Fortinet
I was working on something this week that I wanted to replicate in my lab. I'm going to create a fake email ticket from a client that mimics what I found and resolved. Ticket: Lab Topology Built in EVE-NG to reproduce the scenario before touching production: * London-
Fortinet
HA or High Availably is a clustering feature that links two or more FortiGate Firewalls together to act as a single device. This stops single points of failure in case one of the devices were to go down. In this guide I will configure the FortiGates interfaces and HA port.
Capture The Flag
This is Mercury, a vulnerable Linux box from the Planet series on VulnHub. I wanted to dive more into capture the flags lately, as they're fantastic for practicing problem-solving and improving on existing skills and discovering new ones. There are three boxes in the Planet series, with
Cisco
It's common to connect switches using multiple cables to improve redundancy and bandwidth. However, without proper configuration, this can lead to loops, broadcast storms, and blocked ports due to Spanning Tree Protocol (STP) That's where EtherChannel with LACP (Link Aggregation Control Protocol) comes in. It lets
Cisco
In the real-world environments, IP phones and computers share the same switch but operate on separate VLANs. This setup improves security, performance, and network manageability. Especially in offices where VoIP is the main form of communication. In this lab, we will simulate a small office network where we need
Cisco
When you're building a network that needs to scale, manually adding static routes just doesn't cut it anymore. At a certain point, you want routers to share what they know automatically, accurately, and efficiently. That's where OSPF comes in In this lab, we'
Cisco
As your network grows, so does the complexity of managing routes between devices. Static routing works, and RIP gets you started, but when you need more efficiency and flexibility, it's time to use something smarter. That's where EIGRP comes in. In this lab, we'll
Cisco
When you're managing a network with just a few routers, static routes might be enough. But as your network grows, manually configuring routes on every device becomes time-consuming, error-prone, and hard to maintain. That's where dynamic routing protocols come into effect. RIP is an
Cisco
Routers do a great job moving data between networks. However, only when they know where to send it. In this lab, we'll explore static routing, which means manually telling each router how to reach remote networks. It's simple, predictable, and a great way to understand how
Network and Security tips
If you've ever worked in a shared office space or managed a network, you know how easy it is for someone to plug in a laptop and get online. Sometimes it's harmless. Other times, it's a serious security risk. In this post, I'
I'm going to share my experience in tackling the Breakout CTF from VulnHub. It's a boot2root challenge that I believe is a beginner to intermediate box. It will get you doing basic enumeration all the way to privilege escalation. If you're just getting started
In modern networks, private IP addresses are commonly used within organizations, but these addresses cannot directly access the internet. To enable communication with public networks, Network Address Translation (NAT) is used. There are three main types of NAT: * Static NAT - Maps a private IP to a dedicated public IP. * Dynamic
Managing a medium-sized office with dozen of devices, all needing IP addresses, assigning static IPs manually is not only time-consuming but also prone to errors. This is where DHCP (Dynamic Host Configuration Protocol) comes in. A DHCP server automatically assigns IP addresses, gateways. And other essential information to
Imagine you're setting up a small office network with three departments: Sales, HR and IT. Each department needs its own isolated network for security and efficiency, but they also need to communicate with each other for tasks like sharing files or accessing shared resources. This is where VLANs
FortiGate devices can be seamlessly deployed in Amazon Web Services (AWS) to protect your cloud infrastructure. By combining the scalability of AWS with FortiGate robust security features, you can secure your workloads, implement advanced threat protection, and create site-to-site VPNs for hybrid deployment. In this guide, we will
Setting up an IPsec VPN tunnel between an on-premises FortiGate device and AWS enables secure communication between your local network and resources hosted in the AWS cloud. This configuration is commonly used to extend an enterprise network to the cloud, allowing seamless and encrypted data exchange for hybrid environments.
What Are Firewall Policies, and Why Are They Important? Imagine your network is like an exclusive nightclub, and you want to ensure only the right people get in while keeping troublemakers out. This is where firewall policies come in - acting as the rules your bouncer follows to decide who enters
The rapid growth of the Internet of Things (IOT) has transformed the world we live and work, connecting everything from smart home devices to industrial machinery, However this connectivity brings significant security challenges. As the number of IoT devices increase, so does the attack surfaces. There is a little joke
Introduction Did you know that nearly 30,000 websites are hacked every day? In an era where cyber threats are constantly evolving, protecting your network from malicious content more crucial than ever. In this guide we'll explore how to configure a firewall policy on the FortiGate to block
What is SSL VPN? SSL VPN (Secure Sockets Layer Virtual Private Network) Is a feature that allows remote users to securely access your network over the internet. It provides a secure and encrypted connection between the remote user's device and the FortiGate firewall. Problem-Solving I want to
When building a brand new FortiGate device, either for a client or for yourself, the first things that you will be doing is getting the device connected to the internet via PPPoE and setting up interfaces and DHCP. For my experience with FortiGate and installing new devices, this has been
