Building a GRE Tunnel Between a FortiGate Firewall and a Cisco Router
Manny Fernandez1. Executive Summary Objective This guide walks through the end-to-end deployment of a Generic Routing Encapsulation (GRE) tunnel between a...
Read More
Cisco ASA and FTD Encryption Schemes. What is supported on what version : The Complete Reference
Manny FernandezIf you have ever tried to stand up a site-to-site tunnel between an ASA running 9.8 code and a newer...
Read More
Mastering FortiGate Service Objects: Custom Services, Groups, Categories, and the Options Nobody Uses
Manny Fernandez1. Executive Summary Objective This guide takes the FortiGate service object from the five fields everyone knows to the full...
Read More
FortiGate Firewall Policy: Every Option set ? Will Show You
Manny FernandezThe FortiGate GUI shows you maybe forty percent of what a firewall policy can actually do. The rest lives in...
Read More
The FortiGate Interfaces You Never Created: naf.root, ssl.root, and Every Default VLAN Explained
Manny FernandezVersion target: FortiOS 7.6.x, with behavior flagged where 7.0 / 7.2 / 7.4 differ. Commands are shown from the CLI....
Read More
Standardizing FortiGate Interface Roles: LAN, WAN, DMZ, and Undefined
Manny Fernandez1. Executive Summary Objective This guide establishes a deterministic, auditable interface role standard across a FortiGate estate and explains precisely...
Read More
Mastering FortiGate SSID Settings: Traffic Mode, Security Mode, Broadcast Suppression, Quarantine, VLAN Pooling, and NAC Profiles
Manny Fernandez1. Executive Summary Objective This guide walks through the six SSID settings that determine how a FortiGate-managed wireless network actually...
Read More
Deploying FortiClient on Ubuntu Linux: The Complete CLI Reference for Desktop and Headless Endpoints
Manny Fernandez1. Executive Summary Objective This guide takes an Ubuntu 22.04 or 24.04 LTS host from bare OS to a fully...
Read More
EVPN Route Types: The Practitioner’s Field Guide
Manny FernandezEveryone learns EVPN as "type 2 carries MACs and type 5 carries prefixes," then gets wrecked the first time a...
Read More
XDR vs. SOAR: Is Your Tech Stack Redundant or Resilient?
Manny FernandezThe short answer. XDR and SOAR overlap on automated response and enrichment. They do not overlap on scope. XDR automates...
Read More
The Clock Is Ticking: What CA/B Forum’s Ballot SC-081v3 Means for the Future of Web Security
Manny FernandezIf your team manages SSL/TLS certificates using spreadsheets, calendar reminders, or manual renewals, consider this your official wake-up call. In...
Read More
Beyond the Prompt Series: Multimodal Models: Teaching the Transformer to See
Manny FernandezVision encoders, projectors, and the 2026 move from bolt-on bridges to native multimodality. A multimodal model is an LLM that...
Read More
The Certificates Your FortiGate Ships With, and What to Do With Them
Manny FernandezEvery FortiGate arrives with a populated certificate store. Nobody put them there for decoration. Some are load-bearing device identity you...
Read More
The SSH Key Fallacy: Why Static Keys Are Not Access Control, and How to Fix It With an SSH Certificate Authority
Manny Fernandez1. Executive Summary Objective: Moving from passwords to SSH public keys feels like a security upgrade, and in one narrow...
Read More
Wake-on-LAN from the FortiGate: Firing a Magic Packet with execute wake-on-lan
Manny FernandezYou need to power on a box that is sitting dark on a remote segment. A lab host, a NAS,...
Read More
Deploying a FortiGate as an IPsec IKEv2 Remote-Access VPN Concentrator for Linux Clients with FortiToken MFA
Manny Fernandez1. Title & Executive Summary Objective: This guide stands up a single FortiGate as an IPsec IKEv2 dialup VPN concentrator...
Read More
Securing Email with DNS: A Practitioner’s Guide to SPF, DKIM, DMARC and the Modern Authentication Stack
Manny FernandezExecutive Summary Objective This guide walks you end to end through the DNS-published controls that authenticate email and stop domain...
Read More
Decoding SMTP Errors and Mail Failure Messages: A Practitioner’s Diagnostic Guide
Manny Fernandez1. Executive Summary Objective: This guide turns cryptic SMTP reply codes, enhanced status codes, and bounce (NDR/DSN) messages into a...
Read More
A little TCP story…
Manny FernandezToday I was on LinkedIn in the AM to monitor for friends moving companies etc. And I came across a...
Read More
HTTP Error Messages Decoded: A Practitioner’s Field Guide to Status Codes and What They Actually Mean
Manny Fernandez1. Executive Summary Objective. This guide turns the three-digit HTTP status code sitting in your logs, your browser dev tools,...
Read More
