Phase 1 parameters This chapter provides detailed step-by-step procedures for configuring a FortiGate unit to accept a connection from a remote peer or dialup client. The Phase 1 parameters identify the remote peer or clients and supports authentication through preshared keys or digital certificates. You can increase access security further using peer identifiers, certificate distinguished […]
Tag: fortinet fortigate
Extended-UTM-Log Enable Error
I received the following question through my consulting form: Question: when configuring application list, setting the “extended-utm-log” the I got the following error: burgfg01 (list) $ edit “RogersStandard” new entry ‘RogersStandard’ added set extended-utm-log enable burgfg01 (RogersStandard) $ set extended-utm-log enable command parse error before ‘extended-utm-log’ Command fail. Return code -61 ——— Please advise. Thanks […]
Fortinet Acquires AccelOps
In case you guys didn’t know already Fortinet has bought, or acquired, or whatever we want to call it,AccelOps. Here is an excerpt from their blog post. One of the biggest security challenges organizations face is being able to see enough of the network to identify today’s most advanced, multi-vector threats. Ideally, you need to […]
A Wrap Up Of HITB Amsterdam 2016 Conference
23 May 2016 marked the first day of the annual security conference organized by Hack In the Box. As usual, the event took place in Amsterdam, Netherlands. This year I had the privilege to attend. HITB is one of the top-notch technical conferences, where elite security researchers from around the world gather to share their […]
FortiClient Monitoring and Quarantine
FortiClient Monitoring and Quarantine FortiClient monitoring and quarantine is currently only supported by FortiClient 5.4 for Windows. FortiSandbox uses a single signature to identify tens of thousands of variations of viral code. A FortiSandbox can send frequent, dynamic signature updates to a FortiGate and FortiClient, which allows files to be blocked before they are sent to […]
Pushing signatures to AntiVirus
Pushing signatures to AntiVirus When a FortiSandbox discovers a malicious file, it can create a signature that is sent to the FortiGate, to supplement the AntiVirus signature database. This signature can be used to block that file from entering the network again, and to prevent duplicates of the file being sent to the FortiSandbox in […]
FortiSandbox Integration
FortiSandbox Integration The following improvements have been made to how sandboxing, using either a FortiSandbox Appliance or FortiCloud Sandboxing, integrates with a FortiGate unit. See the Cookbook recipe Sandboxing with FortiSandbox and FortiClient. Connecting to a FortiSandbox 1. Go to System > External Security Devices and select Enable Sandbox Inspection. 2. You can either select […]
Web Application Firewall
Web Application Firewall Go to Security Profiles > Web Application Firewall. From here you can customize the default Web Application Firewall profile, or create new profiles, to protect against a variety of web-based threats. Web Application Firewall profiles can be created with a variety of options (Signatures and Constraints), similar to other security profiles. You […]