I don’t really do any automation or DevOps in my job but in the interests of tinkering I have got as far as writing a couple of FortiGate API scripts so I thought I’d share the process and scripts here. The first script takes a backup of the FortiGate. It could be modified to encrypt the backup and then email it and I may well […]
I have been running up various labs for work, generally to test a feature or investigate a certain issue, and have found my desire to do any discretionary tinkering has decreased somewhat. When I’m not doing that I find I have to learn something new or occasionally relearn something old. (I think I have now forgotten more than I know) To this end, I recently […]
I wanted to try out Cisco Duo MFA using SAML and loyal readers of this blog will know in posts passim I set up authentication for a Palo Alto firewall administrator using SAML and ADFS so it seemed a natural progression to try this using Microsoft’s Entra ID (formerly Azure AD) with Cisco Duo. Microsoft Entra ID, which will act as the SAML primary authentication […]
If that title makes you think of a pixelated hedgehog who has acquired two new sidekicks then you’re probably as old as me. However, SONIC is an open source networking operating system originally developed by Microsoft and its command line will be familiar to anybody who has worked with Cisco. I used it to play with leaf and spine networking. This fine gentlemen provides a […]
Cyberratings.org, a non-profit technical testing organisation, recently released a report on eight NGFW firewalls. Seven of the vendors’ products tested received a recommended rating and one, Cisco, received a caution for their Firepower Threat Defense product . CyberRatings Announces Enterprise Firewall Test Results – CyberRatings The full report is behind a paywall but more insight is provided here: https://www.sdxcentral.com/articles/analysis/ciscos-enterprise-firewall-receives-caution-rating-from-cyberratings/2024/06 I happened on this through an […]
The cloud in question was literal as I recently attended a SASE event at Palo Alto’s London offices which are in the cloud(s). Loyal readers will remember my picture of the view from Fortinet’s London office but Palo’s office is even higher. I have a smart phone which could have probably filtered, cropped and improved the quality of these images but needless to say I […]
They say write about what you know. Even if what you know about is reimaging Cisco firewalls? They probably didn’t mean write about that but never mind we’ll press on and not hold our breaths for the movie to come out. For reasons I won’t go into I recently had to re-image a Cisco FMC 1600 and two 3100 series FTDs. My main takeaway from […]
I have suppressed the urge to write an ‘is it just me?’ piece for some time now. However, what’s the point of having a barely-read blog if you can’t indulge yourself once in a while? When did GUIs stop being practical portals to the functions you need and become abstruse hieroglyph-strewn gateways? Do GUI designers hark back to happy days playing D&D where a treasure […]
I was recently involved in a project to roll out FortiGate SDWAN on what sounded like an almost text book scenario: two Hubs and two Branches. Obviously, I won’t post the client’s configs in this post but I will attach some configs from a lab that I created to generate configurations and test generally. (Please review with caution. I did a lot of tweaking and […]
If you were a Big Friendly Giant and wanted fast BGP convergence,you might well investigate BFD. (OK, now I have justified my alliteration we can move on) In the previous post, we had a resilient BGP topology which I will remind us of here: When the FG1 Fortigate was shutdown it took BGP between two and three minutes to re-route traffic through FG2. Popular wisdom […]