Category Archives: VPN

10 November, 2026

FortiGate IKEv2 Certificate Pinning: Machine Certificate Plus EAP-MSCHAPv2 Remote Access VPN

Set up FortiGate IKEv2 certificate pinning: require a machine certificate from your own CA before EAP-MSCHAPv2 login, with OpenSSL and CRL.

10 November, 2026

CVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide

SonicWall SAML MFA bypass CVE-2026-19868 is exploited. Check exposure, patch SonicOS, and hunt SSLVPN logins that skipped your IdP.

21 October, 2026

Cisco Duo MFA for FortiGate Remote Access VPN: SAML and RADIUS on IKEv2

Set up Duo FortiGate VPN MFA on IKEv2: Duo SSO as SAML IdP or the Duo Authentication Proxy over RADIUS, with configs, debugs, and...

7 October, 2026

RADIUS Deep Dive: What Actually Happens After You Click Connect

Decode RADIUS packet anatomy to debug FortiGate auth. Learn how shared secrets, authenticators, and VSAs work. Includes Blast-RADIUS hardening tips.

7 October, 2026

FortiGate IKEv2 Remote Access with EAP: What Actually Happens on the Wire

Analyze FortiGate IKEv2 EAP debug logs to trace the full handshake. See how RADIUS relays work and why tunnels fail during authentication.

25 September, 2026

FortiGate Cloud SD-WAN Overlay: Hub-and-Spoke Orchestration Without a FortiManager

Configure a FortiGate Cloud SD-WAN overlay with Fortinet-hosted hubs. Deploy ADVPN hub-and-spoke tunnels without FortiManager using this step-by-step guide.

5 September, 2026

Anatomy of a FortiGate VPN: Every Option available in P1 and P2

Decode every FortiGate VPN Phase 1 Phase 2 option. Learn what each CLI setting does, avoid common pitfalls, and build stable, secure IPsec tunnels.

2 September, 2026

Troubleshooting IPSec VPN tunnels in FortiGate Firewalls 2026 Version

Master FortiGate IPsec VPN troubleshooting with exact CLI commands. Filter IKE debug output, list active tunnels, and force renegotiation in FortiOS 7.4+.

24 August, 2026

Configuring Native OS VPN Clients to a FortiGate: Agentless IKEv2/IPsec Remote Access

Configure FortiGate native IKEv2 VPN for Windows, macOS, and Ubuntu. Set up agentless remote access with EAP authentication and split tunneling without FortiClient.

23 July, 2026

EVPN Route Types: The Practitioner’s Field Guide

EVPN route types explained: master Types 1-11, NLRI fields, and DF election. Debug multihoming and MAC mobility on FRR, NX-OS, EOS, Junos, and FortiOS.

22 July, 2026

Deploying a FortiGate as an IPsec IKEv2 Remote-Access VPN Concentrator for Linux Clients with FortiToken MFA

Configure a FortiGate IKEv2 VPN Linux concentrator with FortiToken MFA. This guide covers strongSwan client setup, EAP authentication, and port 443 traversal for remote...

19 July, 2026

FortiGate ADVPN: Classic (1.0) vs. Edge-Discovery (2.0) for Dynamic Spoke-to-Spoke SD-WAN

Compare FortiGate ADVPN 1.0 vs 2.0 for SD-WAN. Deploy dynamic spoke-to-spoke tunnels with exact FortiOS 7.2 and 7.4 configs. No fluff, just working steps.

1 June, 2026

Quantum-Safe FortiGate: A Practical Guide to Post-Quantum Cryptography in FortiOS

Configure FortiGate post-quantum cryptography for IPsec and SSL VPN. Learn to deploy hybrid key exchange with ML-KEM to defend against harvest now, decrypt later...

28 May, 2026

Kasm Workspace on Ubuntu Linux; How to deploy and configure VPN

Deploy Kasm Workspace on Ubuntu Linux using the official script. Configure OpenVPN egress providers to hide OSINT artifacts and protect your real IP address.

2 May, 2026

Cert-Based Site-to-Site VPN on FortiGates using Open SSL as the CA – 2026 Version

Configure FortiGate site-to-site VPN using OpenSSL CA. Generate root and device certificates, create PKCS12 files, and apply IPsec settings for secure tunneling.

31 March, 2026

FortiGate IPsec Remote Access VPN with Computer Certificate Pinning

Configure FortiGate IPsec certificate pinning to restrict VPN access to authorized devices. Includes FortiAuthenticator CA setup and macOS client steps.

16 February, 2026

IPsec VPNs Deep Dive

Learn to configure IPsec VPN phases and choose the right Diffie-Hellman group. Understand ISAKMP, IKE, and cipher suites for secure tunnel setup.

29 January, 2026

Differences between IKEv1 and IKEv2 on FortiGate

Compare IKEv1 vs IKEv2 on FortiGate. Learn why IKEv2 offers better performance, MOBIKE support, and EAP authentication for modern remote access deployments.