how2itsec

If you are using Splunk as your SIEM you can try to detect attacks against your FortiGate firewalls by using the following SPL query: index...

There are rumors about a vulnerability in Fortinets FortiGate firewalls where you may bypass authentication on their admin interfaces. Affec...

If you want to change the MTU of your FortiGate HA-Cluster by using the FortiManager, think about removing the HA monitored interface for th...

If one of your kali linux systems fails to update some packages like davtest, dbd, impacket, mimikatz etc using sudo apt-get update with ...

You can either use the GUI of the FortiGate to list all certificates, or use the CLI. Either using the commands: Using the "get...

Recently I discovered something after updating a FortiGate cluster, which I intensively monitor, not only via working monitoring queries, bu...

If you are using the Skybox ( https://www.skyboxsecurity.com/ ) solution for your environment, during the initial setup there might be an is...

The FortiGate uses OFTP (Fortinets proprietary Optimized Fabric Transfer Protocol, not Odette File Transfer Protocol ) to transfer data betw...

Fortinet has released PSIRT FG-IR-19-184 ( CVE-2019-6697 ) about a vulnerability in FortiOS of the FortiGate firewall. A DHCP packet may c...

When setting up VPN-tunnel from an Apple iPhone or iPad running iOS using IPSec with IKEv2 you need to know, which IPSec proposals the iPh...

Fortinet released two "Customer Support Bulletins" (check fortinet support portal ) regarding a possible issue with uninterruptibl...

I have found a vulnerability in all FortiOS versions, including the current 5.4/5.6/6.0/6.2 branches. The issue has been fixed in 6.0.3/6.2....