mechanical Loading - Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading. Chargement Mcanique Montage de lquipement dans le rack doit tre telle quune situation dangereuse nest pas li un chargement mcanique ingal. Circuit Overloading - Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. Surtension Il convient de prendre lensemble des prcautions ncessaires lors du branchement de lquipement au circuit dalimentation et tre particulirement attentif aux effets de la suralimentation sur le dispositif assurant une protection contre les courts-circuits et le cblage. Ainsi, il est recommand de tenir compte du numro didentification de lquipement. Reliable Earthing - Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips). Fiabilit de la mise la terre Fiabilit de la mise la terre de lquipement mont en rack doit tre maintenue. Une attention particulire devrait tre ac-
corde aux connexions dalimentation autres que les connexions directes au circuit de drivation (par exemple de lutilisation de bandes de puissance). Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude) Rfrez la Fiche Technique de ce produit pour les caractristiques environnementales (Temprature de fonctionnement, temprature de stockage, humidit et laltitude). Safety Moving parts Hazardous moving parts. Keep away from moving fan blades. Pices mobiles Pices mobiles dangereuses. Se tenir loign des lames mobiles du ventilateur. Warning: Equipment intended for installation in Restricted Access Location. Avertissement: Le matriel est conu pour tre install dans un endroit o laccs est restreint. Warning: A readily accessible disconnect device shall be incorporated in the building installation wiring. Avertissement: Un dispositif de dconnexion facilement accessible doit tre incorpor dans linstallation lectrique du btiment. Warning: A UL Listed external disconnect device, i.e. circuit breaker or other, with over current protection suitable for local code(rated 6A recommend-
ed) shall be installed with this equipment Avertissement: Un dispositif de dconnection externe homologu UL, exemple dun disjoncteur ou autre, avec des protections de surintensit appro-
pries (nominal 6A recommand) Iinstallation de ce matriel. Battery Risk of explosion if the battery is replaced by an incorrect type. Do not dispose of batteries in a fire. They may explode. Dispose of used batteries according to your local regulations. IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries. Batterie Risque dexplosion si la batterie est remplace par un type incorrect. Ne jetez pas les batteries au feu. Ils peuvent exploser. Jetez les piles usages conformment aux rglementations locales. IMPORTANT: Suisse: lannexe 4.10 de SR814.013 sappliquent aux batteries. CAUTION: Shock Hazard. Disconnect all power sources. ATTENTION: Risque dlectrocution. Dbranchez toutes les sources dalimentation. Grounding To prevent damage to your equipment, connections that enter from outside the building should pass through a lightning / surge protec-
tor, and be properly grounded. Use an electrostatic discharge workstation (ESD) and/or wear an anti-static wrist strap while you work. In addition to the grounding terminal of the plug, on the back panel, there is another, separate terminal for earthing. Mise la terre Pour viter dendommager votre matriel, assurez-vous que les branchements qui entrent partir de lextrieur du btiment passent par un parafoudre / parasurtenseur et sont correctement mis la terre. Utilisez un poste de travail de dcharge lectrostatique (ESD) et / ou portez un bracelet anti-statique lorsque vous travaillez. Ce produit possde une borne de mise la terre qui est prvu larrire du produit, ceci sajoute la mise la terre de la prise. This product has a separate protective earthing terminal provided on the back of the product in addition to the grounding terminal of the attachment plug. This separate protective earthing terminal must be permanently connected to earth with a green with yellow stripe conductor minimum size #6 AWG and the connection is to be installed by a qualified service personnel. Ce produit a une borne de mise la terre spar sur le dos de lappareil, en plus de la borne de mise la terre de la fiche de raccordement. Cette borne de mise la terre spare doit tre connect en permanence la terre avec un conducteur vert avec la taille bande jaune de minimum #6 AWG et la connexion doit tre install par un personnel qualifi. Caution: Slide/rail mounted equipment is not to be used as a shelf or a work space. Attention: Un quipement mont sur bti ne doit pas tre utilis sur une tagre ou dans un espace de travail. Warning: Class I Equipment. This equipment must be earthed. The power plug must be connected to a properly wired earth ground socket outlet. An improperly wired socket outlet could place hazardous voltage on accessible metal parts. Avertissement: quipement de classe I. Cet quipement doit tre mis la terre. La fiche dalimentation doit tre connecte une prise de terre cor-
rectement cble. Une prise de courant mal cble pourrait placer une tension dangereuse sur les pices mtalliques accessibles. Warning: All Ethernet cables are designed for intra-building connection to other equipment. Do not connect these ports directly to communication wiring or other wiring that exits the building where the appliance is located. Avertissement: Tous les cbles Ethernet sont conus pour une connexion intra-btiment dautres quipements. Ne connectez pas ces ports directe-
ment au cblage de communication ou tout autre cblage qui sort du btiment o se trouve lappareil. Regulatory Notices Federal Communication Commission (FCC) USA This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense. WARNING: Any changes or modifications to this product not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and oper-
ated with minimum distance 20cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Innovation, Science and Economic Development (ISED) Canada This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canadas licence-ex-
empt RSS(s). Operation is subject to the following two conditions:
1.This device may not cause interference. 2.This device must accept any interference, including interference that may cause undesired operation of the device. Lmetteur/rcepteur exempt de licence contenu dans le prsent appareil est conforme aux CNR dInnovation, Sciences et Dveloppement conomique Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes:
1.Lappareil ne doit pas produire de brouillage;
2.Lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operat-
ed with minimum distance 20cm between the radiator & your body. Cet quipement est conforme aux limites dexposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 20cm de distance entre la source de rayonnement et votre corps. European Conformity (CE) - EU This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. The product transmits within the frequency ranges and less than or equal to the power listed below:
2402-2480MHz less than 20dBm This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Simplified EU Declaration of Conformity This declaration is only valid for Fortinet products (including combinations of software, firmware and hardware) provided by Fortinet or Fortinets au-
thorized partners to the end-customer directly for use within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any Fortinet products not obtained directly from Fortinet or Fortinets authorized partners may not comply with EU Directives and Fortinet makes no assurances for such products. Laser Class 1 optical transceiver shall be used only Lmetteur-rcepteur optique de classe 1 laser doit tre utilis uniquement 20 21 2014/53/. Malti Dan il-prodott huwa konformi mad-Direttiva 2014/53/UE. esky Tento produkt je v souladu se smrnic 2014/53/EU. Magyar Ez a termk megfelel a 2014/53/EU irnyelvnek. Dansk Nederlands Dette produkt er i overensstemmelse med direktiv 2014/53/EU. Dit product is in overeenstemming met Richtlijn 2014/53/EU. Deutsch Norsk Dieses Produkt entspricht der Richtlinie 2014/53/EU. Dette produktet er i samsvar med direktiv 2014/53/EU. Eesti Polski See toode vastab direktiivile 2014/53/EL. Ten produkt jest zgodny z dyrektyw 2014/53/UE. English Portugus This product is in compliance with Directive 2014/53/EU. Este produto est em conformidade com a Diretiva 2014/53/UE. Espaol Este producto cumple con la Directiva 2014/53/UE. Rumunski 2014/53/. Franais Ce produit est conforme la Directive 2014/53/UE. Hrvatski Ovaj proizvod je u skladu s Direktivom 2014/53/EU. Italiano Questo prodotto conforme alla Direttiva 2014/53/EU. Latviski is produkts atbilst Direktvai 2014/53/EU. Lietuvi is gaminys atitinka direktyv 2014/53/ES. Acest produs este n conformitate cu Directiva 2014/53/UE. Slovensky Tento produkt je v slade so smernicou 2014/53/E. Slovensko Ta izdelek je v skladu z Direktivo 2014/53/EU. Suomi Tm tuote on direktiivin 2014/53/EU mukainen. Svenska Denna produkt verensstmmer med direktiv 2014/53/EU. Note: The full Declaration of Conformity for this product is available in the link below:
https://site.fortinet.com/ProductRegulatory/EU UK Conformity Assessed (UKCA) United Kingdom The product transmits within the frequency ranges and less than or equal to the power listed below:
2402-2480MHz less than 20dBm This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This product is in compliance with Statutory Instrument 1206 Radio Equipment Regulations 2017 The full Declaration of Conformity for this product is available in the link below:
https://site.fortinet.com/ProductRegulatory/UK National Telecommunications Commission (NCC) Taiwan NCC 22 23 Fortinet.com