Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fortigate failing PENTEST and CyberSecurity Insurance Requirements
I have numerous clients that have rolled out the SSL portals/SSL VPNS and they are failing pentest's, compliance testing, cyber security insurance requirements.
While I understand Fortigate published this article.
The fact remains the devices are failing, verification. We are having to switch over to IPSEC. The developers need to take this matter more seriously.
Labels:
- Labels:
-
FortiGate
4 REPLIES 4
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FortiOS versions?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ALL
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
???? So its likely you are running versions with known vulnerabilities then?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think you misnderstand. All fortigates that use ssl vpn will fail pen tests regardless of the current firmware
