Have you ever configured or set up a FortiGate and found yourself scratching your head because something isn’t working? You’re not alone 😊 Most of the issues I’ve experienced whether in production or in the lab aren’t caused by bugs, hardware problems, or image versions. They usually come from misunderstanding how NAT, routing, and firewall […]
NAT vs Transparent mode in Fortigate Read More »
In today’s world, cybersecurity threats are more sophisticated than ever. Simply relying on a traditional stateful firewall is no longer enough. That’s where FortiGate Next-Generation Firewalls (NGFW) come in, offering advanced inspection and modern threat protection to keep our network secure. FortiGate combines traditional firewall capabilities with advanced security features such as deep packet
Back to FortiGate: Features, Deployment, and Best Practices Read More »
Today, I’m trying to refresh the deployment for Hub and Spoke ADVPN setup in FortiGate SDWAN Deployment. Let’s Start…. I. Creating a device groupIt is a best practice to use Device Groups as the installation target instead of the firewall itself. The reason behind this is that if you ever need to remove the FortiGate
FortiGate SD-WAN Deployment using the FortiManager for HUB and Spoke ADVPN Setup Read More »
In day 2, I focused on Equal Cost Multi-Path (ECMP) of Fortigate but let me dig deep into the design – architecture aspect. first, this post is just my personal view and unlocking further about the ECMP. ECMP job is pretty simple. Its job is to move packets from a source to a destination using
Equal Cost Multi-Path(ECMP) Design – Architecture Aspect Read More »
Key Takeaway FGCP provides fast, reliable High Availability One logical firewall with a ready standby Designed for seamless failover and minimal disruption https://youtu.be/Gp7_WIDFCBw
FortiGate Clustering Protocol (FGCP) Read More »
Dual-role SDWAN connectivity and security (Next-Generation Firewall) Network Virtual Appliances can be deployed in the Virtual WAN hub. These virtual appliances can be used to inspect all North-South, East-West, and Internet-bound traffic. Azure vWan comes into play when you go cross region, multi-region, doing dynamic routing across region this is where vWan comes in to
[IN PROGRESS] Fortinet SDWAN and NGFW in vWAN Read More »
Time to brush up on Microsoft Azure, especially since I’m preparing for the AZ-900 certification. While searching for learning resources, I stumbled upon Adam Marczak’s YouTube videos. They were a lifesaver—explaining complex Azure concepts in a way that even beginners like me could grasp. As I began exploring, I realized I need to see things
My Journey into Microsoft Azure Read More »
I’d like to tell you a story about ZTNA. Imagine your company is like a big castle. Inside, there are many rooms, each with important stuff, like treasure, secrets, or your favorite toys. But now, some people want to work from far away, outside the castle. How do you let them in without letting strangers
Fortigate Zero Trust Network Access (ZTNA) Read More »
If you ask a network engineer about “resiliency,” you’ll often hear about redundant links, fast OSPF or BGP convergence, and high-availability clusters. But what if that’s only a tiny piece of the puzzle? What if true resiliency isn’t about the network never breaking, but about what happens—or doesn’t happen—when it inevitably does? Inspired by a
Network Resiliency Is NOT About Redundancy Read More »
Leadership is an attitude. Material: https://www.wgu.edu/blog/successful-leadership-attitudes-behaviors2006.html
Leadership Is Not a Position Or a Title Read More »
