fortiweb quickstart guide...scripting, fortiweb platforms help you prevent identity theft, financial...

15
FortiWeb QuickStart Guide

Upload: others

Post on 06-Jul-2020

32 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FortiWebQuickStart Guide

Page 2: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

FORTIWEB QUICKSTART GUIDE

A starter guide to getting FortiWeb up and running on AWS

The Fortinet FortiWeb Web Application Firewall on AWS provides the specialized, layered application threat protection for medium and large enterprises that customers have come to expect, while housed on flexible, cloud-based infrastructure on AWS with multiple pricing models to suit specific budgetary needs. Using advanced techniques to provide bidirectional protection against malicious sources, application layer DoS attacks, and sophisticated threats like SQL injection and cross-site scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and enforce government regulations, industry best practices, and internal policies.

Why FortiWeb for AWS?

Baseline AWS security provides a good first level of protection, but for more fine-tuned firewall control it is necessary to utilize a third-party web application firewall. FortiWeb provides enterprise-grade firewall security to protect workloads running on cloud infrastructure and communicating with outside networks, either on-premises data centers or interacting with the public Internet. FortiWeb is also available in flexible hourly, annual, or BYOL pricing models.

2

Page 3: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

Here are step-by-step instructions to get FortiWeb up and running on AWS:

1. Log in to AWS and go to VPC to create new VPC.

2. Go to Subnets and create new two subnets: public and private.

3

Page 4: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

4

Page 5: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

3. Log in to AWS and click “Launch Instance.”

4. From the left column, select AWS Marketplace and in search label put “FortiWeb,” then select “Fortinet FortiWeb-VM (BYOL).”

5. Continue.

5

Page 6: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

6. Choose an Instance Type and click Review and Launch.

7. Select Configure Instance and configure VPC and Subnets.

6

Page 7: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

8. Create a new security group.

9. Go to Review and Launch.

10. Click Next.

7

Page 8: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

11. Click Launch.

Important information:

12. Select an existing key pair or create a new key pair and confirm check box and click Launch Instances.

8

Page 9: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

13. Rename Instance.

14. Go to Elastic IPs and add Associate Address for 10.0.0.31.

9

Page 10: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

15. Open VPC menu and select Route Tables. In Routes tab, add value shown below.

And in Subnet Associations, select Private subnet.

10

Page 11: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

16. In EC2, click in menu Network Interfaces and select Change Source/Dest. Check.

17. Open HTTPS session with public DNS address. To hostname add: https://xxxx.eu-central-1.compute.amazonaws.com

11

Page 12: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

18. Log in.

Login: admin

Password: It is your Instance-ID

12

Page 13: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

19. Go to Network -> Interface.

13

Page 14: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

FORTIWEB QUICKSTART GUIDE

20. Go to Status and go to the Console on page shown below.

Put: execute ping 10.0.0.1

Put: execute ping 10.0.1.1

14

Page 15: FortiWeb QuickStart Guide...scripting, FortiWeb platforms help you prevent identity theft, financial fraud, and denial of service. It delivers the technology you need to monitor and

Support

For more use cases on Fortinet products and support, please visit www.fortinet.com/aws and Fortinet cloud security solution.

v1.0 07.22.16

Copyright © 2016 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners.

www.fortinet.com

FORTIWEB QUICKSTART GUIDE