Learning IPtables
A short post about the excellent Andrei Dumitrescu's training called: Linux Security: The Complete Iptables Firewall Guide…
Deny IP based host header requests on FortiWeb
A quick post about how you can deny services if requested using the IP address (no FQDN used) of your FortiWeb provided Virtual Servers.…
Apache Guacamole on Proxmox LXC Containers, FortiWeb, FortiAuthenticator and FortiOS.
This post is about configuring Proxmox based Ubuntu LXC container serving as FortiWeb load balanced Guacamole backend hosts, FortiAuthenticator for anything 2FA as well as Single Sign On's and obviously of course FortiOS, federating it all, controlling it all…
FortiManager: Exporting & Importing FDS databases
Exporting & Importing FDS databases on FortiManager…
Kernel-based Virtual Machines with Proxmox Virtual Environment
a few things I absolutely love about Proxmox PVE…
DNS-over-TLS from Edge fronting VDOMs
A post about a possible way to configure your edge fronting DNS requests over DoT/DoH services and this from your FortiGates units configured in multi-vdom operation mode…
Injecting Windows AD Logons within FAC/FSSO through Syslog
A post around forwarding Windows Security logs through Syslog to a FortiAuthenticator appliance extracting the user informations needed to create an FSSO entry. The later then addressable within your FortiGate's NGFW policies etc..…
Remotely Start/Stop TeamViewer service using a Web trigger
After having lost access to one of my extending Labs remote location due to me being too bad and perhaps rushing things out, I've actually cobbled out a decent way to remotely start/stop mostly any services you'd want to.…
Effective Web Server Protection
A post about possible controls offered by FortiOS in order to tighten your web server security…
Injecting SSL VPN Logons in FAC/FSSO through Syslog
I've been recently making some testing's with possible ways of interacting with the Syslog SSO agent present within the FortiAuthenticator appliance. The idea here is to possibly gather and inject users and their "client IP" within the FSSO scheme, this gathered through Syslog…