Sub Blog

Network Strategy Guide

Knowledge Collection of a Network Engineer

network-knowledge.work

Firewall (UTM)

FortiGate

• Getting Started with FortiGate
  • [FortiGate] How to access the GUI of factory default FortiGate
  • [FortiGate] Basic knowledge about configuration command in CLI
  • [FortiGate] How to perform config backup and restore
  • [FortiGate] How to initialize the configuration to factory default

• System settings
  • [FortiGate] Check basic system setting items
  • [FortiGate] How to configure NTP [Client/Server]
  • [FortiGate] How to configure DNS [Client/Server]
  • [FortiGate] CLI Command to test SNMP Trap
  • [FortiGate] Setting to transfer logs to syslog server

• Interface settings
  • [FortiGate] How to configure the interface with CLI
  • [FortiGate] How to configure tagged/untagged vlan ports

• Routing settings
  • [FortiGate] How to configure a static route

• Firewall policy settings
  • [FortiGate] How to configure a firewall policy (ver. 7.0.x)
  • [FortiGate] How to configure NAT

• VPN settings
  • [FortiGate] SSL-VPN basic settings

• Security profile settings
  • [FortiGate] Understand the basic settings of the Web filter function

• Others
  • [FortiGate] Summary of various status confirmation commands in CLI

Palo Alto

• [PaloAlto] How to configure a static route
• [PaloAlto] Completely understand the address object settings
• [PaloAlto] Completely understand the service object settings
• [PaloAlto] Simple configuration example of source and destination NAT

Router / Switch

Cisco

• [Cisco] How to check the ios version recommended by Cisco
• [Cisco C9000] Command log that you want to acquire when configuring the stack and notes on stack mode
• [Cisco] Overview of Smart Licensing Using Policy and how to set it
• [Cisco] What to do when CSSM offline is adopted [Smart License]
• [Cisco] C9300 Series Switch IOS Version Upgrade Procedure
• [Cisco] How to decode the encrypted password on the config

Load Blancer

BIG-IP

• How to use BIG-IP for free [Virtual Edition / Trial license]
• [BIG-IP] Test the server authentication operation of Server SSL profile
• [BIG-IP] How to send logs to the Syslog server using iRules
• [BIG-IP] Summary of information for setting up a Standard virtual server
• [BIG-IP] Summary of information for setting up TCP profile
• [BIG-IP] Summary of information for setting up HTTP Compression profile
• [BIG-IP] Summary of information for setting up OneConnect profile
• [BIG-IP] What is the Port Lockdown setting for Self IPs?
• [BIG-IP] How to check the cipher list included in Cipher Suites
• [BIG-IP] Usage and properties of the node specified by the FQDN