FortiGate WIDS: A Practical Deployment and Tuning Guide
Manny Fernandez1. High-Level Overview The FortiGate Wireless Intrusion Detection System (WIDS) is the radio-frequency monitoring engine built into the FortiGate wireless...
Read More
MIMO, 2×2 vs 4×4, and WiFi Standards: A Technical “Shallow” Dive
Manny FernandezWhat MIMO Actually Does Multiple Input, Multiple Output (MIMO) is the technique of using more than one antenna at both...
Read More
The FortiOS Commands the Admin Guide Forgot
Manny FernandezA practitioner's tour of the diagnose, test, and fnsysctl corners of FortiOS that never made it into the official documentation....
Read More
FortiGate Firewall Scheduling Deployment Guide: How to configure and use Schedules
Manny FernandezOverview FortiGate firewall schedules control *when* a firewall policy is active. Every firewall policy references a schedule object, and by...
Read More
The Complete Guide to Ethernet and Fiber Cabling: Categories, Uses, and Limitations
Manny FernandezCabling is the part of the network everyone forgets until it breaks. You can buy the fastest firewall and the...
Read More
Disabling Auto Upgrade on FortiGate Firewalls
Manny FernandezLet me start by saying, if you do not have a mature patching mechanism where you are subscribed to the...
Read More
Loomi: My First IOS App
Manny FernandezAt work, they wanted us to keep track of activity. I started doing the spreadsheet way. Found it clunky especially...
Read More
FortiOS 8.0: Custom Tags, Dynamic Tag Address Groups, and Policy Tagging
Manny FernandezOverview FortiOS 8.0 introduces custom tags as a first-class organizational and operational construct across the firewall object model. Tags can...
Read More
Multicast Routing vs Multicast Forwarding on FortiGate
Manny FernandezThese are two distinct mechanisms on FortiOS, and conflating them is a common source of "my multicast isn't working" tickets....
Read More
FortiGate Replacement Messages: A Practical Deployment Guide
Manny FernandezReplacement messages are the pages and text blocks that FortiOS substitutes in place of blocked, quarantined, or intercepted content. When...
Read More
FIPS 140 Explained: Levels, Lifecycle, and Fortinet Support
Manny FernandezIf you sell into government, defense, healthcare, or finance, the phrase FIPS validated eventually lands on your desk. FIPS 140...
Read More
FortiGate and NTP 4.0: Dual-Homed Time Sources, Authentication, and Hardening
Manny FernandezAccurate time is one of those infrastructure fundamentals that nobody thinks about until it breaks. On a FortiGate, the system...
Read More
Securing the Gate with Security Profiles Series: Application Control
Manny Fernandez1. Introduction and Concepts Application Control is a FortiGate security feature that identifies and governs network traffic based on the...
Read More
Securing the Gate with Security Profiles Series: Web Content Filter
Manny FernandezWelcome to our comprehensive series on FortiGate Security Profile configuration and deployment named Securing the Gate with Security Profiles. Over...
Read More
FortiSwitch Troubleshooting Guide For FortiSwitches Managed by FortiGate (FortiLink)
Manny Fernandez1. Introduction and Architecture 1.1 What is FortiLink FortiLink is the proprietary management protocol used by FortiGate firewalls to discover,...
Read More
Kasm Workspace on Ubuntu Linux; How to deploy and configure VPN
Manny FernandezEven when running a VPN, your machine can leave artifacts of your connection on sites when you are doing OSINT...
Read More
Logging deep-dive on FortiGate Firewalls
Manny Fernandez1. Introduction and Scope This deployment guide provides a complete technical reference for designing, configuring, and operating logging on Fortinet...
Read More
Policy-Based Routing on FortiGate Firewalls – A Comprehensive Deployment Guide
Manny Fernandez1. Introduction Policy-based routing, or PBR, lets a FortiGate make forwarding decisions on attributes other than the destination address. Traditional...
Read More
Replacing a failed FortiSwitch in an Multi-Chassis Link Aggregation (MCLAG)
Manny FernandezReplacing a failed FortiSwitch in an Multi-Chassis Link Aggregation (MCLAG) pair requires a bit of care to prevent network loops...
Read More
Understanding and Tuning FortiGate Conserve Mode: A Practical Guide to Memory Thresholds
Manny FernandezIf your FortiGate has ever started dropping sessions during a traffic surge, or if you have logged in to find...
Read More
