top of page
Search


FortiOS Feature Highlight: Let's Encrypt Certificate
FortiOS 7.0 has been released! Now, I know most of us are very cautious about this because in FortiOS .0 means ".NO you shall not upgrade...

Matt Sherif
Mar 31, 20212 min read
Â
Â
Â


A madman's thoughts: Azure IP/Routing weirdness
Cloud, what an interesting place. It enables us to deploy workloads faster than ever, and it has also expanded the "attack surface" by a...

Matt Sherif
Feb 11, 20214 min read
Â
Â
Â


Implementation Guide: FortiGate SSL VPN with Microsoft Azure SAML 2FA
As a follow up to a previous blog post, we walk through this configuration, and hopefully shed some more light on how this is doen. Thank...

Matt Sherif
Feb 10, 20211 min read
Â
Â
Â


Follow up: Let's Encrypt with FortiGate - Now with VDOMs!!!
It's been well over a year since I wrote the original "Let's Encrypt with FortiGate", and while my mediocre python code proved popular,...

Matt Sherif
Dec 14, 20203 min read
Â
Â
Â


A madman's thoughts: FortiGate to ASA VPN
I've done enough of these 'A madman's thoughts' for any of my older readers to see that these are usually a story of me overcoming a...

Matt Sherif
Nov 11, 20207 min read
Â
Â
Â


SSL VPN Host Check for Registry Key
VPN, dial in, or whatever you want to call it. Since before the internet has been around, remote access to company networks has been...

Matt Sherif
Oct 17, 20202 min read
Â
Â
Â
Troubleshooting a device that won't add to FortiManager
I was working in the lab this morning and wanting to build an ADVPN infrastructure with real FortiGates (VMware server is running out of...

Matt Sherif
Sep 4, 20202 min read
Â
Â
Â
FortiGate SSL VPN Integration with G-Suite MFA using SAML
My colleague from Denmark, Kim Frellsen did an excellent write up on how to use G-Suite as your MFA with FortiGate SSL VPN. I hope you...

Matt Sherif
Sep 4, 20201 min read
Â
Â
Â
FortiGate SSL VPN Integration with OKTA MFA using SAML
My colleague from Denmark, Kim Frellsen did an excellent write up on how to use OKTA as your MFA with FortiGate SSL VPN. I hope you enjoy...

Matt Sherif
Aug 31, 20201 min read
Â
Â
Â
FortiGate SSL VPN with Azure MFA using SAML
In a previous post we talked about setting up FortiGate SSL VPN authentication and Azure MFA using Azure MFA extension for NPS, which...

Matt Sherif
Aug 13, 20204 min read
Â
Â
Â
FortiGate SSL VPN with Azure AD MFA
I have been working with a number of customer recently, and one question kept recurring "We have a tight integration with Azure/Azure AD...

Matt Sherif
Aug 10, 20207 min read
Â
Â
UltraNote: Exporting and Importing VPN Configuration in FortiClient VPN
I've had a number of customers ask me if there's any way to use CLI commands to export the free FortiClient VPN configs. In my digging I...

Matt Sherif
Jul 7, 20201 min read
Â
Â
Â
UltranNote: SCP config from FortiGate
Having administered a number of networking/sever platforms, SCP has become my go to for secure copying of small files to *nix based...

Matt Sherif
Jun 23, 20201 min read
Â
Â
Â


Crazy Man Rambles: The post that might get me kicked off WIX
Update 6/11/2020: WIX support reached out to me last night and told me they were investigating. As of 9:30 AM Eastern this remains...

Matt Sherif
Jun 10, 20206 min read
Â
Â
Â


A look at FortiManager SD-WAN Orchestrator
At Fortinet's virtual Accelerate event they made quite a few announcements. One that really stood out to many was the FortiManager SD-WAN...

Matt Sherif
Jun 9, 20201 min read
Â
Â
Â
UltraNote: Proxy based policies and UTM get certificate error when browsing certain sites
This came to my attention over the weekend when a customer reached out and mentioned that they had called TAC because their UTM policy...

Matt Sherif
Jun 1, 20201 min read
Â
Â
Â


Using iPerf to measure throughput to FortiGate
I was perusing my friend and colleague Manny Fernandez's blog site today and I noticed a really cool article, I couldn't pass this one...

Matt Sherif
May 14, 20201 min read
Â
Â
Â


Managing FortiSwitches using a Layer 3 FortiLink connection
A customer recently reached out to me to ask about a specific design they had in mind. Last year they had purchased a pair of switches...

Matt Sherif
May 3, 20205 min read
Â
Â
Â


A Madman's thoughts on upgrading a Gen 8 NUC to ESXi 7.0
In a previous post, I talked about my encounter with trying to get ESXi 6.7 installed on a NUC Gen 10. This time, I wanted to upgrade the...

Matt Sherif
Apr 13, 20203 min read
Â
Â
Â


UltraNote: FortiClient SSL VPN Failure Stages
UltraNotes are just quick tech notes for reference. This UltraNote covers the FortiClient SSL VPN failure stages and what they mean. Big...

Matt Sherif
Mar 23, 20201 min read
Â
Â
Â
bottom of page
