Home

Container use continues to grow, and Kubernetes is the most widely adopted container orchestration system, managing nearly half of all container deployments. Nearly every enterprise on the planet is at some stage in their Kubernetes journey. Kubernetes’ greatest value in the enterprise is achieved ...

I am a BIG supporter of Central NAT . I believe it is in-line with the present day firewall platforms. Even if you use Policy NAT (the original way on FortiOS) or Central NAT you normally want bidirectional NAT'ng, that is SNAT and DNAT. DNAT / VIP There is a feature on the CLI of the VIP ...

I am currently running FortiOS 6.4 on this FortiGate. The use case is to have an out-of-band interface that points to a separate routing table or in this case, a VRF which stands for Virtual Routing and Forwarding. In my scenario I will create one interface port22 as the out-of-band interface. ...

Today, a customer asked me about selectively assigning FortiTokens to AD users using FortiAuthenticator. In this use case, I am going to use an AD group Token-Users to auto-assign FortiTokens to and another group, Non-Tokens which will be used to authenticate users to FortiGate remote access VPN ...

Realms are a feature on the FortiGate that I have written about in the past, but I never really did a detailed dive into them and how and when to use them. When a customer tells me they want to assign different policies to different users connecting to the FortiGate via VPN, my first thought is realms ...