Fortinet SD-WAN still requires proper routing. For small deployments, static routing is sufficient. For bigger deployments, OSPF or BGP can be used. For large-scale deployments, the recommended option is BGP because of its better scalability and other less obvious benefits. In the previous blog post, I described SD-WAN operations for traffic initiated from branches/spokes to… Read More »Fortinet SD-WAN & BGP
As a engineer I would like to know in details what is happening behind the scene. Even, in my job it is mandatory, to have capability to troubleshoot some issues, during almost every implementation I’m facing some issue, this is real world, at the slides everything is perfect always 🙂 Fortinet SD-WAN configuration is quite… Read More »Fortinet SD-WAN deep dive
What I like in FortiGate devices, is that troubleshooting is quite straightforward. Of course, knowledge is necessary about troubleshooting capabilities and functions. Basically, every firewall is about to block and allow traffic. So, how to troubleshoot communications issue, when probably FortiGate is blocking some traffic, but it shouldn’t. Lets’s analyze below scenario, quite specific actually:… Read More »FortiGate troubleshooting methodology
SD-WAN technologies are nowadays quite common solutions. Almost every distributed enterprise has a reasons to have it. Really good example are retails companies, one of the main reasons to deploy SD-WAN is to have stable card payments. As example retailers in Poland, most have it already or planning to deploy. I have deployed Fortinet SD-WAN… Read More »Fortinet SD-WAN FortiOS 6.2 <-> 7.4
Again and again and again, Fortinet has published critical vulnerability in FortiOS for SSL VPN CVE-2024-21762: Let’s summarize last years: All above had high or critical severity, required immediate patching. SSL VPN is internet facing service usually and how dangerous it is, see below: https://therecord.media/dutch-find-chinese-hackers-networks-fortinet My advice… For remote access as protocol can be used… Read More »FortiGate SSL VPN vulnerabilities