EVPN Route Types: The Practitioner’s Field Guide
Manny FernandezEveryone learns EVPN as "type 2 carries MACs and type 5 carries prefixes," then gets wrecked the first time a...
Read More
XDR vs. SOAR: Is Your Tech Stack Redundant or Resilient?
Manny FernandezThe short answer. XDR and SOAR overlap on automated response and enrichment. They do not overlap on scope. XDR automates...
Read More
The Clock Is Ticking: What CA/B Forum’s Ballot SC-081v3 Means for the Future of Web Security
Manny FernandezIf your team manages SSL/TLS certificates using spreadsheets, calendar reminders, or manual renewals, consider this your official wake-up call. In...
Read More
Beyond the Prompt Series: Multimodal Models: Teaching the Transformer to See
Manny FernandezVision encoders, projectors, and the 2026 move from bolt-on bridges to native multimodality. A multimodal model is an LLM that...
Read More
The Certificates Your FortiGate Ships With, and What to Do With Them
Manny FernandezEvery FortiGate arrives with a populated certificate store. Nobody put them there for decoration. Some are load-bearing device identity you...
Read More
The SSH Key Fallacy: Why Static Keys Are Not Access Control, and How to Fix It With an SSH Certificate Authority
Manny Fernandez1. Executive Summary Objective: Moving from passwords to SSH public keys feels like a security upgrade, and in one narrow...
Read More
Wake-on-LAN from the FortiGate: Firing a Magic Packet with execute wake-on-lan
Manny FernandezYou need to power on a box that is sitting dark on a remote segment. A lab host, a NAS,...
Read More
Deploying a FortiGate as an IPsec IKEv2 Remote-Access VPN Concentrator for Linux Clients with FortiToken MFA
Manny Fernandez1. Title & Executive Summary Objective: This guide stands up a single FortiGate as an IPsec IKEv2 dialup VPN concentrator...
Read More
Securing Email with DNS: A Practitioner’s Guide to SPF, DKIM, DMARC and the Modern Authentication Stack
Manny FernandezExecutive Summary Objective This guide walks you end to end through the DNS-published controls that authenticate email and stop domain...
Read More
Decoding SMTP Errors and Mail Failure Messages: A Practitioner’s Diagnostic Guide
Manny Fernandez1. Executive Summary Objective: This guide turns cryptic SMTP reply codes, enhanced status codes, and bounce (NDR/DSN) messages into a...
Read More
A little TCP story…
Manny FernandezToday I was on LinkedIn in the AM to monitor for friends moving companies etc. And I came across a...
Read More
HTTP Error Messages Decoded: A Practitioner’s Field Guide to Status Codes and What They Actually Mean
Manny Fernandez1. Executive Summary Objective. This guide turns the three-digit HTTP status code sitting in your logs, your browser dev tools,...
Read More
Deploying FRRouting on Ubuntu 24.04 LTS: Production BGP and OSPF Routing
Manny Fernandez1. Executive Summary Objective. This guide turns a stock Ubuntu 24.04 LTS host into a fully functional software router using...
Read More
Building a Stateful Host Firewall and NAT Gateway with nftables
Manny Fernandez1. Executive Summary Objective: This guide walks you through building a complete, production-grade firewall on modern Linux using nftables: a...
Read More
FortiGate VDOM Deep Dive: Designing, Deploying, and Operating Multi-VDOM on FortiOS
Manny FernandezNote: Version target: FortiOS 7.6.x on an NP6/NP7-class FortiGate. CLI is consistent from 6.2 onward except where flagged. Where a...
Read More
Auditing Web Servers with Nikto 2.6.0: A Practitioner’s Field Guide to Configuration Scanning
Manny Fernandez1. Executive Summary Objective: This guide takes you from a clean host to a repeatable, reportable Nikto workflow you can...
Read More
Beyond the Prompt Series: Large Language Models – The Autoregressive Engine
Manny FernandezHow next-token prediction became the core of applied AI, and the 2026 shifts (MoE, reasoning, long context) that actually matter...
Read More
How CDNs Operate: A Practitioner’s Guide to Edge Caching, Request Routing, and Cache Control
Manny Fernandez1. Executive Summary Objective. This guide explains, at the DNS-record and HTTP-header level, exactly what happens when a Content Delivery...
Read More
Deploying FortiGate cFOS: From a Docker Image to a Kubernetes Firewall Pod
Manny Fernandez1. Executive Summary Objective: This guide takes a Fortinet-supplied Container FortiOS (cFOS) image, validates it standalone in Docker, then promotes...
Read More
FortiGate ADVPN: Classic (1.0) vs. Edge-Discovery (2.0) for Dynamic Spoke-to-Spoke SD-WAN
Manny Fernandez1. Executive Summary Objective. This guide explains what changed between ADVPN 1.0 and ADVPN 2.0 on FortiGate, then walks two...
Read More
