This is usually what I look like when updating any type of Fortinet device’s firmware….I’m sure I’m not alone!
Consulting Stories
Session Based Network Issues on 7060E?
So if you are running a 7060E chassis in your enterprise and you are suddenly experiencing strange behavior relating to session based traffic, disable the TCP-Options setting in config global. This is on by default and enables the the client and server to negotiate MSS, window scaling, selective acknowledgements, timestamps, and NOP. These are completely […]
I love what I do
Technology is amazing. It drastically reduces the size of the world. I love that I get to work with it every day. It’s just a little before 1 AM here in Montgomery, Alabama. I just finished assisting a friend in Saudi Arabia with their FortiGate issue. This friend I met through this site. Think about […]
Policy Based IPSec and NAT
Think of the little things This is going to be a quick guide on things to check when your Policy based IPSec tunnels decide to not work properly with NAT enabled. Have this client, they were getting ready to migrate a bunch of IPSec tunnels from one of their client’s firewalls. The firewall that was […]
Route based VPN is WAY better than Policy based VPN
I am in the middle of helping a client absorb one of their clients. This involves moving all of the client’s client’s (redundant I know) IPSec tunnels into my clients FortiGate. This is all fine and dandy. I do IPSec tunnels all the time. Unfortunately for me though, my client’s client utilizes policy based VPN’s […]