Tag Archives: fortinet

Using Active Directory Groups to Control Web Content Policies

This is another question I get asked a lot.  When customers first deploy a Fortigate firewall and they have migrated…

By Manny Fernandez

September 9, 2019

How we used Fortinet to host a CTF (Capture the Flag)

Every years, the South Florida ISSA puts on a Capture the Flag / Chili Cook Off event.  For the past…

By Manny Fernandez

September 7, 2019

VPN Hair-Pinning on Fortigate Firewalls

Here is an issue I get questions about all the time. Use Case Customer has two VPNs. Customer wants to…

By Manny Fernandez

September 3, 2019

Reverse Path Forwarding on Fortigate Firewalls

What is spoofing?  Back in the days of security being on routers via ACLs, we would regularly fool the routers…

By Manny Fernandez

September 2, 2019

Sudo Command in FortiOS

Any Fortinet administrator that uses Fortigates with VDOMs will tell you that sometime, you need to jump back and forth…

By Manny Fernandez

August 28, 2019

Single Sign On with Fortigate VPN

As many of you know, RDP (Remote Desktop) is a huge problem today.  Some of my customers demand that we…

By Manny Fernandez

August 27, 2019

Fortigate Script for Adding Countries

Working with Fortigates, you may want to have all the countries predefined in the address list so that you can…

By Manny Fernandez

June 30, 2019

Fortimanager – Dynamic Interfaces and how to use them

Fortimanager is a centralized configuration and management solution for Fortinet devices.  Although the ENTIRE line of Fortinet product are not…

By Manny Fernandez

June 20, 2019

Useful Fortiswitch CLI commands and settings

So I "grew up" on the Cisco CLI.  Later moved to Linux and loved it.  I am now on a…

By Manny Fernandez

June 8, 2019

Installing Observium to Monitor SNMP enabled devices

Observium is a fantastic solution to monitor network devices.  It has a map where you can enter the physical address…

By Manny Fernandez

June 4, 2019

Troubleshooting Fortigate HA

Updated 20190602 Whe you have two Fortigates and you have configured them in HA, we sometimes see issues where they…

By Manny Fernandez

June 2, 2019

Fortigate DHCP and Microsoft Dynamic DNS

Remote branches that utilize Fortigate's DHCP do not update Microsoft DNS servers automagically.  Fortinet does not have a syncing feature…

By Manny Fernandez

May 22, 2019

Administering the Fortigate Firewall with LDAP Credentials

I am a big fan of having a centralized directory of users.  This makes it easy when that serial, crazy…

By Manny Fernandez

May 21, 2019

Route-Map on Fortigate

Often times you need to create a route map on a device to control what routes the device is advertising.…

By Manny Fernandez

May 20, 2019

Best Practice for Creating Fortinet Support Accounts

I cannot tell you how many times I get asked by customers or partners, "The person that registered the products…

By Manny Fernandez

May 18, 2019

UPDATED – Certificate Pinning you SSL VPN with Microsoft CA and Fortigate Forticlient Using ‘user’ certificates

Customer wanted to ONLY allow devices that are trusted devices (owned by the customer) to connect using the ‘Full Access”…

By Manny Fernandez

May 15, 2019

Creating SPAN port on Fortigate By: Brent Klespies

Here is a blog post from a friend and colleague Brent Klespies I had a customer wondering how to create…

By Manny Fernandez

May 8, 2019

FortiAnalyzer FortiView not showing data

Great article from a friend (Matt Sherif) of mine on troubleshooting FortiAnalyzer when it is not showing data.

By Manny Fernandez

May 3, 2019

Troubleshooting NAT on Fortigate Firewall

When you want to validate that the Fortigate is doing NAT properly, there are a few things you can do.…

By Manny Fernandez

May 3, 2019

Fortigate / Scrutinizer NetFlow Deployment

Today I had a customer talking to me about Netflow and the Fortigate.  To demonstrate the functionality, I decided to…

By Manny Fernandez

May 2, 2019

Categories

Recent posts

  • Had a customer with over 200 static routes on... Full Story

  • This is a work in progress, I will be... Full Story

  • I have been playing with the free version of... Full Story