Category Archives: FortiGate

Quick Tip – Controlling Source Interface Traffic

In version 7.x of FortiOS there is now a GUI based option that can allow you to choose what interface…

By Manny Fernandez

October 10, 2021

Quick-Tip – Checking your Fortigate DB versions

By default, the FortiGate will reach out to FortiGuard Labs every 2 hours.  It will upgrade the various DB automatically. …

By Manny Fernandez

September 30, 2021

DNS Doctoring on FortiGate

Sometimes, you have a scenario where your internal servers or devices are using external DNS servers (e.g. 8.8.8.8 or 4.2.2.2…

By Manny Fernandez

August 2, 2021

Quick-Tip – Geography-Based Internet Services Databases

Sometimes you want to use the awesome feature of Internet Services Database from Fortinet.  The Internet Services Database is an…

By Manny Fernandez

March 16, 2021

Troubleshooting SIP on FortiGate Firewalls

Since I replaced my lab FortiGate firewall from a 300E to a 601E, I ended up breaking my FortiVoice system. …

By Manny Fernandez

March 8, 2021

FortiGate AD Polling with Windows Server 2003

Today, I was helping a customer set up Active Directory polling from a FortiGate firewall using the External Connector which…

By Manny Fernandez

February 22, 2021

Using WAN Link Monitor for Redundant Internet Connections

First thing I want to mention is that there is other ways of doing multiple ISPs using SD WAN configuration…

By Manny Fernandez

February 10, 2021

Setting Up Notification of FortiGate Firewalls with Automation

Staring in 6.2 there was the ability to set up automation stitches on the FortiGate firewalls.  In 6.4, Fortinet enhanced…

By Manny Fernandez

February 6, 2021

Setting up SSL Offload and Load Balancing for inbound connections on a FortiGate

Today I was working with a colleague of mine on a proof-of-concept for one of his customers.  The requirements were…

By Manny Fernandez

August 24, 2020

Protected: Using Referrer Field with FortiGate Web Filter

This content is password-protected. To view it, please enter the password below. Password:

By Manny Fernandez

August 7, 2020

Dynamic VLANs with Single SSID using FortiAP and FortiAuthenticator

First and foremost, a special shout out to a friend that helped with this config.  Juan Perez, thank you brother.…

By Manny Fernandez

June 26, 2020

Reverting from Comprehensive Mode to Optimal Mode on FortiOS 6.4.1

If you are like me, you turn on all kinds of features just because.  I upgraded my lab FortiGate to…

By Manny Fernandez

June 7, 2020

Bi-directional DNAT on FortiGate Firewalls

I am a BIG supporter of Central NAT.  I believe it is in-line with the present day firewall platforms.  Even…

By Manny Fernandez

May 28, 2020

Separate VRF for Out-of-Band Management in FortiOS

I am currently running FortiOS 6.4 on this FortiGate.  The use case is to have an out-of-band interface that points…

By Manny Fernandez

May 27, 2020

Deploying SSL VPNs Using Multiple Realms

Realms are a feature on the FortiGate that I have written about in the past, but I never really did…

By Manny Fernandez

May 26, 2020

FortiClient CLI for Linux using Realms

Last year I wrote an article about installing FortiClient on a Linux machine.  There were two options; CLI and GUI.  Today…

By Manny Fernandez

May 18, 2020

Anti-SPAM Feature on FortiGate Firewalls

Normally, I position FortiMail for anti-SPAM at customers.  However, today I decided to play with the Anti-SPAM feature on the…

By Manny Fernandez

May 16, 2020

VWire with FortiGate Firewalls

Although the FortGate CAN operate in transparent mode, I rarely used/use it.  Fortinet introduced VWire which is a layer 2 pair…

By Manny Fernandez

May 14, 2020

Built-In “IPerf” on the FortiGate Firewall

I happen to love iperf.  Iperf is a tool that has been around for a long time.  The idea is…

By Manny Fernandez

May 14, 2020

Limiting Protocols in FortiGate Web Access Portal VPN

When you connect to a FortiGate in Web Portal mode, by default, you are able to create bookmarks using HTTP/HTTPS,…

By Manny Fernandez

May 12, 2020

Categories

Recent posts

  • At its core, IEEE 802.1X is a network layer... Full Story

  • In case you did not see the previous FortiNAC... Full Story

  • This is our 5th session where we are going... Full Story

  • Now that we have Wireshark installed and somewhat configured,... Full Story

  • The Philosophy of Packet Analysis Troubleshooting isn't about looking... Full Story