Category Archives: All

Fortigate HA in 5 Minutes

Here is a quick 5 min HA configuration for the Fortigate. On the Master Fortigate config system ha set group-name…

By Manny Fernandez

January 3, 2019

Using OpenSSL to Provision Wildcard Certificate

I have my lab set up with plenty of gear from Fortinet, Cisco, Palo Alto and Checkpoint. In order to…

By Manny Fernandez

January 3, 2019

Multi-Regional AD VPN using Fortigate Firewalls and BGP

Disclaimer: This was a client installation. All names and locations have been changed to protect the privacy of the customer.…

By Manny Fernandez

December 20, 2018

My Backup Strategy

Anyone that has lost data before vows to never have it happen again. Sadly, some people stop at that and…

By Manny Fernandez

December 17, 2018

Using Symbolic Links to Sync Dropbox and other Cloud Storage Services

As you may know, Dropbox is an awesome solution for syncing files. It CAN serve as a backup as well…

By Manny Fernandez

December 16, 2018

Using OpenSSL for Your Internal Servers

If you are like me, you have a bunch of servers and applications that run internally at home or in…

By Manny Fernandez

December 4, 2018

Merging PCAP files from the CLI

With the Fortigate 6Ks, when you do a packet capture from the GUI, it will save multiple PCAP files into…

By Manny Fernandez

December 3, 2018

Configuring LLDP for Cisco IP Phones on Stand Alone FortiSwitch

As you may or may not know, Fortinet makes switches and they are doing very well from a saturation perspective.…

By Manny Fernandez

December 3, 2018

Extending the FortiAnalyzer HDD

Update: 20191216 If you have deployed FortiAnalyzer (FAZ) in a VM, you will undoubtedly need to extend the hard drive…

By Manny Fernandez

December 3, 2018

Killing a Fortigate Process

The other day, while troublehsooting a customer’s firewall, I noticed a process that was eating up the CPU. CPU was…

By Manny Fernandez

December 3, 2018

Loading FortiOS via CLI

Earlier today, I received a FortiAnalyzer 1000D from a customer. This was a PoC box that was never picked up…

By Manny Fernandez

December 1, 2018

SIPCALC

Anyone that has read my blog, knows I use sipcalc on my Mac. I used to use it on my…

By Manny Fernandez

November 21, 2018

Configuring Multiple Fortigate Firewalls using USB

Use Case: You have multiple Fortigate Firewalls firewalls and you want to configure them pretty much the same execpt for…

By Manny Fernandez

November 20, 2018

TCP Timeout on Fortigate Firewall

Use Case: Municipality Customer. Has a Fire station app that runs through a Fortigate to a server behind the Fortigate.…

By Manny Fernandez

November 15, 2018

Fortigate 6300 – Assigning Services to a particular blade

  The Fortigate 6300 Is a massive platform with so much power, it can be used in multiple deployment methods;…

By Manny Fernandez

November 15, 2018

Configuration Confirmation on Fortigate

I am not a “Juniper guy" but I will say that their ‘commit confirm’ command is brilliant. Every engineer that…

By Manny Fernandez

November 14, 2018

Fortigate Web-content Overide

Use Case: You have web content profiles set up and a help desk that is fielding calls from unhappy users…

By Manny Fernandez

October 28, 2018

My Issues with Apple

Disclaimer: OK, so this is not an infosec post but wanted to share my experiences with those who follow this…

By Manny Fernandez

October 28, 2018

‘Diff’ Ways of Comparing Files

See what I did there? As a security engineer, I am always doing comparisons of files to see where things…

By Manny Fernandez

October 6, 2018

Fortigate HA Back-to-Back Gotchas

Recently, I had a customer that deployed two sets of HA Fortigates at two separate locations. Additionally, the customer had…

By Manny Fernandez

October 4, 2018

Categories

Recent posts