Category Archives: All

Best Practice for Creating Fortinet Support Accounts

I cannot tell you how many times I get asked by customers or partners, "The person that registered the products…

By Manny Fernandez

May 18, 2019

macOS and IOS Journaling Solution

I am a big believer of Work Flows and I am always trying out new methods, apps, scripts, etc to…

By Manny Fernandez

May 17, 2019

UPDATED – Certificate Pinning you SSL VPN with Microsoft CA and Fortigate Forticlient Using ‘user’ certificates

Customer wanted to ONLY allow devices that are trusted devices (owned by the customer) to connect using the ‘Full Access”…

By Manny Fernandez

May 15, 2019

Creating SPAN port on Fortigate By: Brent Klespies

Here is a blog post from a friend and colleague Brent Klespies I had a customer wondering how to create…

By Manny Fernandez

May 8, 2019

FortiAnalyzer FortiView not showing data

Great article from a friend (Matt Sherif) of mine on troubleshooting FortiAnalyzer when it is not showing data.

By Manny Fernandez

May 3, 2019

Troubleshooting NAT on Fortigate Firewall

When you want to validate that the Fortigate is doing NAT properly, there are a few things you can do.…

By Manny Fernandez

May 3, 2019

Fortigate / Scrutinizer NetFlow Deployment

Today I had a customer talking to me about Netflow and the Fortigate.  To demonstrate the functionality, I decided to…

By Manny Fernandez

May 2, 2019

Perimeter Switch Configuration with Fortiswitch (Non-Fortilink)

One of the designs I normally do for customers when they purchase Highly Available firewalls is HA perimeter switches.  When…

By Manny Fernandez

May 1, 2019

Configuring SNMP v3 on Fortigate

When using SNMP to monitor the devices on your network, more especially your firewall, one should not use SNMP v1…

By Manny Fernandez

May 1, 2019

Writting Custom IPS Signatures on Fortigate

Yesterday, I was playing around and wanted to create some custom IPS signatures.   Defining the signature Use Case -…

By Manny Fernandez

April 30, 2019

Basic Deployment of FortiNAC – Part 1

FortiNAC, formally Bradford Networks was acquired by Fortinet in June of 2018.  Although Bradford was a great solution, joining the…

By Manny Fernandez

April 25, 2019

Installing Greenbone Vulnerability Manager

If you have even followed InfoSec, Cyber or whatever you want to call it, you will know that vulnerable code…

By Manny Fernandez

April 24, 2019

iperf for Network Geeks

Throughout my career (over 27 years as of the writing of this post), I have needed to identify where problems…

By Manny Fernandez

April 20, 2019

Secure LDAP and AD Password Change via Forticlient

First of all, I wanted to give credit to a good friend of mine (Brian Modlin) that hit me up…

By Manny Fernandez

April 20, 2019

Disabling Weak Ciphers on Fortigate Firewalls

A customer of mine sent me an email after having a vulnerability assessment done against his environment.  He got back…

By Manny Fernandez

April 14, 2019

Configuring LDAP Authentication for Remote Access VPN

The Fortigate platform allows for multiple authentication options for VPNs.  In the past, I used a lot of Cisco ASA…

By Manny Fernandez

April 9, 2019

Using NMAP

On September 1, 1997, Nmap was first released in Phrack magazine Issue 51, Article 11.  Since then it has been…

By Manny Fernandez

April 7, 2019

Using OpenSSL for your SSL Decryption and distributing the cert via GPO

I have another post from a while back that uses Microsoft CA services which I will be updating in the…

By Manny Fernandez

April 7, 2019

Central NAT vs Policy NAT

In the past, Fortigate used what was known as 'Policy NAT' where the outbound NAT was defined in the policy.…

By Manny Fernandez

April 5, 2019

FortiAPs in Bridge Mode

A good friend and colleague of mine wrote a great Bridged AP configuration blog post using FortiAPs and I wanted…

By Manny Fernandez

March 27, 2019

Categories

Recent posts

  • Have you ever ordered a bunch of Fortinet gear... Full Story

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story