TechTalkSecurity

 Load Balancing in FortiGate Firewall Network Diagram: FireWall Setting: config system settings     set gui-proxy-inspection enable     set gui-load-balance enable end Firewall Rule: config firewall policy     edit 1         set name "LB"         set uuid d83e61d0-82a8-51ee-abca-22e6f65c4028         set srcintf "port2"         set dstintf "port1"         set action accept         set srcaddr "all"         set dstaddr "LB_IP"         set schedule "always"         set service "ALL"         set inspection-mode proxy         set nat enable     next end Interface: config system interface     edit "port1"         set vdom "root"         set ip 192.168.0.108 255.255.255.0   ...

Adding the ntop Packages Repository In order to add the official ntop package repository do ( as root ): curl https://packages.ntop.org/centos-stable/ntop.repo > /etc/yum.repos.d/ntop.repo Then, perform the following steps, depending on your distribution. Rocky 8 Open your shell and type: dnf config-manager --set-enabled powertools dnf install epel-release CentOS/RedHat 8 Open your shell and type: yum install epel-release rpm -ivh http://rpms.remirepo.net/enterprise/remi-release-8.rpm yum install dnf-plugins-core dnf config-manager --set-enabled PowerTools   ##you may have to change the key work to powertools in some cases dnf config-manager --set-enabled remi CentOS/RedHat 7 Open your shell and type: yum install epel-release Installing ntop Packages Now that the ntop packages repository has been added, packages can be installed as: yum clean all yum update yum install pfring-dkms n2disk nprobe ntopng cento ntap Configure Firewall Configure firewall to allow traffic to ntop...

  IPsec VPN wizard hub-and-spoke ADVPN:

 HUB-AND-SPOKE VPN:

To generate a API token: execute api-user generate-key <API_user> eg. execute api-user generate-key api  Static route info: curl -k -H --"Authorization: Bearer <generated_token>" "https://192.168.0.108/api/v2/cmdb/router/static?access_token=<generated_token>" eg.  curl -k -H --"Authorization: Bearer x04gmtfknwk386pctdpn98rkNchjcx" "https://192.168.0.108/api/v2/cmdb/router/static?access_token=x04gmtfknwk386pctdpn98rkNchjcx" Global configuration: curl -k -H --"Authorization: Bearer x04gmtfknwk386pctdpn98rkNchjcx" "https://192.168.0.108/api/v2/cmdb/system/global?access_token=x04gmtfknwk386pctdpn98rkNchjcx" Address Group: curl -k -H --"Authorization: Bearer x04gmtfknwk386pctdpn98rkNchjcx" "https://192.168.0.108/api/v2/cmdb/firewall/addrgrp?access_token=x04gmtfknwk386pctdpn98rkNchjcx" Policy with serial number 1: curl -k -H --"Authorization: Bearer x04gmtfknwk386pctdpn98rkNchjcx" ...

 How to Implement and Test SSL Decryption (PaloAlto)

SD-WAN Configuration with dynamic WAN interface (DHCP client)