Category Archives: FortiGate

Creating a VIP on Fortigate using a Dynamic IP address

When you have a dynamic IP address assigned by your carrier, you are normally only assigned one IP address to…

By Manny Fernandez

November 9, 2019

Fortinet Security Fabric in Action

A colleague of mine, Chris Fore, SE in the San Fransisco Bay Area created an amazing video showing the Fortinet…

By Manny Fernandez

November 2, 2019

WiFi Best Practices Part 1

Credit: This article was written by a friend and colleague Bryan Wolski.  He is a great asset to our team…

By Manny Fernandez

September 25, 2019

Using Dynamic Address Lists in Fortigate Firewalls using 6.2.+

In 6.0, Fortinet released the ability to pull IP addresses from a web-server and use them in the configuration.  However…

By Manny Fernandez

September 20, 2019

Login Banner on Fortigate Firewalls

Not only is it good InfoSec Hygiene but most regulatory bodies require login banners.  With the Fortigate, it is easy…

By Manny Fernandez

September 19, 2019

Installing and Configuring FSSO

Fortinet Single Sign On or FSSO as it is called, is an agent that is installed on a Windows server…

By Manny Fernandez

September 13, 2019

Using Active Directory Groups to Control Web Content Policies

This is another question I get asked a lot.  When customers first deploy a Fortigate firewall and they have migrated…

By Manny Fernandez

September 9, 2019

VPN Hair-Pinning on Fortigate Firewalls

Here is an issue I get questions about all the time. Use Case Customer has two VPNs. Customer wants to…

By Manny Fernandez

September 3, 2019

Reverse Path Forwarding on Fortigate Firewalls

What is spoofing?  Back in the days of security being on routers via ACLs, we would regularly fool the routers…

By Manny Fernandez

September 2, 2019

FortiOS Rollback Procedure After an Upgrade

Once again, Matt Sheriff shared a great post on performing a rollback after an upgrade.  This has been in my…

By Manny Fernandez

August 28, 2019

Sudo Command in FortiOS

Any Fortinet administrator that uses Fortigates with VDOMs will tell you that sometime, you need to jump back and forth…

By Manny Fernandez

August 28, 2019

Conditional DNS Forwarding with FortiGate and FortiProxy

Today I was working with a customer that was running FortiProxy in a Proof-of-Concept.  One of the requirements was to…

By Manny Fernandez

August 20, 2019

Fortitoken Push Notification without FortiAuthenticator

One of the great features of the Fortigate Firewall platform is its versatility.  Aside from having an Ethernet Switch and…

By Manny Fernandez

July 15, 2019

Web Content Quota on Fortigate

Sometime, you may want to block the amount of a particular web content by either time or bandwidth used.  Here…

By Manny Fernandez

July 15, 2019

Fortigate Script for Adding Countries

Working with Fortigates, you may want to have all the countries predefined in the address list so that you can…

By Manny Fernandez

June 30, 2019

Fortimanager – Dynamic Interfaces and how to use them

Fortimanager is a centralized configuration and management solution for Fortinet devices.  Although the ENTIRE line of Fortinet product are not…

By Manny Fernandez

June 20, 2019

Useful Fortiswitch CLI commands and settings

So I "grew up" on the Cisco CLI.  Later moved to Linux and loved it.  I am now on a…

By Manny Fernandez

June 8, 2019

Fortigate DHCP and Microsoft Dynamic DNS

Remote branches that utilize Fortigate's DHCP do not update Microsoft DNS servers automagically.  Fortinet does not have a syncing feature…

By Manny Fernandez

May 22, 2019

Administering the Fortigate Firewall with LDAP Credentials

I am a big fan of having a centralized directory of users.  This makes it easy when that serial, crazy…

By Manny Fernandez

May 21, 2019

Route-Map on Fortigate

Often times you need to create a route map on a device to control what routes the device is advertising.…

By Manny Fernandez

May 20, 2019

Categories

Recent posts

  • Have you ever ordered a bunch of Fortinet gear... Full Story

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story