Fortinet Guide

@prettycyb3rgirl It wasn’t bad. I just remember having to know how… and I already knew how.

@FortinetGuide I can imagine how tasking it must have been But the good side of it, it made networking stick better

Networking Question What is the default subnet mask for a Class C network? A) 255.0.0.0 B) 255.255.0.0 C) 255.255.255.0 D) 255.255.255.255

@PcPhilanthropy I installed Windows Advanced Server from floppies. It was an upgrade from Microsoft OS2.

You’re old but are you Windows XP old? 🧐

@hetmehtaa Assessments and any that has to touch a chain of custody record.

What cybersecurity roles do you think are irreplaceable, no matter how strong AI becomes?

@prettycyb3rgirl The first phase is contracting and having the client sign the agreements allowing you to begin with a get out of jail free card.

What is the first phase of penetration testing? A) Exploitation B) Post-exploitation C) Reporting D) Reconnaissance

@KOTuathail @prettycyb3rgirl I shifted focus to networking and then security and no longer needed MS certs. Never did Cisco certs because I didn’t want to waste time learning IPX or AppleTalk.

@FortinetGuide @prettycyb3rgirl The 2000 upgrade exam was a tough one if I remember it was a 4 hour exam

@prettycyb3rgirl It wasn’t bad. I just remember having to know how… and I already knew how.

@ron_bewtra @prettycyb3rgirl It probably takes a bit more paper than the IPV4 calculation.

@FortinetGuide @prettycyb3rgirl You still can calculate it on paper. It just becomes a test of commitment.

@KOTuathail @prettycyb3rgirl Thanks for reminding me… that explains why needing to know that on the CISSP exam wasn’t scary. Those NT4 certs are still valid! Only problem is I didn’t take the workstation exam so when the 2000 comprehensive upgrade exam was offered I couldn’t take it.

@FortinetGuide @prettycyb3rgirl That was standard for the tcp/ip Microsoft exam for mcse on NT

Note: Since NOV24 my focus has been on compliance and not Fortinet. I am now a Lead CMMC Certified Assessor working full time for a C3PAO. The only FortiGates I now manage are mine and my parents. I am still a reseller if you need help. Best to everyone and Long Live Fortinet.

@iyoushetwt You’d have to pay BlackBerry for using their patents.

Startup idea : Smartphone with keypad

@cyber_razz @AiTrendzz Go read NIST 800-88 to learn how to properly destroy data.

How To Delete Files Forever (So they can't be recovered) 🔗 CC (@AiTrendzz) Now as much as this would technically work, it’ll hurt your SSD badly Do with this information as you please

@UK_Daniel_Card Have used VPN through another state to watch games that are blacked out for my home area. Other than encrypting data, that’s the best use.

I want to talk about how when you use a VPN there's a few things to think about: 1) your ISP will have logs (netflow/dns) of your connecting to the VPN 2) the routers in the path may also log this 3) the ISP of the VPN provider will log these 4) the VPN provider may say no logs (I would not trust that but sure let's assume no logs) 5) the egress traffic will be logged 6) any services tied to your identity whilst on the VPN will have a log of your VPN egress IP with times/dates so VPNs simply move the point of detailed logging away from your ISP into that of another ISP the details in this are important, complex and full of variables. but if you think VPNs = NO TRACES ....... you would be wrong!

@UK_Daniel_Card Definitely use these anywhere that internet access is not available or unreliable. Also watch for their Black Friday sale.

I think a number of people don’t get how this works….. But these are fantastic for some use cases!

@techspence Gimme FortiGate, FortiSwitch and FortiAP and I can segment your network easily. Windows firewall isn’t needed at all for segmentation. What will be harder is you telling me which ports and protocols are needed between segments, but we can learn that if necessary.

Everyone wants to defend against ransomware… No one wants to segment their flat network becuse the windows firewall is “too difficult” 🤨

@adce626 Government agency that I helped build their process for reporting doesn’t pay bounties.

I got a government website database bug bounty.

@MalwareJake Yup! Try engaging any AI on CMMC and you’ll get answers that are wild because they include 1.0, 2.0, the draft proposed rule and, if you’re lucky, the first final rule. AI doesn’t know that the second final rule is still in rulemaking.

Security is hard, harder when you're using ChatGPT.

@stilla1ex Don’t forget to connect with people who are focused on general reading comprehension, a.k.a. governance risk and compliance.

@fbifido @FortinetGURU @Fortinet @FortinetPartner As long as the firewall’s interface is still active, no problem getting to the devices connected to it from the inside. Even if your gateway is down, your external interface address is still accessible, right?

@fbifido @FortinetGURU @Fortinet @FortinetPartner Look at the flow of traffic. If the target IP is active on your firewall, then the fact that somewhere beyond your firewall is down has no effect on accessing local addresses. If DNS is forwarded to a network that is inaccessible, that could be a problem.

@FortinetGURU @Fortinet @FortinetPartner @FortinetGuide Can we configure Hairpin NAT (VIP) on a LoopBack interface or a SDWAN interface ????