InfoSecMonkey: No fluff. Just the config that works.

Category Archives: FortiGate

Securing the Gate with Security Profiles Series: Application Control

Securing the Gate with Security Profiles Series: Application Control

Configure FortiGate Application Control to identify and govern traffic by app. Learn about signatures, inspection modes, and SSL requirements for secure policies.

Read More
Securing the Gate with Security Profiles Series: Web Content Filter

Securing the Gate with Security Profiles Series: Web Content Filter

Configure the FortiGate Web Content Filter. Learn flow vs proxy inspection modes, evaluation order, and licensing prerequisites for effective deployment.

Read More
Logging deep-dive on FortiGate Firewalls

Logging deep-dive on FortiGate Firewalls

Configure FortiGate logging for FortiAnalyzer, syslog, and disk. Set severity thresholds, filters, and formats for SIEM integration and compliance.

Read More
Policy-Based Routing on FortiGate Firewalls – A Comprehensive Deployment Guide

Policy-Based Routing on FortiGate Firewalls – A Comprehensive Deployment Guide

Configure FortiGate policy-based routing for multi-WAN steering. Learn match criteria, rule ordering, and firewall policy interactions to avoid silent drops.

Read More
Understanding and Tuning FortiGate Conserve Mode: A Practical Guide to Memory Thresholds

Understanding and Tuning FortiGate Conserve Mode: A Practical Guide to Memory Thresholds

Tune FortiGate conserve mode by adjusting red, green, and extreme memory thresholds. Learn to configure FortiOS limits to prevent session drops and ensure stability.

Read More
A Beginner’s Guide to FortiOS 8.0’s CLI Code Lab

A Beginner’s Guide to FortiOS 8.0’s CLI Code Lab

Learn how FortiOS 8.0 CLI Code Lab lets you stage and test FortiGate CLI changes before committing. Prevent lockouts and apply configs safely.

Read More
The Life of a Packet: How Traffic Really Moves Through a FortiGate

The Life of a Packet: How Traffic Really Moves Through a FortiGate

Map the FortiGate packet flow order from ingress to egress. Understand DNAT, routing, policy lookup, and UTM inspection stages to debug drops and tune...

Read More
FortiGate Authentication Settings: A Comprehensive Guide

FortiGate Authentication Settings: A Comprehensive Guide

Configure FortiGate authentication settings for LDAP, RADIUS, and SSO. Learn how to set up user groups, firewall policies, and admin access securely.

Read More
FortiGate Authentication Rules and Authentication Schemes: A Practical Guide

FortiGate Authentication Rules and Authentication Schemes: A Practical Guide

Configure FortiGate authentication rules and schemes. Learn how to pair methods like Kerberos or SAML with traffic triggers for reliable active auth.

Read More
FortiGate BGP Troubleshooting: A Practical Guide

FortiGate BGP Troubleshooting: A Practical Guide

Master FortiGate BGP troubleshooting with this practical guide. Use exact CLI commands to diagnose neighbor states, fix connectivity, and resolve policy issues.

Read More
Central NAT vs. Policy NAT in Fortinet FortiGate: A Practical Comparison

Central NAT vs. Policy NAT in Fortinet FortiGate: A Practical Comparison

Compare FortiGate Central NAT vs Policy NAT. Learn the order of operations, pros and cons, and when to use each mode for cleaner firewall...

Read More
Getting the Most Out of FortiGate Protocol Options: When and How to Use Them

Getting the Most Out of FortiGate Protocol Options: When and How to Use Them

Learn FortiGate Protocol Options configuration to tune port mapping, file scanning, and inspection. Fix missed threats and improve throughput with custom profiles.

Read More
FortiGate HA: Every Knob, When to Turn It, and What Will Bite You

FortiGate HA: Every Knob, When to Turn It, and What Will Bite You

Master FortiGate HA configuration. Learn when to change defaults, how override works, and avoid common pitfalls in FGCP clusters for stable production.

Read More
FortiGate SD-WAN SLA Testing: A Deep Dive Into Every Probe Type (Including the Ones Hidden in the CLI)

FortiGate SD-WAN SLA Testing: A Deep Dive Into Every Probe Type (Including the Ones Hidden in the CLI)

Configure FortiGate SD-WAN SLA probe types beyond the GUI. Use TCP, UDP, and TWAMP probes in the CLI for accurate path monitoring and steering.

Read More
FortiLink Split Interface Deep Dive: Designing Resilient FortiSwitch Topologies

FortiLink Split Interface Deep Dive: Designing Resilient FortiSwitch Topologies

Configure the FortiLink split interface for resilient FortiSwitch topologies. Learn when to enable split mode in FortiGate HA pairs to prevent loops and ensure...

Read More
Replacing a FortiGate managed FortiSwitch

Replacing a FortiGate managed FortiSwitch

Learn how to replace a FortiGate managed FortiSwitch using the execute replace-device command. Preserve VLANs and port configs without manual reconfiguration.

Read More
Setting Correct Longitude and Latitude on your FortiGate Firewall

Setting Correct Longitude and Latitude on your FortiGate Firewall

Fix your FortiGate VPN Map location. Learn how to set correct longitude and latitude using the gui-device-latitude CLI command to place your firewall accurately.

Read More
Cert-Based Site-to-Site VPN on FortiGates using Open SSL as the CA – 2026 Version

Cert-Based Site-to-Site VPN on FortiGates using Open SSL as the CA – 2026 Version

Configure FortiGate site-to-site VPN using OpenSSL CA. Generate root and device certificates, create PKCS12 files, and apply IPsec settings for secure tunneling.

Read More