top of page
Search


Using physical FortiTokens with Azure AD
Multi-Factor Authentication (MFA), something that we should all be doing more of, yet I don't see enough of it! Without going too far...
Matt Sherif
Oct 29, 20213 min read
319 views
0 comments

UltraNote: SAML SSL VPN settings changes
I spent the better part of 2 hours chasing this down, and it frustrated me. In my lab, I am running 7.0.2 and was rebuilding my SSL VPN...
Matt Sherif
Oct 27, 20211 min read
531 views
0 comments

Let's Encrypt Fun (NOT) - Yet another workaround
Note: this article expresses my opinions, however incorrect you may feel they are. They don't reflect the opinions of anyone else or any...
Matt Sherif
Oct 26, 20213 min read
1,127 views
0 comments


Configuration Guide: FortiAuthenticator as Google WorkSpace SAML IdP
We've written a number of articles showing how to use Azure as your SAML IdP, and I've collaborated with my friend, Kim Frellsen on how...
Matt Sherif
Oct 22, 20214 min read
1,406 views
0 comments


A Madman asks: Why aren't you reading the release notes?
With the release of new firmware, come new release notes. And while I try to remain technologically agnostic, I'm very aware that this...
Matt Sherif
Oct 21, 20212 min read
85 views
0 comments

FSSO & Microsoft Updates, headaches, and solutions
I was contacted by a customer who ran into an issue deploying the FSSO collector agent on a member server, and they were having...
Matt Sherif
Oct 15, 20212 min read
1,075 views
0 comments

A madman's thoughts: the NSE8 exam
As some of you may know, I underwent the NSE8 Practical Exam in June of 2021. After spending the better part of 2 years studying, passing...
Matt Sherif
Oct 8, 202110 min read
1,660 views
0 comments

Let's Encrypt Fun (NOT) - a workaround
Note: this article expresses my opinions, however incorrect they may be. They don't reflect the opinions of anyone else. Update:...
Matt Sherif
Oct 2, 20214 min read
3,677 views
0 comments


UltraNote: OSPF MTU when upgrading from 6.4 to 7.0.1
I am fortunate to have access to enough FortiGear that I can have a lab set up and not impact production. This allows me to test out...
Matt Sherif
Jul 30, 20211 min read
969 views
0 comments

FortiOS Feature Highlight: 3rd party Dynamic DNS
When I was out for my run this morning, I found myself thinking about how we used to do things, and how far we've come as an industry,...
Matt Sherif
Apr 13, 20213 min read
524 views
0 comments

FortiGate VLANs: tagged and untagged VLANs on the same physical interface
I have come across this question quite a bit lately, and thought it may be helpful to post a quick how to. In this post we'll take a look...
Matt Sherif
Apr 8, 20212 min read
6,589 views
0 comments


Let's Talk about Security: Recent FBI-CISA Joint statement
As I am sure many of you have already seen the FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities some of you...
Matt Sherif
Apr 5, 20213 min read
488 views
0 comments

UltraNote: APs don't reconnect after upgrading to 7.0
I have been running 7.0 on one of my lab units since the beta, but was strictly focus on the FortiOS feature set. With GA happening last...
Matt Sherif
Apr 3, 20212 min read
853 views
0 comments

FortiOS Feature Highlight: API preview
If you have a more traditional networking/security model like me, you may have seen the wave of automation/devops/netops in a bit of a...
Matt Sherif
Mar 31, 20211 min read
424 views

FortiOS Feature Highlight: Let's Encrypt Certificate
FortiOS 7.0 has been released! Now, I know most of us are very cautious about this because in FortiOS .0 means ".NO you shall not upgrade...
Matt Sherif
Mar 31, 20212 min read
6,142 views
0 comments


A madman's thoughts: Azure IP/Routing weirdness
Cloud, what an interesting place. It enables us to deploy workloads faster than ever, and it has also expanded the "attack surface" by a...
Matt Sherif
Feb 11, 20214 min read
474 views
0 comments


Implementation Guide: FortiGate SSL VPN with Microsoft Azure SAML 2FA
As a follow up to a previous blog post, we walk through this configuration, and hopefully shed some more light on how this is doen. Thank...
Matt Sherif
Feb 10, 20211 min read
18,016 views
0 comments

Follow up: Let's Encrypt with FortiGate - Now with VDOMs!!!
It's been well over a year since I wrote the original "Let's Encrypt with FortiGate", and while my mediocre python code proved popular,...
Matt Sherif
Dec 14, 20203 min read
2,644 views
0 comments

A madman's thoughts: FortiGate to ASA VPN
I've done enough of these 'A madman's thoughts' for any of my older readers to see that these are usually a story of me overcoming a...
Matt Sherif
Nov 11, 20207 min read
315 views
0 comments

SSL VPN Host Check for Registry Key
VPN, dial in, or whatever you want to call it. Since before the internet has been around, remote access to company networks has been...
Matt Sherif
Oct 17, 20202 min read
1,581 views
0 comments
bottom of page