Re: FortiOS 6.2.9 list files in filesystem CVE-202...

Yurisk · 12-22-2024

fnsysctl is frequently helpful in troubleshooting Fortigates, and while its options are mentioned in the Forums here and there, no single article lists them, and not all options are mentioned, so I wrote a post to summarize the info.Originally posted...

Yurisk · 12-15-2023

Good day everyone,I added to my repo folder with FortiAnalyzer Handlers collection ready to use.Your feedback, and ideas for new Handlers are always welcome.Repo: https://github.com/yuriskinfo/Fortinet-tools/tree/main/Fortianalyzer-handlers Thanks.

Yurisk · 11-28-2023

Good day everyone, hope you all are doing well. I created a Github repo where will collect scripts, tools, anything that helps in daily work with Fortinet products.So far put a collection of Fortigate automation stitches (21) you may find helpful. Ne...

Yurisk · 05-23-2023

Good day everyone, was wondering - I am reading Fortinet documentation a lot (here in community "Tips", admin guides etc.) and sometimes stumble on incorrect/outdated or plain typo/incorrect info. Is there a way to alert someone on that?Thanks E.g. h...

Yurisk · 03-16-2023

Good day everyone, here is a guide I wrote to harden your Fortigate VPN SSL in additional ways.Your feedback is welcome and will be included in the updates.Linkedin: Fortigate VPN SSL Hardening Guide Thanks P.S. Tried to upload the original PDF but s...

Yurisk · 12-30-2024

I'd look at the routing table of FGT and especially at the resolving of the remote peer IPs. My guess would be that the recursive resolving is involved and the destination overlap occurs.

Yurisk · 12-30-2024

What is the current vendor and model of your Core router ?

Yurisk · 12-23-2024

Moving VPN SSL from WAN to Loopback:Create Loopback interface with internal IPChange SSL VPN Settings to listen on this Loopback interfaceCreate VIP portforwarding for SSL VPN port Create policy WAN -> Loopback allowing SSL VPN port by using the crea...

Yurisk · 12-23-2024

Back to what you are trying to do - it is NOT possible to run iperf with Fortigates as client and server on both ends.

Yurisk · 12-23-2024

Not an answer, just an observation - in my many years with Fortigates I am yet to recall the case when it changed ifindex dynamically and not after upgrade/config restore from another device or other config manipulations. By ifindex we talk about sho...

User Statistics

User Activity

Fortigate fnsysctl command options with examples

Collection of Fortianalyzer Handlers

Collection of Fortigate automation stitches

Is there a way to make feedback on the official documentation?

Fortigate SSL VPN Hardening Guide

Re: Fortinet FGT61F (v7.4.4 build2662) has 2 IPSEC tunnels but only 1 remains up at a time

Re: SECURITY

Re: SSL VPN Loopback Address

Re: Run the diagnose traffictest between two Fortigate

Re: SNMP ifIndex Persistent Command for FortiGate Firewall

Re: FortiOS 6.2.9 list files in filesystem CVE-202...

Collection of Fortianalyzer Handlers

Re: Netflow

Fortigate built-in iperf tool helps a lot in netwo...

Re: Detailed log of configuration changes

Re: Automation Configuration Receive SSL VPN E-mai...

Re: Fortianalyser MFA

Re: How to see if DNS server send a NXDOMAIN error

Re: Block country but allow specific IP addresses

Re: Separate anti DDoS quarantines

Super User