InfoSecMonkey: No fluff. Just the config that works.

Category Archives: FortiGate

Deploying FortiGate cFOS: From a Docker Image to a Kubernetes Firewall Pod

Deploying FortiGate cFOS: From a Docker Image to a Kubernetes Firewall Pod

Deploy FortiGate cFOS Kubernetes pods from Docker images. Configure RBAC, license ConfigMaps, and firewall policies for containerized NGFW inspection.

Read More
Securing the Open SSID on FortiGate: Deploying Enhanced Open (OWE) for Encrypted Guest Wi-Fi

Securing the Open SSID on FortiGate: Deploying Enhanced Open (OWE) for Encrypted Guest Wi-Fi

Deploy FortiGate OWE configuration to secure guest Wi-Fi with Enhanced Open. This guide covers SSID setup, FortiAP profiles, and firewall policies for encrypted, password-free...

Read More
FortiGate Local-Out Routing: Controlling the Traffic the Firewall Sends Itself

FortiGate Local-Out Routing: Controlling the Traffic the Firewall Sends Itself

Master FortiGate local-out routing. Learn how to control self-originating traffic source IPs and egress interfaces using CLI overrides and route preferences.

Read More
The Complete FortiGate execute Command Reference

The Complete FortiGate execute Command Reference

Master FortiGate execute commands for backups, reboots, and diagnostics. Learn the imperative CLI syntax, model-specific limits, and safe operational workflows.

Read More
Is your FortiGate vulnerable to Management Access when using a FortiToken Push Notification

Is your FortiGate vulnerable to Management Access when using a FortiToken Push Notification

Is your FortiGate vulnerable to management access when using FortiToken push? Learn why port 4433 is not a CVE and how to fix the...

Read More
Securing the Purdue Model: A FortiGate OT Reference Architecture

Securing the Purdue Model: A FortiGate OT Reference Architecture

Deploy a FortiGate Purdue Model architecture for OT security. Configure VDOMs, Industrial DMZ, and microsegmentation per IEC 62443 zones without disrupting production.

Read More
Deep Dive QUIC Explanation

Deep Dive QUIC Explanation

Master the QUIC protocol deep dive with hands-on Wireshark captures. Learn TLS 1.3 integration, stream multiplexing, and congestion control configuration.

Read More
The Cisco Engineer’s Guide to FortiGate: A Side-by-Side CLI Rosetta Stone for IOS Veterans Landing on FortiOS

The Cisco Engineer’s Guide to FortiGate: A Side-by-Side CLI Rosetta Stone for IOS Veterans Landing on FortiOS

Master the Cisco to FortiGate CLI cheat sheet. Map IOS commands to FortiOS syntax for policies, routing, and troubleshooting. No fluff, just working configs.

Read More
Using host file equivalent on the FortiGate Firewall

Using host file equivalent on the FortiGate Firewall

Configure a FortiGate local DNS zone to override hostnames. Use CLI or GUI to create local DNS entries for testing without upstream queries.

Read More
Deploying FortiGate Dynamic Device and OS Identification for Network Visibility and Asset Inventory

Deploying FortiGate Dynamic Device and OS Identification for Network Visibility and Asset Inventory

Configure FortiGate device identification to build a passive asset inventory. Learn CLI setup, daemon verification, and OS fingerprinting for network visibility.

Read More
Mastering Routing Administrative Distance: A FortiGate and Multi-Vendor Engineering Guide

Mastering Routing Administrative Distance: A FortiGate and Multi-Vendor Engineering Guide

Configure FortiGate administrative distance to control route selection. Compare AD values with Cisco, Juniper, and Arista to prevent blackholes and ensure correct failover.

Read More
Is your FortiGate vulnerable to Management Access when using a Let’s Encrypt Certificate

Is your FortiGate vulnerable to Management Access when using a Let’s Encrypt Certificate

Verify FortiGate Let's Encrypt security. Learn how the isolated ACME daemon handles validation without exposing your administrative GUI or management console.

Read More
Building Custom Application Signatures on FortiGate

Building Custom Application Signatures on FortiGate

Create a FortiGate custom application signature to identify unknown traffic. Learn F-SBID syntax, find unique fingerprints, and apply the signature in firewall policies.

Read More
FortiGate-to-FortiGate GRE Tunnel Deployment Guide

FortiGate-to-FortiGate GRE Tunnel Deployment Guide

Configure a FortiGate GRE tunnel with this CLI guide. Learn to set up the tunnel interface, routing, and firewall policies for reliable site-to-site connectivity.

Read More
Blocking Scribd Uploads on FortiGate Using Built-In FortiGuard Controls

Blocking Scribd Uploads on FortiGate Using Built-In FortiGuard Controls

Block Scribd uploads on FortiGate using built-in Application Control and DLP. Learn the CLI config and SSL inspection prerequisites to stop data leaks effectively.

Read More
FortiGate Interface and Link Types: A Practitioner’s Field Reference

FortiGate Interface and Link Types: A Practitioner’s Field Reference

Master FortiGate interface types including physical, VLAN, and tunnel interfaces. Learn which type to choose for performance, redundancy, and routing in FortiOS.

Read More
Deploying FortiGate Firewall Policy Disclaimers for Acceptable Use Enforcement

Deploying FortiGate Firewall Policy Disclaimers for Acceptable Use Enforcement

Deploy the FortiGate firewall policy disclaimer to enforce Acceptable Use Policy. Learn to configure standalone or authenticated AUP pages in FortiOS.

Read More
Deploying FortiGate Load Balance Health Check Monitors for High-Availability Virtual Servers

Deploying FortiGate Load Balance Health Check Monitors for High-Availability Virtual Servers

Configure FortiGate load balance health check monitors for high availability. Use CLI and GUI to define ldb-monitor objects and validate server pools.

Read More