Quickstart Guide: Fortiweb High-End Series
Quickstart Guide: Fortiweb High-End Series
▪ Warranty Coverage
http://support.fortinet.com
Copyright© 2022 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered
trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law
trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics
contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network
variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding
commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding
written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform
according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified
in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same
ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or
development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full
any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify,
transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.
For Product License Agreement / EULA and Warranty Terms, visit https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf
2 3
Table of Contents
FortiWeb 2000F....................................................................................... 6
Products
FortiWeb 3000F..................................................................................... 12
FortiWeb 4000F..................................................................................... 18
Rack Installation..................................................................................... 24
Installation
Basic Connections................................................................................. 28
SFP Installation....................................................................................... 29
Appliance Setup.....................................................................................30
GUI................................................................................................ 31
Setup
Command Line Interface (CLI).................................................... 32
Compliance
Regulatory Compliance Information......................................................33
4 5
FWB-2000F
40F/41F
Box Includes - FortiWeb 2000F
FortiWeb 2000F
QuickStart Guide
1x Ethernet Cable 2x HDD Tray Keys 1x Rail Mount Kit 2x Handles, 4x Screws
(screws included)
4x Rubber Feet
6 7
FWB-2000F
Front - FortiWeb 2000F
1 2 3 4 5 6 7 8
1 2
1 Power Switch Appliance On/Off
10 11
FWB-3000F
Box Includes - FortiWeb 3000F
FortiWeb 3000F
QuickStart Guide
1x Ethernet Cable 2x HDD Tray Keys 1x Rail Mount Kit 2x Handles, 4x Screws
(screws included)
4x Rubber Feet
12 13
FWB-3000F
Front - FortiWeb 3000F
Bypass LED
1 2 3 4 5 6 7
1 2
1 Power Switch Appliance On/Off
16 17
FWB-4000F
Box Includes - FortiWeb 4000F
FortiWeb 4000F
QuickStart Guide
1x Ethernet Cable 2x HDD Tray Keys 1x Rail Mount Kit 2x Handles, 4x Screws
(screws included)
4x Rubber Feet
18 19
FWB-4000F
Front - FortiWeb 4000F
Bypass LED
1 2 3 4 5 6 7 8
4 Management Ports MGMT1 192.168.1.99, MGMT2 192.168.2.99 Green: Bypass disabled, normal traffic flow to CPU
ACT LINK
BYPASS Red: Bypass active, traffic flows to the bypass
Green: Link established, no activity Amber: Link established at 1000Mbps Off: Open mode active, traffic drops
Flashing Green: Data activity Green: Link established at 100Mbps
8 Ports 13 to 20 (RJ-45) GE Ethernet ports
Off: No link established Off: No link established or at 10Mbps
Green: Link established, no activity Amber: Link established at 1000Mbps
Power Supply Status LINK/ Flashing Green: Data activity SPEED Green: Link established at 100Mbps
ACT
Green: Power supplies operating normally Off: No link established Off: No link established or at 10Mbps
Red: Power supply error
Ports 13 & 14, 15 & 16, 17 & 18, 19 & 20 (RJ-45) GE Ethernet Bypass ports
5 Console Port (RJ-45) CLI management computer interface Green: Bypass disabled, normal traffic flow to CPU
USB Ports (USB A) 3.0 server ports
BYPASS Red: Bypass active, traffic flows to the bypass
20 Off: Open mode active, traffic drops 21
FWB-4000F
Rear - FortiWeb 4000F
1 2
1 Power Switch Appliance On/Off
22 23
Rack Installation Rail Assembly
Rack Stability
Ensure the rack is stable before installing the slide rails and appliance.
Installation
• Check that the leveling jacks on the bottom of the rack are fully extended to
the floor with the full weight of the rack resting on the jacks
• For single rack installation, stabilizers should be attached to the rack; for
multiple rack installations, the racks should be coupled together
Appliance Installation
•
• To avoid personal injury or equipment damage, use a lifting device
• Do not pick up the appliance by the front handles • The rail kit includes a left and a right rail assembly
• Each inner rail has a system lock out tab to prevent the appliance from • Each rail assembly includes an inner rail, a middle rail, and an outer rail
sliding out, ensure that it is locked when installing the appliance • The inner rail has locking keyholes used to secure the rail to the appliance
• Prevent Electrostatic discharge (ESD) damage by wearing antistatic devices • The inner rail rear end has a lock out tab which slides into the middle rail
• Do not place heavy objects on the appliance • The middle rail is in the outer rail and used to guide the inner rail into the
outer rail
• The outer rail has front and rear mounting pins that push into to the rack holes
• The outer rail also has front and rear locking latches to secure the rail to the
What You Will Need rack
Mounting Pins
• Philips screwdriver, level & tape measure
• Rack-provided cage nuts and screws Locking Latch
• A lifting device or additional support
• ESD antistatic gear
Support
http://support.fortinet.com
Release Tab Locking Keyhole
24 25
Attach the Inner Rails to the Appliance Attach the Outer Rails to the Rack
1. Detach the inner rail from the rail assembly by pressing the lock out tab Front Outer Rail
2. Place an inner rail against a side of the appliance 1. Place an outer rail against a side of the rack
3. Align the inner rail keyholes with the appliance pins 2. Align the front outer rail with the front of the rack
4. Slide the rail towards the front of the appliance until the metal clip locks into 3. Push the front outer rail mounting pins into the rack post holes
place 4. Lock the locking latch to safely secure the front outer rail to the post
5. For inner rails with 5 keyholes and a chassis with 3 pins and a thread hole, use
Installation
the provided M4 shoulder screw to secure the rail to the appliance Rear Outer Rail
6. Repeat steps 1 to 5 for the remaining inner rail 5. Extend the rear outer rail just past the rack post
6. Level the rail and align the mounting pins
7. Push the rear mounting pins into the rack post holes
8. Lock the locking latch to safely secure the rear outer rail to the post
9. Repeat steps 1 to 8 for the remaining outer rail
2
Inner Rail 7
Mount Rail
5
Extend Rail
Metal Clip
1
3 Right Rail
Align Rail 2
Front Rail
2
Inner Rail
4 Unlocked
6
Slide Forward Align & Level
Locked 8
Lock Latch
4
Lock Latch
3
Mount Rail
5
Install M4 Shoulder Screw
26 27
Basic Connections SFP Installation
To install the SFP transceivers
1. Slide the SFP into the cage socket until it clicks into place
2. Lift the latch to lock the SFP
Installation
Power Connection Power Outlet
or UPS Cage Socket
SFP
Internet
To remove the SFP transceivers
Cage Socket
1
1. Plug in your device to power outlet using the provided power cables
2.Connect a WAN port to the internet using the supplied Ethernet cable
Latch
2
SFP
Note: Your device has dual AC inputs for failover redundancy. If both
AC inputs are used, only one is active. If the active AC input fails, the
second input will be active.
28 29
Appliance Setup GUI
Set up your appliance locally or on the cloud by choosing one of the
following options. https://1
92.168.1
Usernam .99
e: admin
No Pass
word
GUI
Local Setup Connect locally using a web-browser Port 1
Management Computer
Local Setup Connect locally using a direct console connection 1. Connect port 1 to the Management Computer with the supplied Ethernet cable
Setup
2. Enable DHCP or set the Management Computer’s IP and subnet to:
30 31
CLI
Cautions and Warnings Convient pour une utilisation dans l’espace aérien conformément à l’article 300-22 (C)
du Code National de l’Electricité, et des articles 2-128, 12-010 (3) et 12-100 du Code de
l’électricité canadien, Partie 1, CSA C22.1.
Environmental specifications
Caution: Slide/rail mounted equipment is not to be used as a shelf or a work space.
Ambient operating temperature: 0°C to 40°C
Attention: Un équipement monté sur bâti ne doit pas être utilisé sur une étagère ou dans
un espace de travail.
Rack Mount Instructions - The following or similar rack-mount instructions are included with
the installation instructions:
Laser Class 1 optical transceiver shall be used only
Speed (default): 9600 Instructions de montage en rack - Les instructions de montage en rack suivantes ou
L’émetteur-récepteur optique de classe 1 laser doit être utilisé uniquement
similaires sont incluses avec les instructions d’installation:
The SFP ports should use UL Listed Optional Transceiver product, Rated 3.3Vdc, Laser
Data bits: 8 Elevated Operating Ambient - If installed in a closed or multi-unit rack assembly, the
Class 1.
Les ports SFP doivent utiliser un produit émetteur-récepteur en option répertorié UL, 3,3
Stop bits: 1 operating ambient temperature of the rack environment may be greater than room ambient.
Therefore, consideration should be given to installing the equipment in an environment
Vdc, classe laser 1.
compatible with the maximum ambient temperature (Tma) specified by the manufacturer.
Parity: None Température ambiante élevée – S’il est installé dans un rack fermé ou à unités
Warning: Class I Equipment. This equipment must be earthed. The power plug must be
connected to a properly wired earth ground socket outlet. An improperly wired socket outlet
multiples, la température ambiante de fonctionnement de l’environnement du rack peut
Flow Control: None être supérieure à la température ambiante de la pièce. Par conséquent, il est important
could place hazardous voltage on accessible metal parts.
Avertissement: Équipement de classe I. Cet équipement doit être mis à la terre. La fiche
d’installer le matériel dans un environnement respectant la température ambiante maximale
d’alimentation doit être connectée à une prise de terre correctement câblée. Une prise
(Tma) stipulée par le fabricant.
de courant mal câblée pourrait placer une tension dangereuse sur les pièces métalliques
accessibles.
Reduced Air Flow - Installation of the equipment in a rack should be such that the amount
Console Port of air flow required for safe operation of the equipment is not compromised.
Ventilation réduite – Installation de l’équipement dans un rack doit être telle que la quantité
Warning: All Ethernet cables are designed for intra-building connection to other equipment.
Do not connect these ports directly to communication wiring or other wiring that exits the
de flux d’air nécessaire au bon fonctionnement de l’équipement n’est pas compromise.
Management Computer Mechanical Loading - Mounting of the equipment in the rack should be such that a
building where the appliance is located.
Avertissement: Tous les câbles Ethernet sont conçus pour une connexion intra-bâtiment à
d’autres équipements. Ne connectez pas ces ports directement au câblage de communi-
hazardous condition is not achieved due to uneven mechanical loading.
Console Cable
cation ou à tout autre câblage qui sort du bâtiment où se trouve l’appareil.
Chargement Mécanique – Montage de l’équipement dans le rack doit être telle qu’une
situation dangereuse n’est pas lié à un chargement mécanique inégal.
1. Connect the Console Port with a console cable to the Management Computer
branchement de l’équipement au circuit d’alimentation et être particulièrement attentif aux two conditions:
effets de la suralimentation sur le dispositif assurant une protection contre les courts-circuits (1) this device may not cause harmful interference, and
et le câblage. Ainsi, il est recommandé de tenir compte du numéro d’identification de (2) this device must accept any interference received; including interference that may cause
l’équipement. undesired operation.
Data bits: 8 Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales
party responsible for compliance could void the user’s authority to operate the equipment
Compliance
Pièces mobiles – Pièces mobiles dangereuses. Se tenir éloigné des lames mobiles du
Flow control: None ventilateur. This digital apparatus does not exceed the Class A limits for radio noise emissions from
digital apparatus set out in the Radio Interference Regulations of the Canadian Department
Warning: Equipment intended for installation in Restricted Access Location. of Communications.
Avertissement: Le matériel est conçu pour être installé dans un endroit où l’accès est
restreint. Cet appareil numérique n’émet pas de bruits radioélectriques dépassant les limites
4. Press Enter on your keyboard to connect to the CLI This equipment is not suitable for use in locations where children are likely to be present
applicables aux appareils numériques de la classe A prescrites dans le Règlement sur le
brouillage radioélectrique édicte par le ministère des Communications du Canada.
Cet équipement n’est pas adapté à une utilisation dans des endroits où des enfants sont
susceptibles d’être présents
European Conformity (CE) - EU
5. Log in using username admin and no password Battery – Risk of explosion if the battery is replaced by an incorrect type. Do not dispose
of batteries in a fire. They may explode. Dispose of used batteries according to your local This is a Class A product. In a domestic environment, this product may cause radio
regulations. IMPORTANT: Switzerland: Annex 4.10 of SR814.013 applies to batteries. interference, in which case the user may be required to take adequate measures.
Batterie – Risque d’explosion si la batterie est remplacée par un type incorrect. Ne jetez
6. Enter CLI commands to configure your appliance pas les batteries au feu. Ils peuvent exploser. Jetez les piles usagées conformément aux
réglementations locales. IMPORTANT: Suisse: l’annexe 4.10 de SR814.013 s’appliquent
aux batteries.
警告
Voluntary Control Council for Interference (VCCI) – Japan
本電池如果更換不正確會有爆炸的危險
この装置は、クラスA機器です。この装置を住宅環境で使用すると電波妨害を引き起
請依製造商說明書處理用過之電池
こすことがあります。この場合には使用者が適切な対策を講ずるよう要求されること
Note: For detailed CLI instructions, visit support.fortinet.com CAUTION:
があります。
VCCI-A
There is a danger of explosion if a battery is incorrect replaced. Replace only with the same
or equivalent type. Product Safety Electrical Appliance & Material (PSE) – Japan
Dispose batteries of according to the manufacturer’s instructions.
Disposing a battery into fire, a hot oven, mechanically crushing, or cutting it can result in 日本では電気用品安全法(PSE)の規定により、同梱している電源コードは本製品の専用
an explosion. 電源コードとして利用し、他の製品に使用しないでください。
Leaving a battery in an extremely hot environment can result in leakage of flammable liquid,
gas, or an explosion.
If a battery is subjected to extremely low air pressure, it may result in leakage of flammable
liquid, gas, or an explosion.
WARNUNG:
Lithium-Batterie Achtung: Explosionsgefahr bei fehlerhafter Batteriewechsel. Ersetzen
Sie nur den gleichen oder gleichwertigen Typ. Batterien gemäß den Anweisungen des
Herstellers entsorgen.
Beseitigung einer BATTERIE in Feuer oder einen heißen Ofen oder mechanisches Zerklein-
ern oder Schneiden einer BATTERIE, die zu einer EXPLOSION führen kann
Eine BATTERIE, die einem extrem niedrigen Luftdruck ausgesetzt ist, der zu einer EXPLO-
SION oder zum Austreten von brennbarer Flüssigkeit oder Gas führen kann.
32 33
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan
The presence conditions of the restricted substance (BSMI RoHS table) are available at
the link below:
警告使用者: 此為甲類資訊技術設備,於居住環境中使用時,可能會造成射頻擾動,在此
種情況下,使用者會被要求採取某些適當的對策。
請仔細閱讀以下說明
1.本設備勿置於潮濕處。
2.連接至電源前,請先檢查電壓。
3.當設備不用時,請將所有電源線拔除,避免電壓不穩而造成傷害。
4.勿將任何液體濺入設備中,避免線路短路。
5.基於安全理由,只有受到專業訓練的從業人員,才可以打開本設備。
6.請勿自行調整或修理已通電的設備,以確保您的安全。
7.如不小心受傷,請立刻找急救人員給予您適當的救護,千萬別因傷勢輕微而忽
略自己的傷勢。
8.請依照台灣法規處置電池。
若不正確替換電池可能導致爆炸危險,替換電池時,請使用設備生產商推薦使
用的電池。
請勿拆卸、刺穿或以其他方式損壞電池。
9.雷射設備非用戶維修設備,請與生產商聯繫維修事宜。
英屬蓋曼群島商防特網股份有限公司台灣分公司
地址:台北市內湖區行愛路176號2樓
電話:(02) 27961666
China
此为A级产品,在生活环境中,该产品可能会造成无线电干扰。这种情况下,可能需要用
户对其采取切实可行的措施。
34 35
Fortinet.com