top of page
Search

Log location in 6.2.x
One of the biggest things I noticed in 6.2 is my VPN events section disappeared in 6.2. I used to use this to rule out any phase1 issues,...
Matt Sherif
Jan 27, 20201 min read
428 views
0 comments

Configuration Scripts in 6.2.3
Shout out to my dear friend and colleague Kostas Sfakiotakis for helping me out with this one. I Was working on a new FortiGate, and I...
Matt Sherif
Jan 15, 20201 min read
985 views
0 comments


FAP U431F doesn't come up after registration
My colleague and good friend Manny Fernandez posted this article about FAP-U431F APs not registering. As a follow up I wanted to post a...
Matt Sherif
Jan 8, 20201 min read
773 views
0 comments

Minor yet noteworthy change in 6.2.3
First rule of FortiOS, .0 means "dot no". As in "you shall not deploy in production". Second rule of FortiOS "Read the release notes"....
Matt Sherif
Dec 20, 20191 min read
1,042 views
0 comments


FortiSandbox
This started off as a demonstration after I had corrected an issue, but it turned into me showing how the sandbox signatures get...
Matt Sherif
Dec 17, 20191 min read
129 views
0 comments

Conditional DNS Forwarding on Fortigate/FortiProxy
This morning I was poking around the lab and I got this email: Okay - let me look at FortiAnalyzer to figure out what's going on, so I...
Matt Sherif
Oct 16, 20191 min read
239 views
0 comments

Using FortiAuthenticator to replace vCenter root CA
Ah, certificates, you lovely pains in my backside. On one hand, you secure the web, validate that services say they are who they say they...
Matt Sherif
Oct 11, 20196 min read
268 views
0 comments


Bulk adding mac address devices to FortiGate
I was poking around on a popular social media site and saw a FortiGate user asking about devices being auto added based on MAC address....
Matt Sherif
Oct 7, 20191 min read
186 views
0 comments


WiFi Best Practices
A colleague of mine, Bryan Wolski has written up a great article for InfoSec Monkey, and while many of the screenshots are Fortinet...
Matt Sherif
Sep 25, 20191 min read
207 views
0 comments

Let's Encrypt with Fortigate
Update Feb 7, 2020: I had missed something in the original script and have updated it to update the certificate gracefully. I initially...
Matt Sherif
Sep 9, 20194 min read
10,595 views
0 comments


Multiple authentication use cases for RADIUS clients
You recently bought FortiAuthenticator, you've deployed it, and you even configured it to perform admin authentication on your FortiGate....
Matt Sherif
Aug 30, 20193 min read
476 views
0 comments

Sudo Command in FortiOS
If you're a *nix user, you know how nice it is to sudo. A good friend and colleague of mine, Manny Fernandez did an awesome writeup on...
Matt Sherif
Aug 28, 20191 min read
243 views
0 comments


Rollback after code upgrade
Contingency planning, we all do it when we plan firmware, operating system, or application upgrades. The biggest one is "how do we roll...
Matt Sherif
Aug 28, 20191 min read
1,816 views
0 comments


Exporting VMs to OVA format
In working with a customer, I encountered a bit of an issue and confusion regarding what files to select when importing an OVF into their...
Matt Sherif
Aug 28, 20191 min read
35 views
0 comments


Secure remote desktop without poking holes in your firewall
You’ve just signed off on that big project with Company X, they’re going to implement the new Flux Capacitor you just bought. Even...
Matt Sherif
Aug 25, 20192 min read
979 views
0 comments

Adding the default SLAs to a FortiGate upgraded to 6.2.1
If you've unboxed a new FortiGate and loaded 6.2.1 out of the box and started configuring SD-WAN, you probably noticed the cool new...
Matt Sherif
Aug 21, 20191 min read
177 views
0 comments


Fortinet Security Fabric - FortiMail and FortiSandbox
With the recent upswing in attacks against public agencies, I felt it would be useful to showcase how these attacks can be avoided. Using...
Matt Sherif
Jun 28, 20191 min read
58 views
0 comments


You shall not click the link!
More on the Forti-In action series, where I showcase real world use cases as I come across them or customers bring them to me. Had...
Matt Sherif
Jun 14, 20191 min read
139 views
0 comments


The time I (almost) caught malware
I was looking for freeware - likely one of the most common reasons people end up with malware from downloading stuff. And what happened...
Matt Sherif
Jun 11, 20191 min read
78 views
0 comments


Resolving Source IPs in FortiAnalyzer FortiView
One of my main views in FortiAnalyzer is FortiView, it's a powerful, easy to use and understand dashboard. One question I hear frequently...
Matt Sherif
May 15, 20191 min read
189 views
0 comments
bottom of page