Category Archives: Fortinet

FortiMail Email Protection – Step by Step Guide

This is a document written by a colleague of mine working out of Dominican Republic with the Fortinet LATAM team.…

By Manny Fernandez

March 19, 2022

Multi-Factor Authentication with FortiToken, FortiAuthenticator and FortiGate

Today, a customer asked me about selectively assigning FortiTokens to AD users using FortiAuthenticator.  In this use case, I am…

By Manny Fernandez

May 26, 2020

Built-In “IPerf” on the FortiGate Firewall

I happen to love iperf.  Iperf is a tool that has been around for a long time.  The idea is…

By Manny Fernandez

May 14, 2020

Connect to both Fortigates in an HA Cluster Separately

When you configure a FortiGate in HA, normally, there is no way connect to the second box unless you ssh…

By Manny Fernandez

May 6, 2020

Syslog Filtering on FortiGate Firewall & Syslog-NG

We recommend sending FortiGate logs to a FortiAnalyzer as it produces great reports and great, usable information.  However sometimes, you…

By Manny Fernandez

April 27, 2020

FortiProxy, FortiGate & WCCP

Explicit Proxy has been included on the Fortigate since early on.  However because of competitive reason, Fortinet spun off the…

By Manny Fernandez

February 19, 2020

VX-LAN over IPSec using Fortigate Firewalls

VXLAN is a tunneling protocol that encapsulates layer 2 frames into layer 3 UDP packets.  VXLANs allow you to create…

By Manny Fernandez

January 18, 2020

Policy Disclaimer Option in FortiOS 6.2.3

Yesterday I wrote an article about some advanced policy option in FortiOS 6.2.3.  Here is another one.  In System then Feature…

By Manny Fernandez

January 17, 2020

FortiWifi with Tunnel and Bridge SSIDs

If you have a FortiWiFi using the internal radio and want to offer a guest SSID that is in "Tunnel"…

By Manny Fernandez

January 11, 2020

Fortinet Ports and Protocols

If you are ever wondering what ports needs to be open for various Fortinet products to interact and struggled to…

By Manny Fernandez

January 7, 2020

FortiAnalyzer Primer

Wanted to write an article about the FortiAnalyzer also known as FAZ .  FAZ is a great solution that is "CFO…

By Manny Fernandez

January 5, 2020

Complex Passwords for your Fortigate Firewall

Many security frameworks such as NIST, COBIT as well as regulatory bodies such as PCI DSS, SOX, GLBA, HIPAA, etc…

By Manny Fernandez

December 11, 2019

How to use Replacement Message Groups on FortiGate firewalls

As you may have seen in previous articles, the Fortigate firewalls have various replacement messages for various functions such as:…

By Manny Fernandez

December 8, 2019

Updating Images in Fortigate Replacement Messages

The Fortigate firewalls comes with some Replacement Messages.  These various messages are displayed under specific conditions and can be modified.…

By Manny Fernandez

December 6, 2019

Fortinet FIT / Tinycore Linux Static IP addressing

Last night, I decided to deploy the Fortinet FIT OVA which is essentially a packet generator that pushes attacks, web…

By Manny Fernandez

November 25, 2019

FortiOS to PANOS Site-to-Site VPN

In this article, I am using "WAY OLD" PAN OS.  Mostly because I no longer own an updated PAN box.…

By Manny Fernandez

November 17, 2019

Route-Based VPN between Cisco Router and Fortigate Firewall using OSPF

Earlier, I wrote an article showing how to do a VTI (Virtual Tunnel Interface) from a Cisco ASA to a…

By Manny Fernandez

November 10, 2019

ASA Route-Based VPN (VTI) with Fortigate Firewall

  Customer had a question about creating a route-based VPN between a Cisco ASA and a Fortigate.  Traditionally, the ASA…

By Manny Fernandez

November 7, 2019

Running a FortiTest with FortiTester

Earlier, I wrote an article on upgrading the FortiTester.  At the time, I did not have any SFPs for 10GB…

By Manny Fernandez

November 6, 2019

Upgrading a FortiTester

In preparation for a Proof-of-Concept with a customer where they wanted to test the breaking point of a FortiGate firewall,…

By Manny Fernandez

November 5, 2019

Categories

Recent posts

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story

  • I have been playing with the free version of... Full Story