Tuning the FortiOS IPS Socket Buffer: A Deep Dive into socket-size
Manny FernandezExecutive Summary Objective: Explain, in real operational depth, what the FortiOS ips global socket-size setting actually does, why it exists,...
Read More
FortiOS Automatic Restart of Node.js to Prevent Conserve Mode
Manny FernandezThis enables automatic restart of FortiOS's Node.js process (the "node" daemon), which handles things like Report management, FortiView, Security Fabric/CSF,...
Read More
Troubleshooting IPSec VPN tunnels in FortiGate Firewalls 2026 Version
Manny FernandezThis is an updated, expanded version of an older Quick-Tip. Same goal as always: get a VPN tunnel talking again...
Read More
Deploying OpenSpeedTest on Ubuntu 24.04 LTS for Internal Network Speed Testing
Manny FernandezExecutive Summary Objective: This guide walks through deploying OpenSpeedTest, a free and open source, self-hosted HTML5 network speed test, on...
Read More
macOS CLI Networking Cheat Sheet
Manny FernandezIf you troubleshoot Macs on a network for a living, you already know the GUI only gets you so far....
Read More
Disabling the FortiConverter Nag Message on Enterprise Bundle FortiGates
Manny FernandezAs you know, the Enterprise Bundle includes the following (IPS, AI-based Inline Malware Prevention, DLP, App Control, Adv Malware Protection,...
Read More
Deploying Nuclei on Ubuntu Server
Manny FernandezExecutive Summary Objective This guide walks through a clean, repeatable installation of ProjectDiscovery's Nuclei vulnerability scanner on Ubuntu Server, covering...
Read More
IP Addressing and VLSM Made Simple for Beginners
Manny FernandezSubnetting has a reputation for being scary. It isn't. Underneath the notation and the math, it's just a way of...
Read More
DHCP Server Health Checks on macOS with dhcping
Manny Fernandez1. Title & Executive Summary Objective dhcping sends a single targeted DHCPREQUEST or DHCPINFORM packet at a specific DHCP server...
Read More
Replaying PCAPs in Scapy: Packet Injection, Address Rewriting, and Timing-Accurate Retransmission
Manny FernandezObjective: This guide shows how to use Scapy to load a .pcap file and retransmit its packets onto a live...
Read More
ipcalc Deep Dive: Mastering Subnet Math Across Every Linux Implementation and Homebrew
Manny FernandezExecutive Summary ipcalc looks like a single, predictable command, but at least three functionally different programs answer to that name...
Read More
Creating and IP Addressing Scheme Design
Manny FernandezObjective: Give you a repeatable method for designing an IP addressing scheme that scales, summarizes cleanly, and doesn’t need to...
Read More
FortiSwitch Upgrade Status Messages: A FortiLink Field Reference
Manny FernandezYou kick off a FortiSwitch firmware push from the FortiGate switch controller, and the status column just sits there. Is...
Read More
Using FortiExtender as a Terminal Server
Manny FernandezThis post was take from a document I created for a customer. In my lab, I used a FEX200F which...
Read More
FortiExtender 511G Deployment Guide
Manny FernandezExecutive Summary This guide deploys a FortiExtender 511G (FEX-511G) as a cellular WAN extension for a FortiGate 120G running FortiOS...
Read More
Limitations of an AWS Peering Connection
Manny FernandezI had a customer over the weekend that has two VPCs (VPC-A and VPC-B). He created a peering connection between...
Read More
TCP Flags Deep Dive: Meaning, Behavior, and Troubleshooting
Manny FernandezObjective: This guide breaks down all nine TCP control bits, traces exactly how they combine across a connection's lifecycle from...
Read More
FortiGate Packet Capture: The Complete Advanced Filter Syntax Reference
Manny FernandezEvery filter you can type into the Advanced field is standard BPF, the same syntax tcpdump and diagnose sniffer packet...
Read More
FortiGate DoS Policies: Configuration, Components, and Storm Troubleshooting
Manny FernandezIn This Guide 1. Executive Summary 2. Prerequisites & Architecture 3. Step-by-Step Implementation Workflow 4. Verification & Validation 5. Troubleshooting...
Read More
Where does the “Sequence Group” live in the FortiGate CLI Config
Manny FernandezDo you use Sequence Groups In your Firewall Policies? I absolutely love them. I used to use them in Checkpoint. ...
Read More
