FortiGate Firewall: Intrusion Prevention System (IPS) Tutorial

preview_player
Показать описание
In this latest video, I talk about Intrusion Prevention System (IPS) and how it can be applied using a FortiGate 80F NGFW Firewall to protect your environment based on different packet flows

Internal to External (Block C&C communication)
External to Internal (Protect your on-prem servers)
Internal to Internal (Protect against lateral movement)

During the video, I provide configuration examples based on best practices to stop memory exhaustion.

// Chris SOCIAL //

// Keywords //

Fortinet
Fortigate
Fortiswitch
FortiAP
Fortinet Fabric
Fortinet how to
Fortinet guide
Fortinet network security
Cybersecurity

// HashTags //

#cybersecurity
#hacking
#networking
#fortinet
#fortigate
Рекомендации по теме
Комментарии
Автор

Fantastic....this makes me so excited to explore further and explains in a very understandable way "how things work with Fortigate"

DemeterN
Автор

Thank you. that was very clear and very helpful!

WinfreySharon
Автор

Very helpful video, nice and clear, thanks.

clivethompson
Автор

Thank you for the video. I do have a question: Why in the case of internal traffic leaving to internet we need to apply even the IPS Signatures and Filters ? Is it just enough to enable Block Malicious URLs and Outgoing Connections to Botnet Sites ? so you can save memory and cpu ?

ornaldonaqellari
Автор

Just to get a clarification, if for example, I am protecting a DNS server in an inter-VLAN scenario and I create a filtered IPS sensor like you described, there is no reason to enable deep packet inspection on the policy if all I have is port 53 allowed in the policy since I'm not doing DNS over TLS, correct?

rogergaudet
Автор

Good video. I just bought my fortigate and thought it was protecting me but it wasn't.

roku-cv
Автор

audio much better, much louder and clearer

simonbell
Автор

a lot of discussion prior to showing the actual tutorial, and then when showing how to create the sensor you gloss over how you actually created the sensor. I would prefer less discussion in the beginning, and a more exact route to create the sensor.

SuperDaddyofDD