Author Archives: Manny Fernandez

I have been in the networking and security field for over 27 years. I started working for resellers back in the Novell days. I obtained my CNE, Master CNE, GroupWise CNE and later moved on to Microsoft with the MCSE. I have obtained numerous industry certifications from Palo Alto, Cisco, Checkpoint, Juniper, RSA, Fortinet, Linux and other. I have worked on every firewall produced since the 1990's from Novell's Border Manager to IP Tables to FortiOS and everything in-between. I have either migrated to or from all of these platforms. It is my passion. I love what I do so I do not consider it work. Today I work for a manufacturer. By far, I enjoy this side much more so hope to continue doing so.

Using NMAP

On September 1, 1997, Nmap was first released in Phrack magazine Issue 51, Article 11.  Since then it has been…

By Manny Fernandez

April 7, 2019

Using OpenSSL for your SSL Decryption and distributing the cert via GPO

I have another post from a while back that uses Microsoft CA services which I will be updating in the…

By Manny Fernandez

April 7, 2019

Central NAT vs Policy NAT

In the past, Fortigate used what was known as 'Policy NAT' where the outbound NAT was defined in the policy.…

By Manny Fernandez

April 5, 2019

FortiAPs in Bridge Mode

A good friend and colleague of mine wrote a great Bridged AP configuration blog post using FortiAPs and I wanted…

By Manny Fernandez

March 27, 2019

Fortigate in One-Arm Sniffer Mode

Not sure if you got the 'Featured Image' (One Arm and the nose as the 'sniffer') OK.  I am done…

By Manny Fernandez

March 21, 2019

FortiView Capabilities

A few years ago, I worked for a reseller of networking and security.  I created their managed security services practice.…

By Manny Fernandez

March 18, 2019

Configuring Custom NTP Server on Fortigate

The Fortigate firewall comes pre-configured to use the Fortiguard time sources via NTP.  You can also configure the Fortigate to…

By Manny Fernandez

March 15, 2019

Understanding Fortigate Logging

In this blog post, we are going to analyze some log files from my Fortigate to describe the different sections…

By Manny Fernandez

March 13, 2019

FortiManager VM Requirements

When sizing out a VM FortiAnalyzer, make sure you have the correct sizing to handle the load from a logs…

By Manny Fernandez

March 11, 2019

FortiAnalyzer VM Requirements

When sizing out a VM FortiAnalyzer, make sure you have the correct sizing to handle the load from a logs…

By Manny Fernandez

March 11, 2019

Configuring OSPF on Fortigate

The Fortigate is capable of doing OSPF, BGP, and RIP from a dynamic routing protocol perspective. It is pretty straight…

By Manny Fernandez

March 9, 2019

Connectors used in Networking

Here are some useful connectors. Note that I got them from random searches on Google. Power Connectors      …

By Manny Fernandez

March 8, 2019

Fortigate FGCP vs FGSP for High Availability

Fortigate Clustering Protocol (FGCP) I have been working on Fortinet Fortigates for over two years now. Most customer that do…

By Manny Fernandez

March 6, 2019
banner

IPTable Firewall GUI

In 2000, I started a company named ITsecur. We created a Linux based firewall running the following: IPTables - Firewall…

By Manny Fernandez

March 5, 2019

Fortitoken with Active Directory on Fortigate

Yesterday I wrote a blogpost about two-factor authentication using Duo, Active Directory, Duo Proxy Auth and Fortigate. I mentioned that…

By Manny Fernandez

February 20, 2019

Duo Security 2FA with Fortigate Firewalls

Although Fortinet has a great 2FA solution (FortiToken) which is simple to use and does not require anything extra, there…

By Manny Fernandez

February 19, 2019

Gateway IP and interface conflict with Static Route 1

Fortigate 6.0.3 has a bug that will give you the "Gateway IP and interface conflict with Static Route 1” This…

By Manny Fernandez

February 12, 2019

Using Tags on the Fortigate Firewall

Tags are something that I have adopted into my workflow on most applications. I use Tags in Evernote, OmniFocus, macOS,…

By Manny Fernandez

February 12, 2019

Renaming HA Fortigate Firewall after it is in HA Cluster

If you are 'IT-OCD' like me, you hate to connect to a Fortigate and see that the devices have their…

By Manny Fernandez

February 12, 2019

Site-to-Site VPN Between Fortigates using Certificates instead of PSK

Had a customer running Checkpoint that needed to create a Site-to-Site VPN using a dynamic IP on the remote (Fortigate)…

By Manny Fernandez

February 11, 2019

Categories

Recent posts

  • In today’s rapidly evolving network landscape, securing users everywhere... Full Story

  • Have you ever ordered a bunch of Fortinet gear... Full Story

  • Had a customer with over 200 static routes on... Full Story