On github, you can download a Firewall Inspection Tester. This one is tested with Ubuntu (tested with 18.04 and 20.04).You can download it at: https://github.com/gahlberg/fit?search=1 Here the commands on openSUSE Leap 15.5: cd /home zypper install vim git python3-pip pip3 install click==6.6 requests==2.10.0 selenium==2.53.6 requests-toolbelt==0.7.0 git clone https://github.com/gahlberg/fit.git cd ./fit chmod 700 repeatFit.py chmod 700 […]
Author: Philip
set source-ip
Where can “set source-ip” be used.FortiGate 60E 7.0.5 config system dns set source-ip 0.0.0.0 config system sflow set source-ip 0.0.0.0 config system netflow set source-ip 0.0.0.0 config system snmp user edit “snmp-user” set source-ip 0.0.0.0 config system fortiguard set source-ip 0.0.0.0 config log fortiguard setting set source-ip 0.0.0.0 config log fortianalyzer setting set source-ip 0.0.0.0 […]
Just for fun – FortiGate HA 4-node cluster
FortiGate 100D v6.2.10 build1263
Fortinet NSE7 6.4 CLI
For my NSE7 6.4 preparation, I made a summary of the CLI commands.In the mean time, you can take a NSE7 7.0 exam, but the CLI commands won’t change much. CH. 01: SECURITY FABRIC diagnose sys csf upstream diagnose sys csf downstream config system csf set configuration-sync local end diagnose sys csf neighbor list diagnose […]
FortiAnalyzer query examples
Log View ==> FortiGate ==> Application Control (apprisk=high or apprisk=critical) and -action=block
FortiGate / FortiManager TCL script example
Creating 150 address with a TCL-script #! proc do_cmd {cmd} { puts [exec “$cmd\n” “# ” 15] } set numhosts 150 do_cmd “config firewall address” for {set i 12} {$i <= $numhosts} {incr i} { do_cmd “edit host-$i” do_cmd “set subnet 192.168.21.$i/32” do_cmd “next” } do_cmd “end”
FortiGate CLI
get get router info routing-table all get router info routing-table database get router info routing-table ospf get router info ospf neighbor get system arp get system arp | grep 192.168.1.10 get system source-ip status get ipsec tunnel list get vpn ipsec tunnel details execute execute router clear ospf process execute ping 8.8.8.8 execute disk FortiGate-600D […]
openSUSE serial console
How to start a serial console connection to for instance a FortiGate firewall. screen /dev/ttyS0 9600
Windows 10 DNS change registry with CLI
How to manually change the DNS setting in Windows 10, with CLI.I created two small CMD-files, one for Google DNS, and one for a local DNS, and placed them on my Desktop. The “reg add” line all on 1 line. Replace the Interfaces with your own. Google DNS @ECHO OFF CLS reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1x0x0x6x-3×78-4×79-9x3x-87x8766xxx7x} /v […]
Enable SSH
Example to enable SSH. configure terminal ip domain name network.lan crypto key generate rsa general-keys modulus 2048 ip ssh version 2 end configure terminal line vty 0 15 login local transport input telnet ssh end configure terminal service password-encryption enable password 0 PassWord username UserName privilege 15 password 0 PassWord end wr