Tuesday, 18 June 2019

How-to: Inject RADIUS logons to a FortiGate to test RSSO

This post will go through the steps required to send Logon/Logoff RADIUS accounting packets to a FortiGate and a Collector Agent to update it's RSSO table. This can be useful when integrating with third party systems where a script can be used to convert logons from multiple third party systems to a RADIUS logon to the FortiGate/Collector Agent.

Monday, 11 March 2019

Getting 'Error importing OVF' error when importing FAZ or FMG VM's in VMware Workstation

Every time I try to open an OVF of a FortiAnalyzer or FortiManager on VMWorkstation running on Linux Mint I get the following error:

Error importing OVF: Invalid target disk adapter type: pvscsi



Fortunately the fix for this is easy. Simply edit the .ovf file of the image you're trying to import and change the following highlighted value:

  <rasd:ResourceSubType>VirtualSCSI</rasd:ResourceSubType>

to this:

  <rasd:ResourceSubType>lsilogic</rasd:ResourceSubType>


Save the file and re-import the OVF and it should work now.

Sunday, 24 February 2019

How-to: Block Google Translate from translating web pages

While Google Translate is a fantastic education tool it can also be used a proxy to circumnavigate web filtering policies.

I see this happen regularly in schools where web categories such as Pornography are blocked by the FortiGate web filter, but students will use Google Translate to get past this and view inappropriate web pages (albeit in a different language).

This post will go through how you can create a custom application signature to allow Google Translate to be used to translate words, but not used to translate/proxy web pages.