After the significant updates that have been introduced since 7.4.4 regarding proxy-based inspection, the next important announcement will be published. If you’re using a FortiGate model with 2GB of RAM or less, there’s a critical update you need to be aware of: the SSL VPN web and tunnel mode features…
We have received several support requests regarding interrupted mailflow between Exchange Online and SeppMail appliances. The mailflow is interrupted since 07.03.2024 at 23:00 CET time. In the MS365 logs, the following error message is shown:
On Mai 2021, Let’s Encrypt issued a note about the expiration of their DST Root CA X3:https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ Now that this root certificate has expired (2021-09-30), your systems might issue a warning when connecting to sites using Let’s Encrypt certificates. To fix this glitch on a general client, follow the instructions…
Last Update: 31.07.2024 Since last week, we observed a lot of failed SSL-VPN login events on various FortiGate setups. (Edit: That was back in August of 2021 and the big “scanning” ended around two weeks after it has started. But messages are still shown from time to time, since scanning…
Update, Nov 2020: More than a year after Fortinet described this SSLVPN vulnerability, it gets new attention. A few days ago a list of IPs and domain names of vulnerable Fortigates was published. This list is dated November 2019 and one can only hope that many of these systems have…
Since June 1st you may notice that some websites (https) are not working anymore when Fortigate or the Palo Alto Networks Firewall is doing decryption or certificate inspection. Typically you are getting one of the following error messages:
Recently we have had a few support cases where a customer was unable to log in to the firewall via WebUI after the firmware update. But SSH access worked fine. It turned out that during the update process the server certificate used for the WebUI is lost. Config with v6.0.4…
Sie haben auf ihrem FortiGate ein LDAP Server Profil konfiguriert und dieses funktioniert seit dem Update zu FortiOS 6.0.4 nicht mehr wie erwartet? Erhalten Sie im SSL VPN Log möglicherweise ebenfalls die Meldung “sslvpn_login_unknown_user”? Ihre Benutzer können nicht mehr über POP3 verifiziert werden? Dann sind sie hier genau richtig… Seit…
Kürzlich wurden wir von einem Reseller zu unserer Meinung zu folgendem Heise-Artikel gefragt: Sicherheitsforscher an AV-Hersteller: “Finger weg von HTTPS”. Der Artikel klingt zugegebenermassen wirklich nicht gerade vertrauenserweckend. Die Fortigates sind im Artikel namentlich nicht benannt. Und eine Konfigurationsmöglichkeit haben wir auf der Fortigate hierfür auch nicht gefunden. So stellt…
Hier finden Sie Informationen zu der OpenSSL Schwachstelle und Herstellerinformationen. “Offizielle” Webseiten http://heartbleed.com/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160 Testseiten http://filippo.io/Heartbleed/ https://www.ssllabs.com Betroffene OpenSSL Versionen OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable OpenSSL 1.0.1g is NOT vulnerable OpenSSL 1.0.0 branch is NOT vulnerable OpenSSL 0.9.8 branch is NOT vulnerable
Sind Sie interessiert, den BOLL Blog als RSS Feed zu abonnieren?