Let’s mention the important things first: Please patch you vulnerable Exchange 2013, 2016 and 2019 immediately! The page msxfaq has published an infosite to this vulnerability including the instructions how to fix your Exchange. Some security researchers have demonstrated three high risk vulnerabilities for exchange server systems. Microsoft has published…
FortiGate hardware acceleration step-by-step troubleshooting
Last updated: 21.11.2023 One of the very powerful features of FortiGate hardware appliances is the hardware acceleration chipset included in the hardware platform. This allows to forward traffic in specific situations directly from the incoming interface to the outgoing interface without passing the CPU of the system. This can safe…
Exchange Hafnium Vulnerability March 2021
Let’s mention the important things first: Please patch you vulnerable Exchange 2013, 2016 and 2019 immediately! The page msxfaq has published an infosite to this vulnerability including the instructions how to fix your Exchange. Even though we, as Boll Engineering AG, are not associated in any way with the affected…
How to transfer a FortiGate configuration to a newer model
During the lifecycle of firewalls, they are often replaced with a newer model, but you would like to keep the configuration. In this case, there are several possibilities, which we present in this blog post: 1. FortiConverter Service2. FortiConverter Tool3. Partial Config Transfer4. Full Config Transfer Den deutschen Artikel dazu…
So übertragen Sie eine FortiGate Konfiguration auf ein neueres Modell
Im Laufe des Lebenszyklus von Firewalls werden diese oftmals ersetzt mit einem neueren Modell, die Konfiguration möchte man aber gerne übernehmen. Für diesen Fall gibt es verschiedene Möglichkeiten, die wir in diesem Blog Beitrag vorstellen: 1. FortiConverter Service2. FortiConverter Tool3. Partielle Konfigübernahme4. Volle Konfigübernahme English article can be found here:…
FortiGate: IPsec VPN with native macOS client
The good news first: If you’re currently using the FortiClient to establish a Dialup IPsec VPN (Aggressive, PSK based), the same configuration should also work with the native macOS client.
FortiOS 6.2: IPS Engine Update affects behaviour of Web Filter Overrides
Are you running FortiOS 6.2.x and your Web Filter Overrides suddenly stopped working? Then read ahead.
FortiGate SSLVPN Update-Empfehlung
Update, Nov 2020: More than a year after Fortinet described this SSLVPN vulnerability, it gets new attention. A few days ago a list of IPs and domain names of vulnerable Fortigates was published. This list is dated November 2019 and one can only hope that many of these systems have…
FortiClient and macOS Big Sur – SSL top, IPsec flop
Spoiler Alert! – Since the release of macOS 11.0 aka Big Sur, your FortiClient VPN might not be working as expected anymore if you have already upgraded. There’s a chance you might not have noticed it, in the case that you’re using SSL VPN only in your environment. But as…
CheatSheet – FortiOS v6.4
The System Engineers of BOLL Engineering have been supporting Fortigate devices for 18 years. This year, FortiOS v6.4 was released and we have again gathered all the troubleshooting commands that we use regularly in our new CheatSheet. Hopefully this CheatSheet will help you as well. You will find the most…