fortigate

DNS tunneling vs network security controls part 4 – DGA

May 25, 2025May 30, 2025

The next part of my DNS protection and identification series – this time focusing on DGA (Domain Generation Algorithm). DGAs are used to evade traditional IOCs such as static domains and IP addresses. How does it work? It’s quite simple: a compromised host continuously generates domain names and sends DNS queries. If one of those… Read More »DNS tunneling vs network security controls part 4 – DGA

How to choose the right firewall model?

July 29, 2024July 29, 2024

How do you choose the right firewall model for your environment? The first and obvious factor to consider is performance. We need to account for the features that will be used in our firewall (IPsec tunnels, security features, SSL decryption). Based on the expected throughput and using vendor datasheets, we can estimate which model is… Read More »How to choose the right firewall model?