Technical Tip: Advanced Intra-VLAN Isolation on Fo...

amalsky · 11-28-2025

Description This article describes how to configure TCP Authentication Option (TCP-AO) for BGP peering between FortiGate firewalls and third-party vendors (Cisco or Juniper routers, for example).It also provides comprehensive troubleshooting guidance...

amalsky · 11-28-2025

Description This article describes how to automatically deploy a FortiGate HA cluster (Active-Passive) in GCP using an interactive PowerShell script that integrates Terraform and gcloud CLI. Scope FortiGate. Solution The automation performs a complet...

amalsky · 08-28-2025

Description This article describes how to configure 'bidirectional DNS synchronisation' between a FortiGate and a BIND server (running on OPNsense) over a VXLAN tunnel transported inside an IPsec VPN. Scope FortiGate v7.0, v7.2, v7.4, v7.6. Solution ...

amalsky · 06-25-2025

Description This article describes how to configure a remote user IPsec VPN using IKEv2 with StrongSwan on a Linux system (Ubuntu 24.04). It also outlines the necessary steps to troubleshoot standard connectivity and traffic flow issues that may aris...

amalsky · 04-29-2025

Description This article describes how to block intra-VLAN traffic between devices connected to the same VLAN using a FortiSwitch feature managed by FortiGate. It also compares this native capability with traditional switches, such as Cisco, HP, and ...

User Statistics

User Activity

Technical Tip: Configuring BGP TCP Authentication Option (TCP-AO) Between FortiGate and Third party vendor

Technical Tip: Automated FortiGate HA (Active-Passive) deployment on Google Cloud Platform using Terraform

Technical Tip: Configuring FortiGate and BIND over VXLAN for Two-Zone DNS Synchronization

Technical Tip: How to configure and troubleshoot a IPsec client to site VPN using an opensource client