top of page
Search


UltraNote: Let's Encrypt certs in FortiOS 7.0.2
To stay sharp, I find myself rebuilding my lab from time to time. This latest run I did so with FortiOS 7.0.2. One of the first things I...

Matt Sherif
Nov 8, 20212 min read
921 views
0 comments


Using physical FortiTokens with Azure AD
Multi-Factor Authentication (MFA), something that we should all be doing more of, yet I don't see enough of it! Without going too far...

Matt Sherif
Oct 29, 20213 min read
320 views
0 comments


UltraNote: SAML SSL VPN settings changes
I spent the better part of 2 hours chasing this down, and it frustrated me. In my lab, I am running 7.0.2 and was rebuilding my SSL VPN...

Matt Sherif
Oct 27, 20211 min read
536 views
0 comments


Let's Encrypt Fun (NOT) - Yet another workaround
Note: this article expresses my opinions, however incorrect you may feel they are. They don't reflect the opinions of anyone else or any...

Matt Sherif
Oct 26, 20213 min read
1,129 views
0 comments


Configuration Guide: FortiAuthenticator as Google WorkSpace SAML IdP
We've written a number of articles showing how to use Azure as your SAML IdP, and I've collaborated with my friend, Kim Frellsen on how...

Matt Sherif
Oct 22, 20214 min read
1,420 views
0 comments


A Madman asks: Why aren't you reading the release notes?
With the release of new firmware, come new release notes. And while I try to remain technologically agnostic, I'm very aware that this...

Matt Sherif
Oct 21, 20212 min read
87 views
0 comments


FSSO & Microsoft Updates, headaches, and solutions
I was contacted by a customer who ran into an issue deploying the FSSO collector agent on a member server, and they were having...

Matt Sherif
Oct 15, 20212 min read
1,077 views
0 comments


A madman's thoughts: the NSE8 exam
As some of you may know, I underwent the NSE8 Practical Exam in June of 2021. After spending the better part of 2 years studying, passing...

Matt Sherif
Oct 8, 202110 min read
1,681 views
0 comments


Let's Encrypt Fun (NOT) - a workaround
Note: this article expresses my opinions, however incorrect they may be. They don't reflect the opinions of anyone else. Update:...

Matt Sherif
Oct 2, 20214 min read
3,677 views
0 comments


UltraNote: OSPF MTU when upgrading from 6.4 to 7.0.1
I am fortunate to have access to enough FortiGear that I can have a lab set up and not impact production. This allows me to test out...

Matt Sherif
Jul 30, 20211 min read
971 views
0 comments


FortiOS Feature Highlight: 3rd party Dynamic DNS
When I was out for my run this morning, I found myself thinking about how we used to do things, and how far we've come as an industry,...

Matt Sherif
Apr 13, 20213 min read
558 views
0 comments


FortiGate VLANs: tagged and untagged VLANs on the same physical interface
I have come across this question quite a bit lately, and thought it may be helpful to post a quick how to. In this post we'll take a look...

Matt Sherif
Apr 8, 20212 min read
6,684 views
0 comments


Let's Talk about Security: Recent FBI-CISA Joint statement
As I am sure many of you have already seen the FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities some of you...

Matt Sherif
Apr 5, 20213 min read
488 views
0 comments


UltraNote: APs don't reconnect after upgrading to 7.0
I have been running 7.0 on one of my lab units since the beta, but was strictly focus on the FortiOS feature set. With GA happening last...

Matt Sherif
Apr 3, 20212 min read
854 views
0 comments


FortiOS Feature Highlight: API preview
If you have a more traditional networking/security model like me, you may have seen the wave of automation/devops/netops in a bit of a...

Matt Sherif
Mar 31, 20211 min read
424 views


FortiOS Feature Highlight: Let's Encrypt Certificate
FortiOS 7.0 has been released! Now, I know most of us are very cautious about this because in FortiOS .0 means ".NO you shall not upgrade...

Matt Sherif
Mar 31, 20212 min read
6,152 views
0 comments


A madman's thoughts: Azure IP/Routing weirdness
Cloud, what an interesting place. It enables us to deploy workloads faster than ever, and it has also expanded the "attack surface" by a...

Matt Sherif
Feb 11, 20214 min read
475 views
0 comments


Implementation Guide: FortiGate SSL VPN with Microsoft Azure SAML 2FA
As a follow up to a previous blog post, we walk through this configuration, and hopefully shed some more light on how this is doen. Thank...

Matt Sherif
Feb 10, 20211 min read
18,159 views
0 comments


Follow up: Let's Encrypt with FortiGate - Now with VDOMs!!!
It's been well over a year since I wrote the original "Let's Encrypt with FortiGate", and while my mediocre python code proved popular,...

Matt Sherif
Dec 14, 20203 min read
2,648 views
0 comments


A madman's thoughts: FortiGate to ASA VPN
I've done enough of these 'A madman's thoughts' for any of my older readers to see that these are usually a story of me overcoming a...

Matt Sherif
Nov 11, 20207 min read
317 views
0 comments
bottom of page