FortiGate SD-WAN is more than a bundle of internet links. It is a policy-driven forwarding system that combines available WAN members, measured path health, application […]
Cybersecurity
Fortinet NSE 4: Flow-Based vs Proxy-Based Inspection on FortiGate
FortiOS supports two major inspection approaches in firewall policies: flow-based inspection and proxy-based inspection. Both can apply security controls to allowed traffic, but they process […]
Fortinet NSE 6: FortiManager ADOMs and Multi-Tenancy
Administrative domains, or ADOMs, are one of the most important FortiManager design concepts because they decide where devices, policy packages, objects, administrators, and operational responsibility […]
Fortinet NSE 6: FortiManager Policy Packages vs Device Settings
FortiManager separates centralized policy management from device-specific configuration. That separation is why a change can exist in Policy & Objects without immediately changing a FortiGate, […]
Fortinet NSE 6: FortiManager Installation Troubleshooting
A failed FortiManager install is rarely solved by pressing Install again. The useful question is where the installation failed: target selection, policy validation, device database […]
Fortinet NSE 6: FortiManager Workspace Mode and Locking
FortiManager can allow administrators to edit without locking, or it can require explicit locks before changes are made. Workspace mode exists to solve a coordination […]
Fortinet NSE 6: FortiManager JSON API Automation
FortiManager’s JSON API allows centralized network-management workflows to be automated without reproducing every operation through the GUI. The API can retrieve managed objects, change configuration, […]
Fortinet NSE 5: How FortiAnalyzer Processes Security Logs
FortiAnalyzer turns device logs into searchable evidence, normalized security data, dashboards, events, incidents, and reports. Those capabilities depend on a pipeline: logs must arrive, be […]
Fortinet NSE 5: FortiAnalyzer Events, Event Handlers, and Incidents
FortiAnalyzer distinguishes raw logs from events and incidents. Logs are individual records generated by devices and services. Event handlers evaluate those records for conditions that […]
Fortinet NSE 5: FortiAnalyzer Playbooks and Fabric Automation
FortiAnalyzer can move beyond detection by running playbooks that automate investigation and response. A playbook starts with a trigger and then executes one or more […]
Fortinet NSE 5: FortiAnalyzer Reports, Datasets, and Charts
FortiAnalyzer reporting is built from layers. Logs provide the raw evidence. Datasets define which data is extracted from the database. Charts turn dataset results into […]
Fortinet NSE 5: FortiView and SOC Dashboards
FortiAnalyzer gives analysts several ways to look at security data. Log View exposes records directly. FortiView summarizes activity through dashboards and widgets. The SOC Dashboard […]
Google Cloud ACE: IAM Troubleshooting
An IAM error in Google Cloud often looks deceptively simple: a user sees PERMISSION_DENIED, a service account cannot call an API, or an automation job […]
Google Cloud PCA: IAM, Organization Policy, and VPC Service Controls
IAM, Organization Policy, and VPC Service Controls are all governance and security mechanisms in Google Cloud, but they answer different questions. IAM decides who can […]
Google Cloud PCNE: HA VPN vs Cloud Interconnect
Hybrid connectivity on Google Cloud is not a one-dimensional choice between “VPN” and “private circuit.” HA VPN and Cloud Interconnect solve related connectivity problems with […]