currently learning Django | tech | security | frugality | fi |
Been working on a solution for a disaster recovery one of the goals was a stretched layer 2 network. Since we would need a similar firewall with similar rules at the DR location I have been investigating vxlan over and IPSEC tunnel. This is the current test config I will update it when more testing …
Continue reading “Fortigate to Fortigate VXLAN – Disaster Recovery”
I needed to capture packets off a production web server but did not want to add additional unnecessary software to production like wireshark or similar. I came across some dated articles on Netsh that looked promising. But the tool used to convert to packet capture seemed to be deprecated. Luckily the following tool allows you …
During recent roll-out of Forticlient 6.0.9 we noticed that when users clicked on the Forticlient icon they would get a prompt for admin credentials. After some testing we found a reboot has fixed all of them. Some require multiple reboots for the prompt to go away.
A quick entertaining read about Dean Karnazes, how he began running, and started ultra endurance racing. The book does a good job of detailing some of his bigger endurance feats, as you read about some of his overnight and extreme runs you start to realize that the human body is capable of so much more …
We had a number of Fortigate firewalls managing Fortiswitches via Fortilink, and no matter what version of Fortiswitch firmware we tried the switches would reboot but not upgrade. After some troubleshooting we found that using the following commands allowed the switches to be upgraded. config switch-controller global set https-image-push enable end
Installed new Fortigate 61E’s, everything seemed to work as planned until I wanted to added Fortianalyzer for traffic analysis. Testing seemed to indicate that Fortianalyzer traffic was being sent out the WAN interface instead of the IPSEC tunnel. After searching around I found that a source ip needed to be set for traffic originating from …
Continue reading “Fortigate traffic sourced from wrong interface”