Tag Archives: Fortigate

FortiGate AD Polling with Windows Server 2003

Today, I was helping a customer set up Active Directory polling from a FortiGate firewall using the External Connector which…

By Manny Fernandez

February 22, 2021

Setting Up Notification of FortiGate Firewalls with Automation

Staring in 6.2 there was the ability to set up automation stitches on the FortiGate firewalls.  In 6.4, Fortinet enhanced…

By Manny Fernandez

February 6, 2021

Setting up SSL Offload and Load Balancing for inbound connections on a FortiGate

Today I was working with a colleague of mine on a proof-of-concept for one of his customers.  The requirements were…

By Manny Fernandez

August 24, 2020

Protected: Using Referrer Field with FortiGate Web Filter

This content is password protected. To view it please enter your password below: Password:

By Manny Fernandez

August 7, 2020

Decreasing Fail-Over Time for Multi-Homed VPNs using DPD.

Use case: Customer has two ISP connections at both sites. Two VPNs configured. ISP1 to ISP1 and ISP2 to ISP2.…

By Manny Fernandez

July 1, 2020

Reverting from Comprehensive Mode to Optimal Mode on FortiOS 6.4.1

If you are like me, you turn on all kinds of features just because.  I upgraded my lab FortiGate to…

By Manny Fernandez

June 7, 2020

Bi-directional DNAT on FortiGate Firewalls

I am a BIG supporter of Central NAT.  I believe it is in-line with the present day firewall platforms.  Even…

By Manny Fernandez

May 28, 2020

Separate VRF for Out-of-Band Management in FortiOS

I am currently running FortiOS 6.4 on this FortiGate.  The use case is to have an out-of-band interface that points…

By Manny Fernandez

May 27, 2020

Multi-Factor Authentication with FortiToken, FortiAuthenticator and FortiGate

Today, a customer asked me about selectively assigning FortiTokens to AD users using FortiAuthenticator.  In this use case, I am…

By Manny Fernandez

May 26, 2020

Deploying SSL VPNs Using Multiple Realms

Realms are a feature on the FortiGate that I have written about in the past, but I never really did…

By Manny Fernandez

May 26, 2020

FortiClient CLI for Linux using Realms

Last year I wrote an article about installing FortiClient on a Linux machine.  There were two options; CLI and GUI.  Today…

By Manny Fernandez

May 18, 2020

Anti-SPAM Feature on FortiGate Firewalls

Normally, I position FortiMail for anti-SPAM at customers.  However, today I decided to play with the Anti-SPAM feature on the…

By Manny Fernandez

May 16, 2020

VWire with FortiGate Firewalls

Although the FortGate CAN operate in transparent mode, I rarely used/use it.  Fortinet introduced VWire which is a layer 2 pair…

By Manny Fernandez

May 14, 2020

Built-In “IPerf” on the FortiGate Firewall

I happen to love iperf.  Iperf is a tool that has been around for a long time.  The idea is…

By Manny Fernandez

May 14, 2020

Limiting Protocols in FortiGate Web Access Portal VPN

When you connect to a FortiGate in Web Portal mode, by default, you are able to create bookmarks using HTTP/HTTPS,…

By Manny Fernandez

May 12, 2020

Connect to both Fortigates in an HA Cluster Separately

When you configure a FortiGate in HA, normally, there is no way connect to the second box unless you ssh…

By Manny Fernandez

May 6, 2020

Binding to LDAP with Minimum Access

Most of the documentation out there will tell you to configure a Domain Admin user to perform LDAP authentication.  When I…

By Manny Fernandez

May 3, 2020

Syslog Filtering on FortiGate Firewall & Syslog-NG

We recommend sending FortiGate logs to a FortiAnalyzer as it produces great reports and great, usable information.  However sometimes, you…

By Manny Fernandez

April 27, 2020

Troubleshooting FortClient VPN Connectivity Issues with FortiGate

As more and more users are using remote access VPNs and probably using FortiClient, I wanted to share the errors…

By Manny Fernandez

April 23, 2020

Restricting YouTube to Specific Channels on FortiGate Firewalls

Please note that YouTube is changing the way it categorizes content to comply with COPPA (Children's Online Privacy Protection Act). …

By Manny Fernandez

April 20, 2020

Categories

Recent posts

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story

  • I have been playing with the free version of... Full Story