To cut a long story short, I wanted to be able to Geographically lock HTTP/HTTPS requests towards back-end web servers behind a FortiGate hosting a single WAN IP address. Hum, well, it's really not as easy as it sounds...…
WhatsApp, ahh good god, controlling WhatsApp is a nightmare, that app goes anywhere, pretty much.. Facebook, WhatsApp backend of course but many other destinations are needed as well.…
I've been testing a few configuration tweaks in order to reduce my OSPF routing convergence to the bone, a sub second fail-over. Here are the optimal FortiGate Cluster Protocol settings I've found out..…
Just a few FAC tips and info's... While LDAP(s) is one of the main Windows AD authentication protocol, it isn't very convenient or best practice at the edge level. Typically, an Enterprise based Users Authentication scheme would leverage RADIUS from any edge facing devices on a RADIUS Server. The…