Category Archives: Fortinet

Upgrading Code on FortiFones

There are different models of the FortiFones.  Below I will show the basic upgrade process for the two GUI methods…

By Manny Fernandez

October 30, 2019

Manually Uninstalling FortiClient on MacOS

Recently I did the Catalina Upgrade to both of my MacBook Pros.  FortiClient was working on both.  Then on ONE…

By Manny Fernandez

October 18, 2019

WiFi Best Practices Part 1

Credit: This article was written by a friend and colleague Bryan Wolski.  He is a great asset to our team…

By Manny Fernandez

September 25, 2019

FortiVoice Enterprise Upgrade to 6x

Disclaimer: This is a new release and may contain bugs.  I do NOT recommend upgrading to it in a full…

By Manny Fernandez

September 25, 2019

Interacting with a decoy in FortiDeceptor

Yesterday, I wrote a post showing how to deploy a Decoy and the Lures .  It did not show any of the…

By Manny Fernandez

September 24, 2019

Deploying a Decoy in FortiDeceptor

For those not familiar with FortiDeceptor, it is a fairly new product but has been adopted by some of my…

By Manny Fernandez

September 23, 2019

Installing and Configuring FSSO

Fortinet Single Sign On or FSSO as it is called, is an agent that is installed on a Windows server…

By Manny Fernandez

September 13, 2019

Using Active Directory Groups to Control Web Content Policies

This is another question I get asked a lot.  When customers first deploy a Fortigate firewall and they have migrated…

By Manny Fernandez

September 9, 2019

Reverse Path Forwarding on Fortigate Firewalls

What is spoofing?  Back in the days of security being on routers via ACLs, we would regularly fool the routers…

By Manny Fernandez

September 2, 2019

Sudo Command in FortiOS

Any Fortinet administrator that uses Fortigates with VDOMs will tell you that sometime, you need to jump back and forth…

By Manny Fernandez

August 28, 2019

Conditional DNS Forwarding with FortiGate and FortiProxy

Today I was working with a customer that was running FortiProxy in a Proof-of-Concept.  One of the requirements was to…

By Manny Fernandez

August 20, 2019

Managing Guest Users in Fortigate Firewalls

Sometime, a company may want to create guest users for wireless or wired connections.  Additionally, companies may want to have administrators with…

By Manny Fernandez

July 25, 2019

Fortimanager – Dynamic Interfaces and how to use them

Fortimanager is a centralized configuration and management solution for Fortinet devices.  Although the ENTIRE line of Fortinet product are not…

By Manny Fernandez

June 20, 2019

Troubleshooting Fortigate HA

Updated 20190602 Whe you have two Fortigates and you have configured them in HA, we sometimes see issues where they…

By Manny Fernandez

June 2, 2019

Administering the Fortigate Firewall with LDAP Credentials

I am a big fan of having a centralized directory of users.  This makes it easy when that serial, crazy…

By Manny Fernandez

May 21, 2019

Route-Map on Fortigate

Often times you need to create a route map on a device to control what routes the device is advertising.…

By Manny Fernandez

May 20, 2019

Best Practice for Creating Fortinet Support Accounts

I cannot tell you how many times I get asked by customers or partners, "The person that registered the products…

By Manny Fernandez

May 18, 2019

UPDATED – Certificate Pinning you SSL VPN with Microsoft CA and Fortigate Forticlient Using ‘user’ certificates

Customer wanted to ONLY allow devices that are trusted devices (owned by the customer) to connect using the ‘Full Access”…

By Manny Fernandez

May 15, 2019

Disabling Weak Ciphers on Fortigate Firewalls

A customer of mine sent me an email after having a vulnerability assessment done against his environment.  He got back…

By Manny Fernandez

April 14, 2019

Fortigate in One-Arm Sniffer Mode

Not sure if you got the 'Featured Image' (One Arm and the nose as the 'sniffer') OK.  I am done…

By Manny Fernandez

March 21, 2019

Categories

Recent posts

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story

  • I have been playing with the free version of... Full Story