Caroline's Blog

Enable Let’s Encrypt Certificate on SSL-VPN enabled FortiGate Interface

With the release of FortiOS 7, Fortinet added a new feature that supports Automated Certificate Management Environment (ACME) as defined in RFC8555.This allows administrators to use the free SSL certificates, provided from Let’s Encrypt. Note:Certificates issued by Let’s Encrypt are free of charge, but are only valid for 90 days.Unlike most other certification authorities, Let’s […]

Enable Let’s Encrypt Certificate on SSL-VPN enabled FortiGate Interface Read More »

FortiGate: Disable Logging for Dedicated IPS Signatures

Firewall, How-To, Security, Tuning / Caroline Kiel

During the last weeks we saw lots of alert messages from Fortinet firewalls that blocked attack attempts against web servers using the built-in IPS system. There were so many of these messages that they completely flooded the monitoring system. So I was asked for a solution to filter out these messages The messages look similar

FortiGate: Disable Logging for Dedicated IPS Signatures Read More »

Fortigate SSL-VPN Bookmark with Single Sign-On to OWA

Firewall, How-To, Security / Caroline Kiel

When setting up the VPN portal(s) for employees on a FortiGate, you can define bookmarks. A bookmark is an icon showing up on the VPN portal after the user has logged in. By clicking on such a bookmark, the user can then access internal resources like file servers or start a remote connection to a

Fortigate SSL-VPN Bookmark with Single Sign-On to OWA Read More »

Allow SEP Protected Clients to Print at Home

Endpoint Protection, Firewall, How-To, Security / Caroline Kiel

In the last weeks I was called by a customers, whose employees complained about SEP blocking them from using their printers in the home office. What seems to be a piece of cake, turned out to be a little more difficult, after looking for the details. The reason for the complexity is that many of

Allow SEP Protected Clients to Print at Home Read More »