Weberblog.net

If you’re dealing with industrial protocols, you’ll certainly have seen Modbus packets in your network.

To improve the convergence times of a routing protocol, BFD can be used.

Modern networks are not only threatened by external attacks but are increasingly exposed to internal risks as well.

After using several post-quantum secure VPN tunnels (here and there), I was interested in how this key exchange with ML-KEM looks on the wire.

Since we have learned the basics of post-quantum secure VPN tunnels, let’s configure a site-to-site VPN between a Palo Alto Networks firewall and a FortiGate with PQC ciphers to verify vendor interoperability.

As the advent of practical quantum computing draws closer, security vendors are increasingly introducing post-quantum cryptographic (PQC) algorithms to protect existing security architectures against future threats.

Fortinet has a misstep in its IPv6 settings: NAT66 is enabled by default for every policy.

I had a use case where I wanted to use the SSL Inbound Inspection on a Palo, but with a different X.509 certificate than the one on the server itself.

In my IPv6 classes, I always teach the basic IPv6 messages as seen on the wire.

Did you know that you can easily decrypt TLS (mostly HTTPS) traffic with Wireshark?

After years of customers confusing Fortinet with Fortnite, the two companies finally decided to lean into the chaos.

You never stop learning.

A rare use case on a Palo (at least from my point of view): Multicast Routing.

The other day, I was troubleshooting some network-related stuff, using the built-in Packet Capture on a Palo Alto Networks firewall.

I had a hard time figuring out how to configure OSPFv3 authentication on a Palo Alto Networks NGFW due to its different configuration formats compared to a Cisco router.