Category Archives: FortiGate

30 August, 2026

Disabling the FortiConverter Nag Message on Enterprise Bundle FortiGates

Disable the FortiConverter nag message on Enterprise Bundle FortiGates using CLI commands. Learn how to hide the prompt if you use FortiManager.

25 August, 2026

FortiGate SSID Types: Traffic Modes, Security Modes, and the Complete VAP Option Breakdown

Configure FortiGate SSID traffic modes including tunnel, bridge, and mesh. Learn how to set up VAP options for security, roaming, and local switching.

25 August, 2026

FortiGate DoS Policies: Configuration, Components, and Storm Troubleshooting

Configure FortiGate DoS policies to mitigate floods. Learn step-by-step implementation, anomaly tuning, and live storm troubleshooting commands for FortiOS.

25 August, 2026

Deploying Fortinet IPAM on FortiOS: Centralized IP Address Management Across the Security Fabric

Configure FortiOS IPAM to automate subnet allocation across the Security Fabric. Define pools, set rules, and integrate DHCP without manual spreadsheets.

24 August, 2026

Configuring Native OS VPN Clients to a FortiGate: Agentless IKEv2/IPsec Remote Access

Configure FortiGate native IKEv2 VPN for Windows, macOS, and Ubuntu. Set up agentless remote access with EAP authentication and split tunneling without FortiClient.

24 August, 2026

FortiGate Routing Objects Explained: Building Deterministic Route Policy with Access Lists, Prefix Lists, AS Path Lists, Community Lists, Route Maps, and Key Chains

Configure FortiGate routing objects like access lists, prefix lists, and route maps. Learn the exact CLI to build deterministic BGP and OSPF policy on...

4 August, 2026

Limitations of an AWS Peering Connection

Learn why AWS VPC peering drops outside routes and how to fix it with a Transit Gateway. Includes FortiGate config and cost estimates.

31 July, 2026

FortiGate Packet Capture: The Complete Advanced Filter Syntax Reference

Master FortiGate packet capture filter syntax. Use BPF filters in the GUI or CLI to isolate traffic by host, port, protocol, and TCP flags.

28 July, 2026

Where does the “Sequence Group” live in the FortiGate CLI Config

Configure FortiGate CLI sequence groups using the hidden global-label parameter. Learn to manage policy sections in CLI, backups, and GUI.

27 July, 2026

Mastering FortiGate Service Objects: Custom Services, Groups, Categories, and the Options Nobody Uses

Configure FortiGate custom service objects with source ports, TTL, and helpers. Master advanced FortiOS service settings for precise firewall policy control.

27 July, 2026

Building a GRE Tunnel Between a FortiGate Firewall and a Cisco Router

Configure GRE tunnel FortiGate Cisco with this practical guide. Learn to set up tunnel interfaces, routing, and firewall policies for hybrid networks.

26 July, 2026

FortiGate Firewall Policy: Every Option set ? Will Show You

Master the FortiGate firewall policy set ? command. This guide explains every CLI option, from identity and NAT to security profiles and performance tuning.

25 July, 2026

The FortiGate Interfaces You Never Created: naf.root, ssl.root, and Every Default VLAN Explained

Identify and manage FortiGate default interfaces like naf.root, ssl.root, and FortiLink VLANs. Learn which are removable and how to avoid config collisions.

25 July, 2026

Standardizing FortiGate Interface Roles: LAN, WAN, DMZ, and Undefined

Standardize FortiGate interface roles for LAN, WAN, and DMZ. Learn to audit configs, pass Security Rating checks, and enforce consistent GUI guardrails across your...

23 July, 2026

The Certificates Your FortiGate Ships With, and What to Do With Them

Replace FortiGate default certificates for admin GUI, SSL VPN, and deep inspection. Learn which factory certs to keep and how to build your own...

22 July, 2026

Deploying a FortiGate as an IPsec IKEv2 Remote-Access VPN Concentrator for Linux Clients with FortiToken MFA

Configure a FortiGate IKEv2 VPN Linux concentrator with FortiToken MFA. This guide covers strongSwan client setup, EAP authentication, and port 443 traversal for remote...

21 July, 2026

Wake-on-LAN from the FortiGate: Firing a Magic Packet with execute wake-on-lan

Use the FortiGate execute wake-on-lan command to send magic packets directly from the firewall. Configure CLI parameters, verify broadcasts, and troubleshoot endpoint settings.

19 July, 2026

FortiGate ADVPN: Classic (1.0) vs. Edge-Discovery (2.0) for Dynamic Spoke-to-Spoke SD-WAN

Compare FortiGate ADVPN 1.0 vs 2.0 for SD-WAN. Deploy dynamic spoke-to-spoke tunnels with exact FortiOS 7.2 and 7.4 configs. No fluff, just working steps.