Hi all, another vulnerability – log4j – is keeping us all on our toes.In this blog article you will find information about log4j from our vendors.
Information on Log4j Vulnerability / CVE-2021-44228
Fortigate S2S-Dialup VPN – Traffic does not run through IPsec tunnel anymore
After Fortigate upgrade v6.4 > v7.0.1 (or later) the S2S-dialup VPNs did not work anymore. Tunnel negotiation is successful and phase 1 and 2 get up. Traffic from spoke is routed into the tunnel, but is seems that the traffic is not received by the hub.
CheatSheet – FortiAnalyzer & FortiManager v7.0
We have created a combined CheatSheet for the FortiAnalyzer and FortiManager OS version 7.0. We have divided sections into FortiAnalyzer Logging, FortiAnalyzer Reporting and FortiManager to find the needed commands faster. CheatSheet FAZ FMGR 7.0 v1.2 We hope that this will contribute to quick solutions of existing problems.
Kaspersky: How to get a key file from an activation code / Erhalten einer Schlüsseldatei anhand eines Aktivierungscodes
A key file is a file for offline activation. You can request a key file for business products only. All Kaspersky applications for home are currently activated with an activation code. Conversion of the Activation Code into Key Files:https://keyfile.kaspersky.com Die Schlüsseldatei ist eine Datei zur Aktivierung von Programmen für Unternehmen ohne Internetzugriff. Sie…
SEPPmail: Neue SwissSign CA-Zertifikate
Am 07. September 2021 hat SwissSign ihre Kunden informiert, dass neue CAs in Betrieb genommen werden. Diese Änderung betrifft alle SwissSign Zertifikate, welche seit dem 17. Oktober 2021 ausgestellt werden und benötigt ein aktives Eingreifen durch den SEPPmail-Administrator.
CheatSheet – FortiOS v7.0
We have adapted our CheatSheet for FortiOS version 7.0 and added new commands. The Cheat Sheet is divided into different sections. Depending on the topic, you can find the necessary commands to display more information or find problems. We hope that this will contribute to quick solutions of existing problems.
Fortiguard DNS servers are enforcing EDNS policies
Some of you may have noticed that a Fortigate – configured to use the FortiGuard DNS Servers – is not resolving some DNS names anymore. Consequences can be that FQDN address objects can not be resolved or a configured mail server can not be used anymore.
WatchGuard announced new “Service Status Page”
Today WatchGuard launched a new page where you can see the status of WatchGuard Cloud Services. https://status.watchguard.com/ For each region, you’ll find the current status separated by products and the major features that WatchGuard provides. Every line has a simple status indicator to communicate its condition:
Let’s Encrypt: Unexpected certificate warnings
On Mai 2021, Let’s Encrypt issued a note about the expiration of their DST Root CA X3:https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ Now that this root certificate has expired (2021-09-30), your systems might issue a warning when connecting to sites using Let’s Encrypt certificates. To fix this glitch on a general client, follow the instructions…
Error message: “Unable to load FortiGuard DDNS server list”
For some reasons Fortigates are are not able to load the FortiGuard DDNS server list. Therefore you are not able to configure DynDNS on your Fortigate anymore. In the WebUI you will see following error message under Network > DNS > FortiGuard DDNS and you are not able to list…