Category Archives: Fortinet

FortiManager VM Requirements

When sizing out a VM FortiAnalyzer, make sure you have the correct sizing to handle the load from a logs…

By Manny Fernandez

March 11, 2019

Configuring OSPF on Fortigate

The Fortigate is capable of doing OSPF, BGP, and RIP from a dynamic routing protocol perspective. It is pretty straight…

By Manny Fernandez

March 9, 2019

Fortitoken with Active Directory on Fortigate

Yesterday I wrote a blogpost about two-factor authentication using Duo, Active Directory, Duo Proxy Auth and Fortigate. I mentioned that…

By Manny Fernandez

February 20, 2019

Gateway IP and interface conflict with Static Route 1

Fortigate 6.0.3 has a bug that will give you the "Gateway IP and interface conflict with Static Route 1” This…

By Manny Fernandez

February 12, 2019

Using Tags on the Fortigate Firewall

Tags are something that I have adopted into my workflow on most applications. I use Tags in Evernote, OmniFocus, macOS,…

By Manny Fernandez

February 12, 2019

Using Certificate to Login into a Fortigate

* Sometimes you may want to use a certificate to authenticate to you Fortigate firewall. This is a simple process…

By Manny Fernandez

February 11, 2019

Configuring FortiExtender

For those of you that have not heard or seen FortiExtender, it is a 3G/4G LTE modem that can be…

By Manny Fernandez

February 1, 2019

Initial Setup of FortiDeceptor 1000F

Today I recieved my FortiDeceptor 1000F Appliance. For those who are not familiar with the product, it is deception technology…

By Manny Fernandez

January 25, 2019

Enhancing the security TO the Fortigate, not just THROUGH it.

The IPS policies on the Fortigate are defined and assigned to policies. This means that the packets match the packets…

By Manny Fernandez

January 21, 2019

Fortigate HA in 5 Minutes

Here is a quick 5 min HA configuration for the Fortigate. On the Master Fortigate config system ha set group-name…

By Manny Fernandez

January 3, 2019

Multi-Regional AD VPN using Fortigate Firewalls and BGP

Disclaimer: This was a client installation. All names and locations have been changed to protect the privacy of the customer.…

By Manny Fernandez

December 20, 2018

Configuring LLDP for Cisco IP Phones on Stand Alone FortiSwitch

As you may or may not know, Fortinet makes switches and they are doing very well from a saturation perspective.…

By Manny Fernandez

December 3, 2018

Extending the FortiAnalyzer HDD

Update: 20191216 If you have deployed FortiAnalyzer (FAZ) in a VM, you will undoubtedly need to extend the hard drive…

By Manny Fernandez

December 3, 2018

Killing a Fortigate Process

The other day, while troublehsooting a customer’s firewall, I noticed a process that was eating up the CPU. CPU was…

By Manny Fernandez

December 3, 2018

Loading FortiOS via CLI

Earlier today, I received a FortiAnalyzer 1000D from a customer. This was a PoC box that was never picked up…

By Manny Fernandez

December 1, 2018

Configuring Multiple Fortigate Firewalls using USB

Use Case: You have multiple Fortigate Firewalls firewalls and you want to configure them pretty much the same execpt for…

By Manny Fernandez

November 20, 2018

TCP Timeout on Fortigate Firewall

Use Case: Municipality Customer. Has a Fire station app that runs through a Fortigate to a server behind the Fortigate.…

By Manny Fernandez

November 15, 2018

Fortigate 6300 – Assigning Services to a particular blade

  The Fortigate 6300 Is a massive platform with so much power, it can be used in multiple deployment methods;…

By Manny Fernandez

November 15, 2018

Configuration Confirmation on Fortigate

I am not a “Juniper guy" but I will say that their ‘commit confirm’ command is brilliant. Every engineer that…

By Manny Fernandez

November 14, 2018

Fortigate Web-content Overide

Use Case: You have web content profiles set up and a help desk that is fielding calls from unhappy users…

By Manny Fernandez

October 28, 2018

Categories

Recent posts

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story

  • I have been playing with the free version of... Full Story