FortiBranchSASE-10F-WiFi-QSG.indd 1 FortiBranchSASE-10F-WiFi-QSG.indd 1 5/9/2024 9:19:48 AM 5/9/2024 9:19:48 AM FortiBranchSASE 10FWiFiQuickStart GuideFBS-10F-WiFi May 09, 2024 Copyright 2023 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinets General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. FortiBranchSASE-10F-WiFi-QSG.indd 2 FortiBranchSASE-10F-WiFi-QSG.indd 2 5/9/2024 9:19:48 AM 5/9/2024 9:19:48 AM https://support.fortinet.com Toll free: 1 866 648 4638 Phone: 1 408 486 7899 Fax: 1 408 235 7737 Email: [email protected] FortiBranchSASE-10F-WiFi-QSG.indd 3 FortiBranchSASE-10F-WiFi-QSG.indd 3 5/9/2024 9:19:48 AM 5/9/2024 9:19:48 AM Register for Support Register your Fortinet product to receive: Technical Support New product features Protection from new threatsVous devez enregistrer le produit pour recevoir: Support technique Nouvelles fonctionnalits du produit Protection contre de nouvelles menacesLa reistrazione ti permette di usufruire di: Supporto Tecnico Nuove funzionalita Protezione dalle ultime minacceDebe registrar el producto para recibir: Apoyo tcnico Nuevas funcionalidades del producto Proteccin contra ataques Package Contents FortiBranchSASE 10FWiFi
(Model: FBS-10F-WiFi) QuickStart Guide 4 Rubber Feet 8 Mounting Screws with 8 Anchors Wall-Mounting Bracket Drill Template Sticker 4 FortiBranchSASE-10F-WiFi-QSG.indd 4 FortiBranchSASE-10F-WiFi-QSG.indd 4 5/9/2024 9:19:49 AM 5/9/2024 9:19:49 AM LED Indicators 1 3 5 2 4 1 Power (PoE 802.3at or 12V DC 3A) 4 WiFi (5GHz & 2.4GHz 2x2 MU-MIMO) Off: Device is off. Green: Device is on. Off: Radios 1 and 2 are off. Blue: Radio 1 is on. Blinking Green: Device is booting up. Blinking Blue: Radio 1 is transmitting data. Orange: System is in error. Orange: Radio 2 is on. 2 LAN/POE (1 Gbps 802.3at PoE RJ45) Green: Radios 1 and 2 are on. Blinking Orange: Radio 2 is transmitting data. Blinking Green: Radios 1 and 2 are transmitting data. 5 Bluetooth Low Energy (BLE) Off: No BLE client. Blue: Client is connected. Off: Link is off. Green: Link is on. Blinking Green: Transmitting at 1 Gbps. Blinking Orange: Transmitting at 100 Mbps. 3 WAN (1 Gbps RJ45) Off: Link is off. Green: Link is on. Blinking Green: Transmitting at 1 Gbps. Blinking Orange: Transmitting at 100 Mbps. FortiBranchSASE-10F-WiFi-QSG.indd 5 FortiBranchSASE-10F-WiFi-QSG.indd 5 5/9/2024 9:19:49 AM 5/9/2024 9:19:49 AM 5 Interfaces 1 3 5 2 4 6 OPTIONAL POWER (12V DC) Optional 12V DC/3A adapter. RESET resets the device. CONSOLE (RJ-45) CLI management computer interface. WAN (RJ-45) 1 Gbps Ethernet interface. LAN/POE (RJ-45) 1 Gbps 802.3at PoE Ethernet interface. USB 3.0 (Type A) software-enabled power through the GPIO, 5V/0.5A. 1 2 3 4 5 6 6 FortiBranchSASE-10F-WiFi-QSG.indd 6 FortiBranchSASE-10F-WiFi-QSG.indd 6 5/9/2024 9:19:50 AM 5/9/2024 9:19:50 AM Mounting Slots and Rubber Feet 1 3 2 1 2 3 MOUNTING SLOTS hang the unit to the wall. RUBBER FEET protect the unit and the desktop or flat surface. KENSINGTON LOCK secures the unit to a stationary object. FortiBranchSASE-10F-WiFi-QSG.indd 7 FortiBranchSASE-10F-WiFi-QSG.indd 7 5/9/2024 9:19:51 AM 5/9/2024 9:19:51 AM 7 Basic Connection FortiExtender LAN/PoE FortiGate/Network Device Internet Connection 1. 2. Insert one end of the Ethernet cable into the LAN/PoE port on the FortiExtender device. Insert the other end of the Ethernet cable into the PoE LAN port of your FortiGate appliance, and ensure that the FortiGate interface provides DHCP server service to issue an IP address to the FortiExtender when connected to LAN/POE of the FortiExtender. Optional: If you are not using PoE, you can connect the device to a power outlet using power adapter. Warning: This device complies with IEEE 802.3af/at PoE specification. Do not use any PoE injectors that are not IEEE 802.3at compliant as they may damage your device. 8 FortiBranchSASE-10F-WiFi-QSG.indd 8 FortiBranchSASE-10F-WiFi-QSG.indd 8 5/9/2024 9:19:51 AM 5/9/2024 9:19:51 AM IP Configuration After you have connected the FortiExtender network interfaces, the device automatically attempts to obtain an IP address from the DHCP server. If the device fails to obtain a DHCP IP, it will be set to the default IP address of 192.168.1.2/24. Alternatively, FortiBranchSASE 10FWiFi (Model: FBS-10F-WiFi) comes with a default wireless LAN management interface. You can log on to the interface at http://192.168.200.99, using the devices serial number as the network SSID. You can connect to it manually to access the devices GUI. Its a network with open security (no password). We strongly recommend that you change the WiFi LAN security mode right away. To log in to the FortiExtender device, start the FortiExtender GUI, and in both the username and password fields, type admin and press the Enter key on your keyboard. Note: If you are logging in to the device for the first time, you will be prompted to change the default password. We strongly recommend that you change the password right away. FortiBranchSASE-10F-WiFi-QSG.indd 9 FortiBranchSASE-10F-WiFi-QSG.indd 9 5/9/2024 9:19:51 AM 5/9/2024 9:19:51 AM 9 Installation The FortiBranchSASE 10FWiFi (Model: FBS-10F-WiFi) device is designed to be placed on a desk or mounted on a wall using the provided Wall-Mounting Bracket. Place on top of a desk or flat surface 1. Attach the rubber feet to the four corners on the bottom of the unit. 2. Place the unit on a desk or flat surface. 3. Secure the unit in a place with a Kensington lock, if necessary. (Note: Kensington lock is not included in the product package.) 10 FortiBranchSASE-10F-WiFi-QSG.indd 10 FortiBranchSASE-10F-WiFi-QSG.indd 10 5/9/2024 9:19:51 AM 5/9/2024 9:19:51 AM Mount on a wall 1. Peel off the drill template sticker, and stick it to a desired location on the wall. 2. Use the template to mark and drill the pilot holes. 3. 4. Insert the anchors into the holes. Insert the screws through the four mounting holes of the wall mounting bracket into the anchors on the wall and tighten. 5. Hold the device facing you, slide it into the wall mounting bracket from right to left until it locks. FortiBranchSASE-10F-WiFi-QSG.indd 11 FortiBranchSASE-10F-WiFi-QSG.indd 11 5/9/2024 9:19:52 AM 5/9/2024 9:19:52 AM 11 Cautions and Warnings Environmental specifications Ambient operating temperature: 0C to 45C. Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude). Rfrez la Fiche Technique de ce produit pour les caractristiques environnementales (Temprature de fonctionnement, temprature de stockage, humidit et laltitude). Safety Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is connected only to PoE networks without routing to the outside plant. Attention: Ce matriel doit tre utilis dans un Environnement Rseau 0 par IECTR 62101. Ce produit est uniquement connect aux rseaux PoE sans installation externe de routage. This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2 and rated 12V DC, 3A or by 54Vdc from PoE source. Le produit doit tre aliment par un bloc dalimentation courant continu homologu UL de 12V DC, 3A nominal marqu LPS ou Class2 ou par une source dalimentation par Ethernet de 54 Vdc (PoE). Regulatory Notices Federal Communication Commission (FCC) USA This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received; including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in residential installation. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. WARNING: Any changes or modifications to this unit not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 21cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Caution: Operation of this device is restricted to indoor use only. For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. Industry Canada Equipment Standard for Digital Equipment (ICES) Canada This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numrique de la classe B est conforme la norme NMB-003 du Canada. Innovation, Science and Economic Development
(ISED) Canada This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canadas licence-exempt RSS(s). Operation is subject to the following two conditions:
1.This device may not cause interference. 2.This device must accept any interference, including interference that may cause undesired operation of the device. Lmetteur/rcepteur exempt de licence contenu dans le prsent appareil est conforme aux CNR dInnovation, Sciences et Dveloppement conomique Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes:
1.Lappareil ne doit pas produire de brouillage;
2.Lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible. Pour les produits disponibles aux tats-Unis / Canada du march, seul le canal 1 11 peuvent tre exploits. Slection dautres canaux nest pas possible. This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 24cm between the radiator
& your body. Cet quipement est conforme aux limites dexposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 24cm de distance entre la source de rayonnement et votre corps. 12 FortiBranchSASE-10F-WiFi-QSG.indd 12 FortiBranchSASE-10F-WiFi-QSG.indd 12 5/9/2024 9:19:52 AM 5/9/2024 9:19:52 AM The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate. Le gain maximal dantenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se conformer la limite de p.i.r.e. spcifie pour lexploitation point point et non point point, selon le cas. Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for harmful interference to co-channel mobile satellite systems. Attention: Le dispositif de la bande 5150-5250 MHz est rserv un usage intrieur afin de rduire linterfrence nuisible potentielle aux systmes mobiles par satellite co-canal.
(iii) where applicable, antenna type(s), antenna models(s), and worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in section 6.2.2.3 shall be clearly indicated.
(iii) lorsquil y a lieu, les types dantennes (sil y en a plusieurs), les numros de modle de lantenne et les pires angles dinclinaison ncessaires pour rester conforme lexigence de la p.i.r.e. applicable au masque dlvation, nonce la section 6.2.2.3, doivent tre clairement indiqus. This radio transmitter (IC: 7280B-2317T096 / Model: FBS-10F-WiFi) has been approved by ISED to operate with the antenna type listed below with maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Le prsent metteur radio (IC: 7280B-2317T096 / Model: FBS-
10F-WiFi) a t approuv par ISED pour fonctionner avec les types dantenne numrs ci-dessous et ayant un gain admissible maximal. Les types dantenne non inclus dans cette liste, et dont le gain est suprieur au gain maximal indiqu, sont strictement interdits pour lexploitation de lmetteur. This device and its antennas(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures. Cet appareil et son antenne (s) ne doit pas tre co-localiss ou fonctionnement en association avec une autre antenne ou transmetteur. Antenna Type Antenna Connnector Antenna No. PIFA i-pex(MHF) Gain (dBi) 2.4~2.4835GHz 5.180~5.825GHz 1 2 3 Chain0 Chain1 BLE 4.9 3.8 3.6 5.2 5.5
European Conformity (CE) EU This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. The product transmits within the frequency ranges and less than or equal to the power listed below:
24122472 MHz less than 20 dBm 24022480 MHz less than 20 dBm 24052480 MHz less than 20 dBm 51805240 MHz less than 23 dBm 52605320 MHz less than 23 dBm *
55005700 MHz less than 30 dBm *
57455825 MHz less than 14 dBm Note: * Only with DFS bands certification. This equipment should be installed and operated with minimum distance 20cm between the radiator and your body. Simplified EU Declaration of Conformity This declaration is only valid for Fortinet products (including, combinations of software, firmware and hardware) provided by Fortinet or Fortinets authorized partners to the end customer directly for use within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any Fortinet products not obtained directly from Fortinet or Fortinets authorized partners may not comply with EU Directives and Fortinet makes no assurances for such products. 2014/53/. esky Tento produkt je v souladu se smrnic 2014/53/EU. Dansk Dette produkt er i overensstemmelse med direktiv 2014/53/EU. Deutsch Dieses Produkt entspricht der Richtlinie 2014/53/EU. Eesti See toode vastab direktiivile 2014/53/EL. English This product is in compliance with Directive 2014/53/EU. Espaol Este producto cumple con la Directiva 2014/53/UE. 2014/53/. Franais Ce produit est conforme la Directive 2014/53/UE. Hrvatski Ovaj proizvod je u skladu s Direktivom 2014/53/EU. 13 FortiBranchSASE-10F-WiFi-QSG.indd 13 FortiBranchSASE-10F-WiFi-QSG.indd 13 5/9/2024 9:19:52 AM 5/9/2024 9:19:52 AM 24122472 MHz 51805240 MHz 52605320 MHz 55005700 MHz 57455825 MHz 19.96 dBm 22.74 dBm 22.48 dBm 29.41 dBm 13.78 dBm UK Conformity Assessed (UKCA) United Kingdom The product transmits within the frequency ranges and less than or equal to the power listed below:
24022480 MHz less than 20 dBm 24052480 MHz less than 20 dBm 24122472 MHz less than 20 dBm 51805240 MHz less than 23 dBm 52605320 MHz less than 23 dBm*
55005700 MHz less than 30 dBm*
Note: *Only with DFS bands certification. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This product is in compliance with Statutory Instrument 1206 Radio Equipment Regulations 2017 The full Declaration of Conformity for this product is available in the link below:
https://site.fortinet.com/ProductRegulatory/UK The device is restricted to indoor use only when operating in the 5150 to 5350 MHz frequency range in the following countries:
National Telecommunications Commission (NCC) Taiwan 3.8.2(10971) Italiano Questo prodotto conforme alla Direttiva 2014/53/EU. Latviski is produkts atbilst Direktvai 2014/53/EU. Lietuvi is gaminys atitinka direktyv 2014/53/ES. Malti Dan il-prodott huwa konformi mad-Direttiva 2014/53/UE. Magyar Ez za termk megfelel a 2014/53/EU irnyelvnek. Nederlands Dit product is in overeenstemming met Richtlijn 2014/53/EU. Norsk Dette produktet er i samsvar med direktiv 2014/53/EU. Polski Ten produkt jest zgodny z dyrektyw 2014/53/UE. Portugus Este produto est em conformidade com a Diretiva 2014/53/UE. Rumunski Acest produs este n conformitate cu Directiva 2014/53/UE. Slovensky Tento produkt je v slade so smernicou 2014/53/E. Slovensko Ta izdelek je v skladu z Direktivo 2014/53/EU. Suomi Tm tuote on direktiivin 2014/53/EU mukainen. Svenska Denna produkt verensstmmer med direktiv 2014/53/EU. Note: The full declaration of conformity for this product is available at the link below:
https://site.fortinet.com/ProductRegulatory/EU The device is restricted to indoor use only when operating in the 5150 to 5350 MHz frequency range in the following countries:
Compliance with 2014/53/EU Radio Equipment Directive (RED) In accordance with Article 10.8(a) and 10.8(b) of the RED, the following table provides information on the frequency bands used and the maximum RF transmit power of the product for sale in the EU:
Frequency Range (MHz) 24022480 MHz 24052480 MHz Max. Transmit Power (dBm) 9.98 dBm 9.97 dBm 14 FortiBranchSASE-10F-WiFi-QSG.indd 14 FortiBranchSASE-10F-WiFi-QSG.indd 14 5/9/2024 9:19:52 AM 5/9/2024 9:19:52 AM For Product License Agreement/EULA and Warranty Terms, visit https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf FortiBranchSASE-10F-WiFi-QSG.indd 15 FortiBranchSASE-10F-WiFi-QSG.indd 15 5/9/2024 9:19:52 AM 5/9/2024 9:19:52 AM 15 Fortinet Customer Service & Support Create a support account, register and manage your products, download updates, firmware images and release notes, and create technical support tickets. https://support.fortinet.com Fortinet Document Library Up-to-date versions of Fortinet publications for the entire family of Fortinet products. http://docs.fortinet.com Training Services Course descriptions, availability, schedules, and location of training programs in your area. http://www.fortinet.com/training Technical Discussion Forums Communicate with other customers and Fortinet partners about Fortinet products, services, and configuration issues. https://support.fortinet.com/forum FortiGuard Threat Research and Response Up-to-date information on vulnerabilities and threats, includes a virus scanner, IP signature look-up, and web filtering tools. http://www.fortiguard.com Fortinet.com FortiBranchSASE-10F-WiFi-QSG.indd 16 FortiBranchSASE-10F-WiFi-QSG.indd 16 5/9/2024 9:19:52 AM 5/9/2024 9:19:52 AM