Good Strata Cloud Manager policy design starts before the first security rule is written. The durable part of a rulebase is its object model: the […]
Cybersecurity
Palo Alto Networks NSA: Strata Cloud Manager Policy Troubleshooting
When a centrally managed rule does not behave as expected, changing the rule immediately is usually the wrong first move. Strata Cloud Manager policy troubleshooting […]
Palo Alto Networks NSA: Strata Logging Service for Network Analysts
Strata Logging Service is the centralized log store behind many Palo Alto Networks operational workflows. For a network analyst, its value is not simply retention. […]
Palo Alto Networks NSA: Security Posture Improvement
Security posture improvement is not a one-time hardening project. In a live firewall estate, rules accumulate, objects outlive applications, temporary exceptions become permanent, subscriptions go […]
Palo Alto Networks NSA: Firewall Operations with Strata Cloud Manager
Centralized firewall operations are successful when routine changes become predictable. The objective is not simply to make a change from one console instead of many; […]
Fortinet NSE 4: FortiGate Debug Flow and Packet Sniffer
FortiGate troubleshooting becomes much faster when you stop treating every connectivity failure as a firewall-policy problem. A packet can fail before policy evaluation because it […]
Fortinet NSE 4: FortiGate SNAT vs DNAT Rules
Source NAT and destination NAT solve opposite address-translation problems on FortiGate. SNAT changes the source identity of traffic as it leaves a network; DNAT changes […]
Fortinet NSE 4: How FortiGate FSSO Maps Users to Policy
Fortinet Single Sign-On (FSSO) lets a FortiGate make policy decisions using user and group identity learned from an external identity environment instead of prompting every […]
Fortinet NSE 4: FortiGate Antivirus, IPS, and Application Control
FortiGate security profiles are often enabled together, which can make their responsibilities blur during design and troubleshooting. Antivirus, intrusion prevention, and application control all inspect […]
Fortinet NSE 4: FortiGate CNF vs FortiGate-VM in Public Cloud
FortiGate Cloud-Native Firewall (CNF) and FortiGate-VM both bring Fortinet security into public cloud, but they use different operating models. FortiGate-VM is a virtual appliance that […]
Fortinet NSE 6: FortiManager Device Registration and FGFM
FortiManager can centralize policy and configuration only after it has a trusted management relationship with the FortiGate it is meant to control. Device registration is […]
Fortinet NSE 6: FortiManager Device Database vs ADOM Database
FortiManager can show a FortiGate as connected while still reporting that its configuration is out of sync. The reason is that FortiManager does not manage […]
Fortinet NSE 4: FortiGate Firewall Policy Troubleshooting
FortiGate firewall-policy problems are easiest to solve when you stop thinking of a policy as a single allow-or-deny line and instead trace the whole session […]
Fortinet NSE 4: FortiGate FGCP High Availability
FortiGate Clustering Protocol high availability is designed to keep firewall services available when a member or monitored path fails. The cluster presents a unified security […]
Fortinet NSE 4: FortiGate IPsec VPN Troubleshooting
Site-to-site IPsec troubleshooting becomes manageable when you separate tunnel establishment from traffic forwarding. Phase 1 creates the IKE security association between peers. Phase 2 creates […]