How to access internet without login

[#1]

We have two devices (a telephone pbx and Printer/Copier) that need to access the internet but of course they can' t " log in" . How can we give them access through a fortinet 60B? Brian

[UkWizard]

You need to assign them Static IP addresses, and then you can create policies allowing them to access the web without authentication. An example, say your pbx was 192.168.1.10 and the printer was 192.168.1.20); 1. Create address entries for both pbx and printer, using the IP only (ie without the network mask) 2. create a new outbound policy (INT->WAN probably)at the TOP of the policy list, but below any ' encrypt' policies. With the two newly created addresses entries as the source (Using ' multiple' option) and any/all for the destination. with nat enabled. Thats it. Basically means their traffic will be matched and use that seperate policy, which doesn' t have the authentication enabled on it.

[#3]

That is very helpful, but where do I place that address entry? Under which tab, section, etc. in the fortigate interface? Thanks! Brian

[rmorley]

Under the Firewall tab there is a sub menu called " Address" . Give the address a friendly name and specify it' s ip address in the Subnet/ IP range field. If the two devices have ip' s in the same subnet and are in numeric order you can define a range rather than an individual ip. Next create an outbound policy with authentication disabled.