Fortinet Technical Tips
- von nweckelDescription This article describes a change of behavior in version 7.2.6 and more recent version where the FortiGate interface does not respond to Ping even if Ping is allowed in interface […]
- von mhemambikaDescription This article explains the upper threshold limits for the MV1548 and MV1680 temperatures of devices 80F. Scope FortiGate. Solution The temperature details of 80F are provided below. r1-Dubai-fw-primary […]
- von mhemambikaDescription The article describes the intermittent disconnection of FortiClient from dialup VPN due to DPD (Dead Peer Detection). Scope FortiGate, FortiClient. Solution There have been instances where FortiClient experiences random […]
- von kpanchalDescription This article describes a possible error that may occur when adding the EMS Cloud fabric in FortiGate: Failed to verify the certificate for server "FortiClientEMSCloud (ID: 1)".Server […]
- von lmassipDescription This article describes the current status of the FortiGate-200G regarding its availability in the Upgrade Path Tool and related firmware versions. Scope FortiGate-200G, users requiring support for this model […]
- von SerxhioDescription This article describes how FortiGate chooses the source IP for local-out traffic. Scope FortiGate. Solution The definition of 'Local-out traffic' stands for traffic origination from the FortiGate (self-originating traffic), […]
- von JNDiasDescription This article explains why, after updating to version 7.4.4 or a newer version, Security Fabric downstream FortiGate devices cannot validate the EMS certificate. Example: FortiGate Root Fabric: […]
- von avpDescription This article explains the scenario in which SSL VPN status shows connected, sent-out packets getting increased in the FortiClient Dashboard but proper communication is not happening. While checking from […]
- von mpandyaDescription This article describes why, after upgrading to v7.4.5, the GUI can be slow. Scope FortiGate. Solution After upgrading to v7.4.5, the GUI may experience a slowdown in the following […]
- von rsondalDescription This article describes UTM block logs under forward traffic. Scope FortiGate. Solution Check SSL application block logs under Log & Report -> Forward Traffic. Forward Traffic will […]
Fortinet Firmware Updates
- FortiOS 7.4.7 B2731 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiSandbox 4.4.7 B0402 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiPortal 7.0.11 B0271 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiAP-U 7.0.5 B0146 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiProxy 7.4.8 B0649 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiClientLinux 7.2.8 B0926 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiClientMac 7.2.8 B0999 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiClient 7.2.8 B1140 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiOS-6K7K 7.0.17 B0287 and release notes are available for download from the Support site : https://support.fortinet.com
- FortiClientEMS 7.2.8 B1152 and release notes are available for download from the Support site : https://support.fortinet.com
Fortinet Thread Blog
- An in-depth analysis of how a remote attacker deployed a rootkit and a user-space binary file by executing a shell script.
- An example of a recent phishing attempt and how to spot the obvious phishing tell-tales.
- Get detailed tactics associated with EC2 Grouper and how Lacework FortiCNAPP can be leveraged to detect this threat.
- FortiGuard Labs recently noticed that attackers still use and deliver two different botnets via D-Link exposing a HNAP interface weakness. Learn more.
- In this FortiGuard analysis, we examine the Python scripts behind two malicious packages, outline their behaviors, and provide insights into their potential impact.
- Fortinet contributes to major INTERPOL and AFRIPOL cybercrime operations arrests of members of cybercrime groups operating across Africa. These individuals specialize in ransomware, digital extortion, online scams, and Business Email […]
- FortiGuard Labs has uncovered an attack targeting companies in Taiwan with SmokeLoader, which performs its attack with plugins this time. Learn more.
- Interlock is a recent ransomware variant that has victimized organizations in the United States and Italy, but may have hit other countries. The ransomware affects not only Windows, but also […]
- Black Friday and Holiday Shopping Threats Targeting Shoppers on the Darknet. Learn more.
- From more sophisticated playbooks to a rise in cloud attacks, cybercriminals are upping the ante to execute more targeted and harmful activities. Learn more.
Cert Bund News
- Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen.
- Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um einen Denial of Service Angriff durchzuführen.
- Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen.
- Ein lokaler Angreifer kann eine Schwachstelle in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
- Ein lokaler Angreifer kann eine Schwachstelle in vim ausnutzen, um einen Denial of Service Angriff durchzuführen oder weitere Angriffe zu starten.
- Ein lokaler Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Informationen offenzulegen.
- [UPDATE] [mittel] Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Denial of ServiceEin entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente "389-ds-base" ausnutzen, um einen Denial of Service Angriff durchzuführen.
- Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente "389-ds-base" ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
- Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff und einen nicht spezifizierten Angriff durchzuführen.
- Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.
Microsoft Exchange Team Blog
RSS-Fehler: A feed could not be found at `https://techcommunity.microsoft.com/plugins/custom/microsoft/o365/custom-blog-rss?tid=6850040437866647932&board=Exchange&size=25`; the status code is `404` and content-type is `text/html; charset=utf-8`
MSXFAQ Newsfeed
- 20. Jan 24 X-MS-Exchange-CrossTenant-Id – Hier steht die GUID des Absender-Tenants drin. Manchmal aber auch die des Empfängertenants
- 20. Jan 24 Deadline Oktober 2025 – Exchange SE und Windows 11 statt Exchange 2016/2019 und Windows 10. Zeit zu handeln
- 09. Jan 24 Exchange Pause – Wie beende ich eine Exchange Umgebung komplett herunter und starte Sie wieder, z.B. bei einem Umzug, USV-Umbau o.ä.?
- 08. Jan 24 HIN-Mail im Schweizer Gesundheitswesen – Arztbriefe in der Schweiz werden per SMIME übertragen. Als Hosted Postfach oder mit einem HIN-Gateway.
- 31. Dez 24 Delos Cloud – Mehr als eine Neuauflage der DE-Cloud für Behörden?
- 30. Dez 24 ADSync Ports – Welche Verbindungen nutzt ADSync und warum ein Ort in der MZ keine gute Wahl ist.
- 23. Dez 24 New Outlook – Roadmap addiert. Privatanwender sind umgestellt. Firmen starten ab 1.1.2025 aber können bis 2029? zurück
- 18. Dez 24 Wenn ich ein Spammer bin… – Wer Domains ohne SPF/DKIM/DMARC betreibt, macht Phishing sehr einfach.
- 13. Dez 24 Voice-enabled Channels (VEC) – VEC entfallen NICHT zum 30. Jun 2025 zugunsten Queue App
- 11. Dez 24 Skype for Business 2019 Updates – SfB2019 CU8 mit Fixes, Neuer AdminUI und PCHAT-Service ist wieder da
