Next Gen Firewall

How to Change DNS Config in Checkpoint Console

Changing DNS settings through the CLI or console in Checkpiont is a straightforward process, and in this blog post, we’ll guide you through the steps to accomplish this task effectively. The process is usefull when you lock yourself out because “out of date” DNS configurations. [Expert@HostName:0]# cp -v /etc/resolv.conf /etc/resolv.bak [Expert@HostName:0]# vi /etc/resolv.conf Add the

How to Change DNS Config in Checkpoint Console Read More »

How to Configure Broadcast Forwarding in Fortinet Firewall

Re-broadcasting, also known as broadcast forwarding, allows the firewall to transmit broadcast traffic between different network segments. In this post, we’ll guide you through the process of enabling re-broadcast on a Fortinet firewall. Also a quick example of Checkpoint Clish to achieve the same result. Scenario Diagram and Requirement Solution Step 1 Enable broadcast forwarding

How to Configure Broadcast Forwarding in Fortinet Firewall Read More »

How to configure Zscaler GRE tunnel on Juniper SRX with SLA

Introduction Configuring a Zscaler GRE (Generic Routing Encapsulation) tunnel on Juniper SRX, along with SLA/failover capabilities, involves several steps. The process may vary slightly based on the specific Juniper SRX model and Junos OS version you are using. Below is a general configuration that you can follow. Make sure to adapt the instructions to your

How to configure Zscaler GRE tunnel on Juniper SRX with SLA Read More »

How to Migrate Firewall Configuration across Vendors

Migrating firewall configurations can be a complex task, but with the right tools, it becomes a much more manageable process. The Firewall Migration Tool from GitHub is a versatile solution that can bring efficiency and reliability to migrate firewall configurations such as addresses, groups, policies, and customized services etc. Big thanks to Vahid Tavajjohi!!! https://fwmig.readthedocs.io/en/latest/

How to Migrate Firewall Configuration across Vendors Read More »

How to Upgrade Old Palo Alto Firewall to New Model

Migrating from an old Palo Alto firewall to a new one involves a few more considerations, especially if the models or PAN-OS versions differ. Here’s a comprehensive approach: 1. Preliminary Steps: 2. Backup and Export Configuration: 3. Prepare the New Firewall: 4. Import Configuration to the New Firewall: 5. Post-Import Checks: 6. Additional Recommendations: Lastly,

How to Upgrade Old Palo Alto Firewall to New Model Read More »

How to Disable ZTP in Palo Alto and Setup the Basic Configuration

Disabling Zero Touch Provisioning (ZTP) and setting up a basic configuration on a Palo Alto Networks firewall requires administrative access to the device, either through the command-line interface (CLI) or the web-based interface (WebUI). Disable ZTP using GUI 1.Connect to the firewall’s management IP address using a web browser.2.Login using the default credentials (username: admin,

How to Disable ZTP in Palo Alto and Setup the Basic Configuration Read More »

How to Fix Starlink Static Route issue in FortiGate Firewall

This post is about fixing Starlink static route issue in FortiGate Firewall Issue The issue comes when configuring Starlink in FortiGate Firewall; no matter how we configure the administrative distance and priority for the StarLink state route, one default configuration overrides the manual static route. Environment StarLink as secondary internet link, it should only kicks

How to Fix Starlink Static Route issue in FortiGate Firewall Read More »

How to Fix Forti Manager Fortigate out-of-sync – “the category is already set in another filter”

This post is about fixing the Forti Manager and Fortigate firewall out-of-sync error – “the category is already set in another filter” Troubleshooting * Upgrade the Fortigate firewall version to match up the version with Forti Manager, but it does not help * Check the installation log and the error is as below: Fix After

How to Fix Forti Manager Fortigate out-of-sync – “the category is already set in another filter” Read More »

How to Configure Azure Hub and Spoke Topology Part 3 – Forced Tunnel

This Post is the last part of Configuring Azure Hub and Spoke – Configure Forced Tunnel so all traffic (paritcularly internet traffic) can be routed via the IPsec tunnel. Overall Topology Environment *On-prem Environment has a pair of Fortinet Fortigate firewalls with a public IP of 4.4.4.4 *Hub and Spoke are on different subscriptions. Note:

How to Configure Azure Hub and Spoke Topology Part 3 – Forced Tunnel Read More »