LAB INDEX / NOTES FROM THE LAB BENCH
TEST. BREAK. TRACE. Then write it down.
A network & security engineer's lab notebook — things built, broken, traced, and documented.
005 lab notes
13 topics
upd. 15 AUG 2026
/ INDEX
#fortimanager — 3 notes
/005
Catch a Silently Removed Security Profile — FortiManager + FortiAnalyzer
Someone edits a policy and drops the IPS profile. Traffic still flows, logs still look normal — inspection is just gone. Here's the FortiManager + FortiAnalyzer pattern that catches it in minutes, with a name attached.
/004
ADVPN at Scale with FortiManager Templates
Hub-and-spoke IPsec hairpins every branch-to-branch flow through the datacentre. ADVPN fixes that with on-demand shortcuts — and FortiManager templates let you roll it out to fifty spokes without touching fifty CLIs.
/001
One Template, Fifty Firewalls — FortiManager Metadata Variables
A CLI template is only reusable if the per-device bits are variables. Here's how metadata variables turn a single FortiManager template into a consistent rollout across an entire fleet.