In this post we are going to try to collect certain metrics from Fortigate, if we have this fabulous UTM firewall (or now called Next-Generation Firewall) we will be able to obtain this data through SNMP and visualize it in real time, thanks to Telegraf, InfluxDB and Grafana, It's a great thing!
In this post we will see a very interesting Panel for Grafana, a Sankey-type panel, A way to visualize (with the eyes) data that we have in text and by having a relationship between them, We will exploit them (Elasticsearch logs).
Well, and this time we're going to exploit the IP addresses that we have stored in Elasticsearch indexes, we will visualize them on a World Map and thus we will understand where our data is going from or where it is going.
We continue with another document where we will try to centralize all our LOGs in Elasticsearch, this time it's our turn of Fortigate firewalls. The idea will not only be to collect the LOGs but also to understand them visually and have tools that help us in our day-to-day lives.
This week we had an awesome podcast, We have been lucky enough to have a luxury guest, thanks to him we have been able to give a complete review (within what fits in 1h) to all the possibilities that Fortinet offers, so if you have a Forti or want to know what they are capable of, This is your podcast!
In this post we will see how to monitor our Fortigate firewalls from a Centreon or Nagios or whatever we have 🙂. We will do it through SNMP queries and we will be able to know the status of its chassis at all times, the status of the cluster if we have one, the use and consumption of network interfaces, if we have VPNs the same, know if they fall, The sessions, etc, etc… if you have a Fortigate, This is your post!
For all those who don't know him here's this post, Introducing the Fortinet Virtual Appliance, the Fortigate-VM firewall, in virtual machine format will provide us with all the advantages of having the Fortigate firewall virtualized in our network (high availability, Cross-network FW, Backup/Replica…) Of course,, only for VMware vSphere environments!
In this document, we'll look at the configurations needed to connect an iPad or iPhone device to a FortiGate IPsec VPN, with this we will be able to make the corporate applications of our iPad/iPhone work directly, ideal for putting on a softphone-type application and calling (or receive calls) directly from such devices, saving the costs of calls or being 100% Available,
If our intention is to block all spam that passes through our firewall, RBL lists are most commonly configured, and this document shows how to configure them on a Fortinet firewall, in a Fortigate. RBL is the acronym for “Realtime Blackhole list” or “Real-time blacklist”. These are systems that publish a database with a list of IP addresses that have been the source of unsolicited email sendings (SPAM). These databases are consulted online in real time by AntiSpam systems or mail servers before accepting a new email and said email will be marked as spam or we will reject it, according to interest.
FortiReporer is a software to get statistics, Analyze your firewall. Analyze firewall logs and graph graphs. First you have to configure the firewall to send the LOG's to a LOG's server (A syslog) that comes with the FortiReporter by default, And then he pulls up statistics of what's going on in the firewall, and can be configured to be sent automatically by email, or keep them somewhere… The first thing is to download the file to be installed on a server with disk capacity. We can download it from its official website (It's a trial of 21 days) – HERE.
Do Tailor-made training
Windows Server – VMware vSphere – Citrix Virtual Apps & Desktops – Centreon
|
We are a consulting firm that cares and pampers
|
 |
|
With quality and added value
|
 |
|
¡Let's work together!
|
 |
