Clik here to view.
Is a registered Domain really Unavailable?
There is a small but surprisingly important piece of information that the DNS does not normally tell you. You query a domain name and discover that it is already registered. From the perspective of a...
View ArticleClik here to view.
October 2026: Another leap second coming???
An unknown number of NTP servers may mistakenly announce an upcoming leap second during October 2026. If this occurs some NTP clients’ time could briefly be in error by one second. The atomic second...
View ArticleClik here to view.
Modbus Fundamentals
If you’re dealing with industrial protocols, you’ll certainly have seen Modbus packets in your network. But what are these packets used for, and what data do they contain? Before we dive into Modbus,...
View ArticleClik here to view.
Bidirectional Forwarding Detection (BFD) on a Palo
To improve the convergence times of a routing protocol, BFD can be used. This feature monitors the adjacencies using some kind of ping packets. It detects link failures much faster than the routing...
View ArticleClik here to view.
Network Encryption with MACsec: Basics & Cases
Modern networks are not only threatened by external attacks but are increasingly exposed to internal risks as well. These include unauthorized physical access to network components or manipulated data...
View ArticleClik here to view.
Packet Capture of a Post-Quantum Site-to-Site VPN
After using several post-quantum secure VPN tunnels (here and there), I was interested in how this key exchange with ML-KEM looks on the wire. Especially in direct comparison to a classical VPN setup...
View ArticleClik here to view.
PQC VPN-Tunnel between Palo Alto FortiGate
Since we have learned the basics of post-quantum secure VPN tunnels, let’s configure a site-to-site VPN between a Palo Alto Networks firewall and a FortiGate with PQC ciphers to verify vendor...
View ArticleClik here to view.
PQC VPN-Tunnel with Palo
As the advent of practical quantum computing draws closer, security vendors are increasingly introducing post-quantum cryptographic (PQC) algorithms to protect existing security architectures against...
View ArticleClik here to view.
FortiGate Enables NAT for IPv6 by Default 🤦
Fortinet has a misstep in its IPv6 settings: NAT66 is enabled by default for every policy. Not only does this make no technical sense and go against established best practices, but in my view, there’s...
View ArticleClik here to view.
Palo Alto Networks NGFW “SSL Inbound Inspection” with different Certificate
I had a use case where I wanted to use the SSL Inbound Inspection on a Palo, but with a different X.509 certificate than the one on the server itself. That is: the backend server has its self-signed...
View ArticleClik here to view.
Basic IPv6 Messages (v2): Wireshark Captures
In my IPv6 classes, I always teach the basic IPv6 messages as seen on the wire. There’s so much new stuff, such as Router Advertisements, Duplicate Address Detections, Neighbour Solicitations, and so...
View ArticleClik here to view.
Decrypting TLS with Wireshark
Did you know that you can easily decrypt TLS (mostly HTTPS) traffic with Wireshark? Well, only if you have the keys. ;) This really is a game-changer if you’re stuck with troubleshooting encrypted...
View ArticleClik here to view.
Introducing FortiNite: Fortinet’s Low‑Latency Power‑Up for Fortnite
After years of customers confusing Fortinet with Fortnite, the two companies finally decided to lean into the chaos. The result: FortiNite — a joint innovation designed to deliver “next‑gen latency...
View ArticleClik here to view.
Protocol Independent Multicast (PIM) Capture
You never stop learning. One topic that hadn’t crossed my path in the past decade is: Multicast. Whew. Alongside all the technical literature, online presentations, and various blog posts, I decided to...
View ArticleClik here to view.
Multicast Routing w/ Palo
A rare use case on a Palo (at least from my point of view): Multicast Routing. And it can become as complex as you want. Fortunately, the basics are relatively easy to configure, at least if you have a...
View ArticleClik here to view.
Security-as-a-Podcast
Es ist so weit – mein Kollege Florian und ich haben einen Podcast gestartet! 🎉 Der Security-as-a-Podcast beschäftigt sich mit Netzwerksicherheit – aber nicht im klassischen „Wir erklären euch die...
View ArticleClik here to view.
Editing Palo Configs by Scripts: pan-os-php
There are recurring cases where tasks cannot be edited quickly and easily using the classic Palo Alto Networks GUI or Panorama. For example, editing multiple policies at once, such as during a zone...
View ArticleClik here to view.
Azure PTP Accuracy
The Network Time Protocol (NTP) is widely used to synchronize computer clocks. The Precision Time Protocol (PTP) can be used as a time source as well, which is expected to be accurate within...
View ArticleClik here to view.
Bad IPv6 Approaches
I just got a few emails from an administrator of a medium-sized company, asking some IPv6 questions. They want to use IPv6 to reach the Internet, using two ISPs, while remaining IPv4-only on their...
View ArticleClik here to view.
Palo Alto Networks Announces Strategic Shift to Apparel Manufacturing
Palo Alto Networks, a global leader in cybersecurity solutions, has announced a significant strategic shift. The company will transition from its core cybersecurity business to exclusively focus on...
View Article
![Suupeas – Fall in Dream (2026-10-09) [Single, FLAC 24bit/48kHz]](http://getimg.link/images/2026/10/17/442240.md.jpg)
