-
FortiWeb installation on Proxmox and migration from VMware
Proxmox is gaining a lot of traction in recent years, not just because it’s a great product and there isn’t nearly enough content out there about it. To help the people after me, and because I did this for work anyway, I created a short video on how to install FortiWeb on Proxmox and migrate…
-
Connecting to an HA FortiClient EMS cluster without an external load balancer
Do you want redundancy? Don’t answer that question; the answer is “Yes!” This means you want your FortiClient EMS deployment to be redundant, and this gives you the problem of how to handle the FortiClients and FortiGate connection to your HA EMS nodes if you don’t have an external load balancer. Well, dear reader, I’ve…
-
FortiClient EMS certificate management for VPN, full SSL/TLS inspection, and 802.1X
Certificates are ubiquitous in our daily life, whether we realize it or not, and most people fall into one of two camps when it comes to them: Both sides have valid points, but we can all agree that we need them, be it for securing web traffic, enabling strong authentication or to get rid of…
-
The FortiGate Ansible best practices baseline configurator
Back when I initially published my FortiGate best practices baseline, I had already planned to create configurators to more easily deploy what the baseline recommends. Due to time constraints, this wasn’t possible, however. I have now gotten around to taking the first step by publishing the FortiGate Ansible best practices baseline configurator on GitHub. The…
-
FortiGate onboard automation: Stitches, auto-scripts, batch mode
A FortiGate comes with several tools built in to help us with automation and responding to events. In this post, I want to explore these options a bit more and show what you can do with them. So, dear reader, let’s see what we can do with these tools! The setup: Automation stitches The biggest,…