Skip to content

Instantly share code, notes, and snippets.

View cuetotech's full-sized avatar

Jeffrey Cueto Paulino cuetotech

  • 08:25 (UTC -05:00)
View GitHub Profile
@cuetotech
cuetotech / fortigate cheat sheet
Created April 9, 2023 21:06 — forked from githubfoam/fortigate cheat sheet
fortigate cheat sheet
#=====================================================================
#CIS benchmark
https://www.cisecurity.org/benchmark/fortinet
#=====================================================================
#ChatGPT
FortiGate can be deployed as a DHCP server to automate the process of assigning IP addresses and network configuration settings to devices on a network. DHCP (Dynamic Host Configuration Protocol) is a standard network protocol used by devices to obtain IP addresses and other network configuration information automatically.
To deploy FortiGate as a DHCP server, you would typically follow these steps:
Configure the DHCP service: Enable the DHCP service on your FortiGate firewall and configure the DHCP server settings, including the IP address range, subnet mask, gateway address, and DNS server.
@cuetotech
cuetotech / DNS Cheat Sheet
Created April 9, 2023 21:06 — forked from githubfoam/DNS Cheat Sheet
DNS Cheat Sheet
----------------------------------------------------------------------------------------------------
#ChatGPT
Explain advantages and disadvantages of placing DNS servers in DMZ zone.
Placing DNS servers in a DMZ (Demilitarized Zone) can have advantages and disadvantages. Here are some of them:
Advantages:
Security: By placing the DNS servers in a DMZ, it is isolated from the internal network and exposed to the Internet. This can help protect the internal network from potential attacks on the DNS server.
#====================================================================================================================================
#Explain SSL-VPN tunnel interface(ssl.root) in fortigate, ChatGPT
Fortinet's FortiGate firewall devices support SSL-VPN (Secure Sockets Layer Virtual Private Network) to provide
secure remote access to network resources. The SSL-VPN tunnel interface (ssl.root) is a virtual interface that is
automatically created by the FortiGate device when SSL-VPN is enabled.
Virtual interface: The SSL-VPN tunnel interface is a virtual interface that can be used to route traffic between the
remote user's device and the corporate network. This allows administrators to apply security policies to SSL-VPN traffic
just like any other network traffic.
#=====================================================================
#Firewall Hardening
#https://docs.fortinet.com/document/fortigate/7.2.0/best-practices/555436/hardening
#=====================================================================
#Firewall Hardening
Administrator access - Management network
https://docs.fortinet.com/document/fortigate/7.2.0/best-practices/317406/management-network
------------------------------------------------------------------------------------------
#CLI shortcut keystrokes(linux&MAC)
Ctrl+L: Clear the screen. This is similar to running the “clear” command.
Ctrl+C: Interrupt (kill) the current foreground process running in in the terminal. This sends the SIGINT signal to the process
Ctrl+Z: Suspend the current foreground process running in bash. This sends the SIGTSTP signal to the process. To return the process to the foreground later, use the fg process_name command.
Ctrl+D: Close the bash shell.This is similar to running the exit command
Ctrl+L: Clear the screen. This is similar to running the “clear” command.
Ctrl+S: Stop all output to the screen. This is particularly useful when running commands with a lot of long, verbose output, but you don’t want to stop the command itself with Ctrl+C.
Ctrl+Q: Resume output to the screen after stopping it with Ctrl+S.