myITmicroblog

by Efren Teruel Dominguez     He tenido la suerte y el privilegio de poder trabajar, primero como asesor técnico, y luego como traductor al español, de la obra de un colega y amigo mío: https://lnkd.in/gbkqjTT FortiGate - Guía de resolución de problemas Fortigate, a Troubleshooting Guide es un excelente trabajo de Hubert Wisniewski , aprovechando sus muchos años de experiencia en el sector de la seguridad y la formación. Conté con su confianza para este proyecto, que llevó bastantes horas y muy contento de que esté ya disponible a la venta a través de la plataforma de Amazon. Se aceptan críticas constructivas! :D ---------------------------------------- I have had the privilege and luck of being able to work, first as technical reviewer, and then as translator, for my friend and colleague Hubert's guide: https://lnkd.in/gbkqjTT FortiGate - Guía de resolución de problema Fortigate, a Troubleshooting Guide is an excellent work by Hubert Wisniewski , using his many...

SD-WAN is very hot topic and as you may know the functionality is available on FortiGate platform for free. There are huge differences between versions as new features are added or modified. You need to check documentation for a particular version as sometimes the object names are different. The post is valid for version 6.2.  I already published one post about the same topic but it was for version 5.6. Since then, adding VPN has changed and I would like to show the main differences. As per below diagram, we have 2 sites with 2 FortiGate firewalls: FGT1 and FGT2. There are two servers on the left site: - Linux - 10.0.1.20 (ssh) - Windows - 10.0.1.10 (http) There is a requirement to separate traffic to these two servers, but in case of any service degradation or failures, we can use all available links.   We start by enabling SD-WAN (remember - you can have 1 SD-WAN interface per device/VDOM!):    Click "+Create New" and then select "+VPN":     You do not n...

SD-WAN became very popular topic in recent months. Many vendors have developed their own solution - including Fortinet. You can configure SD-WAN starting from version 5.6. The solution is totally free, it doesn't require any additional license. It is also available on 6.0 and 6.2 but there are some differences in functionality and configuration steps. I will cover them in a separate post. Before we jump to the configuration steps I'd like to be sure you understand the concept of SD-WAN. The main goal is to have the ability to load-balance or just send specific type traffic using a specific path.  It sounds similar to what you can achieve by using Equal Cost Multipath (ECMP) and policy-based routing (PBR). SD-WAN gives you something else - the ability to the perform load balancing by checking following three parameters: packet loss, jitter and delay.  Let's' get started with version 5.6 and in this post I'll describe configuration steps for SD-WAN with two IPsec ...