DHCP Server Health Checks on macOS with dhcping
Manny Fernandez1. Title & Executive Summary Objective dhcping sends a single targeted DHCPREQUEST or DHCPINFORM packet at a specific DHCP server...
Read More
Replaying PCAPs in Scapy: Packet Injection, Address Rewriting, and Timing-Accurate Retransmission
Manny FernandezObjective: This guide shows how to use Scapy to load a .pcap file and retransmit its packets onto a live...
Read More
ipcalc Deep Dive: Mastering Subnet Math Across Every Linux Implementation and Homebrew
Manny FernandezExecutive Summary ipcalc looks like a single, predictable command, but at least three functionally different programs answer to that name...
Read More
Creating and IP Addressing Scheme Design
Manny FernandezObjective: Give you a repeatable method for designing an IP addressing scheme that scales, summarizes cleanly, and doesn’t need to...
Read More
FortiSwitch Upgrade Status Messages: A FortiLink Field Reference
Manny FernandezYou kick off a FortiSwitch firmware push from the FortiGate switch controller, and the status column just sits there. Is...
Read More
Using FortiExtender as a Terminal Server
Manny FernandezThis post was take from a document I created for a customer. In my lab, I used a FEX200F which...
Read More
FortiExtender 511G Deployment Guide
Manny FernandezExecutive Summary This guide deploys a FortiExtender 511G (FEX-511G) as a cellular WAN extension for a FortiGate 120G running FortiOS...
Read More
Limitations of an AWS Peering Connection
Manny FernandezI had a customer over the weekend that has two VPCs (VPC-A and VPC-B). He created a peering connection between...
Read More
TCP Flags Deep Dive: Meaning, Behavior, and Troubleshooting
Manny FernandezObjective: This guide breaks down all nine TCP control bits, traces exactly how they combine across a connection's lifecycle from...
Read More
FortiGate Packet Capture: The Complete Advanced Filter Syntax Reference
Manny FernandezEvery filter you can type into the Advanced field is standard BPF, the same syntax tcpdump and diagnose sniffer packet...
Read More
FortiGate DoS Policies: Configuration, Components, and Storm Troubleshooting
Manny FernandezIn This Guide 1. Executive Summary 2. Prerequisites & Architecture 3. Step-by-Step Implementation Workflow 4. Verification & Validation 5. Troubleshooting...
Read More
Where does the “Sequence Group” live in the FortiGate CLI Config
Manny FernandezDo you use Sequence Groups In your Firewall Policies? I absolutely love them. I used to use them in Checkpoint. ...
Read More
Removing NAG Screen on Wireshark 4.6.7
Manny FernandezThe other day, I opened my Wireshark for macOS and found some ads and some nag stuff about donations and...
Read More
Building a GRE Tunnel Between a FortiGate Firewall and a Cisco Router
Manny Fernandez1. Executive Summary Objective This guide walks through the end-to-end deployment of a Generic Routing Encapsulation (GRE) tunnel between a...
Read More
Cisco ASA and FTD Encryption Schemes. What is supported on what version : The Complete Reference
Manny FernandezIf you have ever tried to stand up a site-to-site tunnel between an ASA running 9.8 code and a newer...
Read More
Mastering FortiGate Service Objects: Custom Services, Groups, Categories, and the Options Nobody Uses
Manny Fernandez1. Executive Summary Objective This guide takes the FortiGate service object from the five fields everyone knows to the full...
Read More
FortiGate Routing Objects Explained: Building Deterministic Route Policy with Access Lists, Prefix Lists, AS Path Lists, Community Lists, Route Maps, and Key Chains
Manny FernandezObjective Routing objects are the vocabulary FortiOS uses to describe route policy. This guide walks through every routing object type...
Read More
FortiGate Firewall Policy: Every Option set ? Will Show You
Manny FernandezThe FortiGate GUI shows you maybe forty percent of what a firewall policy can actually do. The rest lives in...
Read More
Deploying SCIM Clients on FortiOS: Automated User and Group Provisioning for SAML-Backed Access
Manny FernandezObjective: This guide shows you how to turn a FortiGate into a SCIM 2.0 service endpoint so that an external...
Read More
Deploying FortiExtender: Standalone, Cloud, WAN-Extension, and LAN-Extension Methods
Manny Fernandez1. Executive Summary Objective This guide walks through every supported way to deploy a FortiExtender and shows exactly which one...
Read More
