Category Archives: FortiGate

How to use Replacement Message Groups on FortiGate firewalls

As you may have seen in previous articles, the Fortigate firewalls have various replacement messages for various functions such as:…

By Manny Fernandez

December 8, 2019

Updating Images in Fortigate Replacement Messages

The Fortigate firewalls comes with some Replacement Messages.  These various messages are displayed under specific conditions and can be modified.…

By Manny Fernandez

December 6, 2019
banner

FortiOS AutoScript from CLI

OK folks, time for another quick scripting article.  As many may know, there has been some folks that have hit…

By Manny Fernandez

December 5, 2019

Troubleshooting IPSec VPNs on Fortigate Firewalls

Lets start with a little primer on IPSec.  I am going to describe some concepts of IPSec VPNs. IPSec Primer…

By Manny Fernandez

November 12, 2019

Route-Based VPN between Cisco Router and Fortigate Firewall using OSPF

Earlier, I wrote an article showing how to do a VTI (Virtual Tunnel Interface) from a Cisco ASA to a…

By Manny Fernandez

November 10, 2019

Creating a VIP on Fortigate using a Dynamic IP address

When you have a dynamic IP address assigned by your carrier, you are normally only assigned one IP address to…

By Manny Fernandez

November 9, 2019

Fortinet Security Fabric in Action

A colleague of mine, Chris Fore, SE in the San Fransisco Bay Area created an amazing video showing the Fortinet…

By Manny Fernandez

November 2, 2019

WiFi Best Practices Part 1

Credit: This article was written by a friend and colleague Bryan Wolski.  He is a great asset to our team…

By Manny Fernandez

September 25, 2019

Using Dynamic Address Lists in Fortigate Firewalls using 6.2.+

In 6.0, Fortinet released the ability to pull IP addresses from a web-server and use them in the configuration.  However…

By Manny Fernandez

September 20, 2019

Login Banner on Fortigate Firewalls

Not only is it good InfoSec Hygiene but most regulatory bodies require login banners.  With the Fortigate, it is easy…

By Manny Fernandez

September 19, 2019

Installing and Configuring FSSO

Fortinet Single Sign On or FSSO as it is called, is an agent that is installed on a Windows server…

By Manny Fernandez

September 13, 2019

Using Active Directory Groups to Control Web Content Policies

This is another question I get asked a lot.  When customers first deploy a Fortigate firewall and they have migrated…

By Manny Fernandez

September 9, 2019

VPN Hair-Pinning on Fortigate Firewalls

Here is an issue I get questions about all the time. Use Case Customer has two VPNs. Customer wants to…

By Manny Fernandez

September 3, 2019

Reverse Path Forwarding on Fortigate Firewalls

What is spoofing?  Back in the days of security being on routers via ACLs, we would regularly fool the routers…

By Manny Fernandez

September 2, 2019

FortiOS Rollback Procedure After an Upgrade

Once again, Matt Sheriff shared a great post on performing a rollback after an upgrade.  This has been in my…

By Manny Fernandez

August 28, 2019

Sudo Command in FortiOS

Any Fortinet administrator that uses Fortigates with VDOMs will tell you that sometime, you need to jump back and forth…

By Manny Fernandez

August 28, 2019

Conditional DNS Forwarding with FortiGate and FortiProxy

Today I was working with a customer that was running FortiProxy in a Proof-of-Concept.  One of the requirements was to…

By Manny Fernandez

August 20, 2019

Fortitoken Push Notification without FortiAuthenticator

One of the great features of the Fortigate Firewall platform is its versatility.  Aside from having an Ethernet Switch and…

By Manny Fernandez

July 15, 2019

Web Content Quota on Fortigate

Sometime, you may want to block the amount of a particular web content by either time or bandwidth used.  Here…

By Manny Fernandez

July 15, 2019

Fortigate Script for Adding Countries

Working with Fortigates, you may want to have all the countries predefined in the address list so that you can…

By Manny Fernandez

June 30, 2019

Categories

Recent posts

  • At its core, IEEE 802.1X is a network layer... Full Story

  • In case you did not see the previous FortiNAC... Full Story

  • This is our 5th session where we are going... Full Story

  • Now that we have Wireshark installed and somewhat configured,... Full Story

  • The Philosophy of Packet Analysis Troubleshooting isn't about looking... Full Story