Fortinet FortiGate firewalls solution

Automate maintenance tasks

• Device configuration backup
• Certificates about to expire
• License usage limit approaching
• Hardware & software end of support approaching
• FortiGuard services update failure
• Application package or signatures not up to date
• Log service expiration nearing

Detect high availability unreadiness

• Cluster experiences problems
• Configuration out of sync –  checks for sync status, debug zone & checksum
• Cluster heartbeat interface problems
• No different priorities for HA heartbeat interfaces
• Critical HA monitor links status
• No redundant operational heartbeat links

Increase network visibility

• Conserve mode status and thresholds
• Top active file descriptors, socket memory and memory processes
• System – Core CPU, Chassis and Blade CPU, Memory usage, Critical process(es) down
• Network interfaces – packet drops, packet overrun, half duplex, ports down, Port(s) running in low speed
• Sessions clash
• High number of ephemeral sessions
• Sessions deleted or flushed
• Cashlog entries have been logged
• Connection to FortiManager not working

Demonstrate compliance

• Configuration and misconfiguration avoiding human errors
• Syslog servers in use
• Checks for OS software versions, DNS & NTP servers to ensure compliance
• FortiAnalyzer not connected
• IPS extended data package not enabled
• IPv4 DoS policy not configured

Implement Fortinet best practices

• Application package needs update
• Fortinet uninterruptible upgrade is disabled
• Memory or Disk logging enabled
• Wildcard FQDNs are used
• No explicit deny rule to log unauthorized traffic
• No NTP servers configured