Replacing Fortinet Fortiguard 60

[jdncpa]

I am attempting to replace my often hated Fortinet Fortiguard 60 firewall with a untangle box.

Our current set up is:

Internet >>> Cisco IAD 2400 >>> Fortinet >>> Internal Network

I managed to get the configuration settings from the Fortinet which I am hoping makes this transition easier.

I'm a bit of a novice when it comes to networking. I don't even know if this should be set up as a router or a bridge. I guess that's my first question.

After that I'm sure I will cross more issues as they come along.

Thanks for any help you guys can provide. Especially if anyone has any tips on this particular set up (removing the fortinet).

[dwasserman]

If your fortinet is in bridge mode, replace by untangle in bridge mode
If is in router mode, replace in router mode.
Post here the interfaces configuration of your fortinet.

[jdncpa]

THANKS FOR THE FAST RESPONSE. Is posting the config file from the fortinet safe? Is there anything in the file that could allow us to be hacked?

[dmorris]

I wouldn't post the whole config.
I would just give us some basic information about how your interfaces are configured.

[jdncpa]

The config file is 10 pages. I'm at a loss determining what will be helpful and what would be dangerous to post.

Is it possible to email the complete config file to a trustworthy untangle employee?

[dwasserman]

The main issue is your public ip if fortinet manage them, put a fake ip or mask with xxx.xxx

But if you recognize your "bit of a novice when it comes to networking" my advice is work in team with an untangle reseller near your area.

[dmorris]

The config file is 10 pages. I'm at a loss determining what will be helpful and what would be dangerous to post.

Is it possible to email the complete config file to a trustworthy untangle employee?

Sure if you're a paying support subscriber just email support@untangle.com and ask for help.

[jdncpa]

I managed to get the untangle box connected to the internet using settings from my fortinet. However, the rest of the network behind the untangle box cannot see the internet. Are there some settings in here I need in order for the internet to pass through the box? Any changes I need to make to my domain server (wouldn't think so but thought I would ask just in case).

As far as being a paying support subscriber - I am evaluating the free version of untangle before I decide to get a paid version. As a prospective customer I hope to get a little help from support.

[dmorris]

Maybe, but their priority is paying customers.

You'll need to describe your network before we can formulate any guesses as to why clients behind have no internet access...