EngineeringKindly993

Hey guys,

The difference between proxy/flow-based and the SSL inspection profile is confusing me a lot even after a discussion with Claude and Open AI.

SSL Inspection Profile = tells FortiGate how to handle TLS/SSL encryption.

1. Certificate inspection = FortiGate only reads the certificate and packet header. Checks: is the certificate legitimate? Is it revoked? Who issued it? Does the domain match? No decryption of actual traffic content.
2. Full SSL inspection = FortiGate acts as a man-in-the-middle. Decrypts traffic, inspects content, re-encrypts, forwards. Creates 2 TLS sessions (client↔FortiGate and FortiGate↔server) so it can see inside the encrypted tunnel.

Proxy/Flow = tell

https://preview.redd.it/qjjfiz9mj5xg1.png?width=1050&format=png&auto=webp&s=182520a0d71d9d3cd4ba85b6ad204d8d95f27fb5

I BGP-peered my SSR with a FG. No issue in that regard, they're neighbors

But I can't seem to advertise routes.

The routes that the Fortigate advertised to my SSR appear in both the 'Advertised Routes' and the "Received Routes".

He doesn't propagate the static routes that I added in the Hub profile.

Something I don't understand or that i'm not doing well ?

Hey everybody, my laptop doesn't receive an IP.

I kept it as simple as I could.

https://preview.redd.it/7xwuw5jxi5sg1.png?width=1511&format=png&auto=webp&s=d3e43721f1061bcc0b9029555870ab376d1290c6

You can find above the config. It's pretty basic, but I think i'm missing something ?

Someone has an idea ?

Has anyone here had experience with an investment advisor firm ?

To be honest, I don’t really have the time anymore to actively research companies or keep up with stock volatility, and my performance hasn’t been great either.

I know ETFs are probably the safest option, but if there are alternatives with potentially higher returns, I’d be interested to hear about them.

I’ve heard of investment advisory firms, but they usually require hundred of thousands, or millions of euros.

I struggle to understand what precisely a SD-WAN is. I'll tell you what I think it is, and you tell me if it's right.

Example - Company A
Traditional WAN

In a traditional WAN architecture, if Company A has multiple sites distributed around the world (for example, a headquarters, several branch offices, a DC hosting critical apps, ...), connecting all these sites requires infrastructure.

The site, head-office & DC needs:

• Dedicated networking hardware such as routers, switches, and firewalls.
• Connectivity to a service provider using specific physical links such as DSL, MPLS, or fiber-optic.

To enable site-to-site communication, Company A needs:

• Private leased lines (e.g.

Cloud Security Engineer vs Network Security Engineer

If you had to make a career shift for the next few years, where would you rather invest your time and energy:

A) Continue developing your career as a Network Engineer specializing in Security
(technologies like Fortinet, Palo Alto, Juniper SRX, Zscaler, Netskope, Cisco Secure, etc.)

OR

B) Shift more toward Cloud engineering and Cloud security
(I guess it would be here, Azure, AWS, Terraform, Azure Firewall, Azure Virtual WAN, AWS Transit Gateway, IAM & Security Groups, Prisma Cloud, etc.)

and why ?

Note: *More and more enterprises are shifting to the cloud. ChatGPT advised me to combine both paths, bu

Hello,

My company is Partner with Fortinet, and i heard that we had access to a Study Guide PDF for NSE4.

Where could I find it ? I'm looking for it in the Training portal but I don't seem to find it, could somebody point it out for me ?

And did somebody already used it ? How did you find it ? I'm chosing to go with this to spare some time but if necessary I can watch the free videos.

Thanks!