Category Archives: FortiGate

14 October, 2026

Graylog Open 7.1 on Ubuntu 24.04: Install and Configure a Core Cluster

Install Graylog Open 7.1 on Ubuntu 24.04. Configure the core cluster, Data Node, and pipelines to ingest and parse FortiGate syslog traffic.

12 October, 2026

FortiGate ACME Beyond Let’s Encrypt: ZeroSSL, Sectigo, and Internal step-ca

Configure FortiGate ACME custom CA for ZeroSSL, Sectigo, or step-ca. Bypass Let's Encrypt limits with CLI commands for auto-renewal and EAB setup.

11 October, 2026

Quick Tip: FortiConverter Route File Format for Importing Static Routes from an ASA firewall

Fix FortiConverter route file format errors. Learn the exact plain text structure needed to import static routes from an ASA firewall into FortiGate.

7 October, 2026

RADIUS Deep Dive: What Actually Happens After You Click Connect

Decode RADIUS packet anatomy to debug FortiGate auth. Learn how shared secrets, authenticators, and VSAs work. Includes Blast-RADIUS hardening tips.

7 October, 2026

FortiGate IKEv2 Remote Access with EAP: What Actually Happens on the Wire

Analyze FortiGate IKEv2 EAP debug logs to trace the full handshake. See how RADIUS relays work and why tunnels fail during authentication.

5 October, 2026

FortiGate BFD: What It Is, When to Use It, and How to Configure It

Configure BFD on FortiGate to cut routing failure detection to under one second. Includes CLI steps for BGP, OSPF, and static route protection.

5 October, 2026

The FortiGate as an SSH Client: Jump Hosts, Source Pinning, and Port Probes with execute ssh

Use the FortiGate execute ssh client to reach servers across IPsec tunnels. Learn source pinning, jump host setup, and TCP port probing in FortiOS...

30 September, 2026

FortiGate Reverse Path Forwarding (RPF): Configuration, When to Use It, and How to Troubleshoot It

Configure FortiGate RPF correctly. Learn to set loose or strict mode, troubleshoot reverse path check fail drops, and validate anti-spoofing rules.

29 September, 2026

FortiGate IP-in-IP Tunnels: Configuring, Interoperating, and Knowing When to Use ipip-tunnel

Learn FortiGate ipip-tunnel configuration. Build RFC 2003 compliant IPv4-in-IPv4 tunnels, compare IPIP to GRE, and write working firewall policies for overlays.

29 September, 2026

FortiGate l2forward: Bridging Non-IP Frames in Transparent Mode (and Why It Does Nothing in NAT Mode)

Configure FortiGate l2forward transparent mode to bridge non-IP frames like PPPoE. Learn why this setting is required for Layer 2 passthrough and why it...

25 September, 2026

FortiGate Cloud SD-WAN Overlay: Hub-and-Spoke Orchestration Without a FortiManager

Configure a FortiGate Cloud SD-WAN overlay with Fortinet-hosted hubs. Deploy ADVPN hub-and-spoke tunnels without FortiManager using this step-by-step guide.

25 September, 2026

diagnose firewall iprope: Reading the FortiGate Policy Engine From the Kernel Up

Master diagnose firewall iprope to view compiled FortiGate policies. Decode kernel entries, simulate matches, and audit rule usage with real CLI examples.

24 September, 2026

SED and AWK for FortiGate Configs: Surgical Edits, Inventories, and Migrations from the Shell

Use sed and awk for FortiGate configs to extract tables, inventory objects, and remap interfaces. Learn to parse and edit FortiOS backups safely from...

24 September, 2026

“diagnose ip route match”: The FortiGate Kernel Route Lookup, Decoded

Master FortiGate diagnose ip route match to query the kernel FIB. Verify exact packet paths, egress interfaces, and next hops for precise routing troubleshooting.

24 September, 2026

Mastering grep on the FortiGate CLI: Every Switch, Explained

Master FortiGate CLI grep switches to parse show output fast. Learn the -f context flag, combine flags, and use this cheat sheet for daily...

24 September, 2026

Configuring RIP on FortiGate: Neighbors, Authentication, and Route Control

Configure RIP on FortiGate with MD5 authentication, neighbor settings, and route filters. Learn to secure RIPv2 adjacencies and control advertisements in FortiOS.

24 September, 2026

Understanding the output of “dia debug app ike” on a FortiGate Firewall

Decode the FortiGate dia debug app ike bitmask. Learn what each bit prints, how to combine levels for targeted IPsec troubleshooting, and avoid console...

22 September, 2026

Follow the SNI: Troubleshooting SSL/TLS Connections on FortiGate

Master FortiGate SNI troubleshooting to fix broken HTTPS. Learn to capture ClientHello, verify SSL inspection paths, and resolve certificate mismatches with precise CLI commands.