InfoSecMonkey: No fluff. Just the config that works.

Category Archives: Network

FortiGate IPAM vs DHCP: Differences, Overlap, and What to Check Before You Turn IPAM On

FortiGate IPAM vs DHCP: Differences, Overlap, and What to Check Before You Turn IPAM On

FortiGate IPAM vs DHCP explained: what each one assigns, where they overlap, and what to check before enabling IPAM so it does not renumber...

Read More
nmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans

nmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans

nmap companion tools that read your scans: searchsploit, brutespray, gowitness, RustScan and more, plus the one flag that chains them.

Read More
Spanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config)

Spanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config)

Learn how spanning tree, RSTP and MSTP elect a root and block loops, then configure MSTP on FortiSwitch so both core uplinks forward traffic.

Read More
CVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE

CVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE

CVE-2026-97631 EDK2 PXE ICMP overflow runs attacker code in UEFI before the OS loads. Find exposed hosts, patch firmware, and contain it on FortiGate.

Read More
PAC Files Explained: How Proxy Auto-Config Really Works

PAC Files Explained: How Proxy Auto-Config Really Works

Learn what a PAC file does, the standard FindProxyForURL format, helper functions, WPAD discovery, FortiGate hosting, and testing with pactester.

Read More
Introducing Net3PO: A Free, Open-Source Network Engineer Toolkit for macOS, Windows and Linux

Introducing Net3PO: A Free, Open-Source Network Engineer Toolkit for macOS, Windows and Linux

Net3PO is a free, open-source network engineer toolkit: subnet, DNS, SNMP, Syslog, TFTP, Fortinet and SSH tools in one app. Install and verify it...

Read More
LACP (802.3ad) Link Aggregation: How It Works and How to Configure It

LACP (802.3ad) Link Aggregation: How It Works and How to Configure It

Learn how LACP link aggregation (802.3ad) negotiates, hashes, and fails over, then configure and verify it on FortiGate, FortiSwitch, Cisco, and Linux.

Read More
Network Performance Metrics Explained: Latency, Jitter, Packet Loss, and Throughput

Network Performance Metrics Explained: Latency, Jitter, Packet Loss, and Throughput

Understand network performance metrics: what latency, jitter, packet loss, and throughput mean, how each is calculated, and a highway analogy to fit.

Read More
The /31 Subnet: Myth or Standard? Network and Broadcast Addresses on Point-to-Point Links

The /31 Subnet: Myth or Standard? Network and Broadcast Addresses on Point-to-Point Links

Is the /31 subnet a myth? Learn how RFC 3021 drops the network and broadcast address, when to use /31 links, and when not...

Read More
arp-scan: Find Every Host on Your LAN in Seconds

arp-scan: Find Every Host on Your LAN in Seconds

Learn arp-scan network discovery: install it on Linux or macOS, sweep a subnet, scan tagged VLANs, export CSV, and catch duplicate IPs fast.

Read More
FortiGate SD-WAN Debugs: The Diag Commands That Actually Find the Problem

FortiGate SD-WAN Debugs: The Diag Commands That Actually Find the Problem

Use FortiGate SD-WAN debug commands to trace health checks, rules, and policy routes. Follow this CLI workflow to find why traffic takes the wrong...

Read More
Nmap Scripting Engine (NSE): From One-Liners to Your First Custom Script

Nmap Scripting Engine (NSE): From One-Liners to Your First Custom Script

Master the Nmap Scripting Engine. Learn to select scripts, pass arguments, and write your first Nmap NSE custom script for HTTP header auditing.

Read More
OPNsense on a Raspberry Pi: A Step-by-Step Guide

OPNsense on a Raspberry Pi: A Step-by-Step Guide

Install OPNsense on Raspberry Pi 4 using UEFI firmware. This guide covers building the boot chain, writing the aarch64 image, and configuring interfaces for...

Read More
Legacy Protocols Must Die: FTP, Telnet, HTTP, and Their Secure Replacements

Legacy Protocols Must Die: FTP, Telnet, HTTP, and Their Secure Replacements

Replace legacy protocols like FTP, Telnet, and HTTP with secure alternatives. Get the exact configs for FortiGate, Linux, and macOS to harden your network.

Read More
APIPA Explained: The 169.254.0.0/16 Address Space, When It Is a Problem, and When It Is by Design

APIPA Explained: The 169.254.0.0/16 Address Space, When It Is a Problem, and When It Is by Design

Diagnose 169.254.0.0/16 APIPA failures and intentional uses. Learn the RFC 3927 self-assignment process, verify FortiGate HA heartbeats, and fix DHCP issues.

Read More
Every Type of Mass Storage, Explained: HDD, SSD, Tape, Optical, and Beyond

Every Type of Mass Storage, Explained: HDD, SSD, Tape, Optical, and Beyond

Compare mass storage types explained in this guide. Learn how HDD, SSD, LTO tape, and optical media work, their interfaces, and where each fits...

Read More
FortiGate BFD: What It Is, When to Use It, and How to Configure It

FortiGate BFD: What It Is, When to Use It, and How to Configure It

Configure BFD on FortiGate to cut routing failure detection to under one second. Includes CLI steps for BGP, OSPF, and static route protection.

Read More
DHCP Snooping Deep Dive  Building the Binding Table That Your Entire Layer 2 Security Stack Depends On

DHCP Snooping Deep Dive Building the Binding Table That Your Entire Layer 2 Security Stack Depends On

Configure DHCP snooping on FortiSwitch to build a secure binding table. Stop rogue servers and enable DAI with this practical FortiLink implementation guide.

Read More