config system admin
edit admin
set trusted-host 192.168.1.0 255.255.255.0
next
end
| Mode | Use Case | Interface Setup | |------|----------|----------------| | NAT/Route | Gateway to internet | WAN port → ISP, LAN port → internal switch | | Transparent | Inline between router & LAN | Bridge pair (e.g., port2-port3) | | HA (A-P) | Redundancy | Dedicated HA ports (e.g., port17 & port18) |
A compact, high-performance next-generation firewall (NGFW) designed for mid-size enterprises requiring advanced security, high throughput, and cloud integration. fortigate 709 new
config system interface
edit port1
set mode static
set ip 192.168.1.99 255.255.255.0
set allowaccess ping https ssh http
next
end
config system admin
edit admin
set password <new-strong-password>
next
end
For companies in finance or healthcare where every HTTPS packet must be decrypted, the CP9 ASIC in the 709 provides 12 Gbps of TLS 1.3 inspection. Most competing boxes (Palo Alto, Check Point) at this price point choke at 3-4 Gbps of SSL. Block all inbound by default (implicit deny at
If you have 10 branch offices each with a 1GbE connection, the HQ needs a hub that can aggregate 10+ Gbps of SD-WAN traffic. The new 709 supports 4,000+ concurrent VPN tunnels and 5,000 SD-WAN rules. | Mode | Use Case | Interface Setup