FortiGate Port Reference: Every Port for FAZ, FMG, RADIUS, CAPWAP, and the Rest of the Fabric
Manny FernandezEvery FortiGate deployment eventually runs into the same wall: a firewall change request, a cloud security group, or an MSSP's...
Read More
“diagnose hardware deviceinfo nic”: The Complete Field Reference
Manny Fernandezdiagnose hardware deviceinfo nic: The Complete Field Reference No fluff. Just the config that works. Executive Summary Objective: diagnose hardware...
Read More
What Your Optics Are Trying to Tell You: A Deep Dive into `get system interface transceiver`
Manny FernandezThe command nobody reads until something breaks Every FortiGate with SFP or SFP+ cages ships with a diagnostic command that...
Read More
FortiDebug Builder Preview
Manny FernandezI created an app named FortiDebug Builder. The idea is to create cli commands for use with troubleshooting FortiGate firewalls. ...
Read More
Tuning the FortiOS IPS Socket Buffer: A Deep Dive into socket-size
Manny FernandezExecutive Summary Objective: Explain, in real operational depth, what the FortiOS ips global socket-size setting actually does, why it exists,...
Read More
FortiOS Automatic Restart of Node.js to Prevent Conserve Mode
Manny FernandezThis enables automatic restart of FortiOS's Node.js process (the "node" daemon), which handles things like Report management, FortiView, Security Fabric/CSF,...
Read More
Troubleshooting IPSec VPN tunnels in FortiGate Firewalls 2026 Version
Manny FernandezThis is an updated, expanded version of an older Quick-Tip. Same goal as always: get a VPN tunnel talking again...
Read More
Deploying OpenSpeedTest on Ubuntu 24.04 LTS for Internal Network Speed Testing
Manny FernandezExecutive Summary Objective: This guide walks through deploying OpenSpeedTest, a free and open source, self-hosted HTML5 network speed test, on...
Read More
macOS CLI Networking Cheat Sheet
Manny FernandezIf you troubleshoot Macs on a network for a living, you already know the GUI only gets you so far....
Read More
Disabling the FortiConverter Nag Message on Enterprise Bundle FortiGates
Manny FernandezAs you know, the Enterprise Bundle includes the following (IPS, AI-based Inline Malware Prevention, DLP, App Control, Adv Malware Protection,...
Read More
Deploying Nuclei on Ubuntu Server
Manny FernandezExecutive Summary Objective This guide walks through a clean, repeatable installation of ProjectDiscovery's Nuclei vulnerability scanner on Ubuntu Server, covering...
Read More
IP Addressing and VLSM Made Simple for Beginners
Manny FernandezSubnetting has a reputation for being scary. It isn't. Underneath the notation and the math, it's just a way of...
Read More
DHCP Server Health Checks on macOS with dhcping
Manny Fernandez1. Title & Executive Summary Objective dhcping sends a single targeted DHCPREQUEST or DHCPINFORM packet at a specific DHCP server...
Read More
Replaying PCAPs in Scapy: Packet Injection, Address Rewriting, and Timing-Accurate Retransmission
Manny FernandezObjective: This guide shows how to use Scapy to load a .pcap file and retransmit its packets onto a live...
Read More
ipcalc Deep Dive: Mastering Subnet Math Across Every Linux Implementation and Homebrew
Manny FernandezExecutive Summary ipcalc looks like a single, predictable command, but at least three functionally different programs answer to that name...
Read More
Creating and IP Addressing Scheme Design
Manny FernandezObjective: Give you a repeatable method for designing an IP addressing scheme that scales, summarizes cleanly, and doesn’t need to...
Read More
FortiSwitch Upgrade Status Messages: A FortiLink Field Reference
Manny FernandezYou kick off a FortiSwitch firmware push from the FortiGate switch controller, and the status column just sits there. Is...
Read More
Using FortiExtender as a Terminal Server
Manny FernandezThis post was take from a document I created for a customer. In my lab, I used a FEX200F which...
Read More
FortiExtender 511G Deployment Guide
Manny FernandezExecutive Summary This guide deploys a FortiExtender 511G (FEX-511G) as a cellular WAN extension for a FortiGate 120G running FortiOS...
Read More
Limitations of an AWS Peering Connection
Manny FernandezI had a customer over the weekend that has two VPCs (VPC-A and VPC-B). He created a peering connection between...
Read More
