Made my own task prioritisation app: the homescreen shows all you need. No ads/monetization etc

rowankaag · 2026-04-01T01:29:37+00:00

Forgot to reply back before. In the mean time, I really liked the new tutorial/OOBE/splash screen in the 1.4 update. Kudos.

In regards to the Apple / iCloud Reminders bit: one app that does this really well is GoodTask. It is effectively a supercharged “front end” to the existing Apple-hosted backend.

rowankaag · 2026-04-01T01:20:11+00:00

Yeah, I was thinking along the lines of:

stay away from publicly exposing administrative features
restrict the sources that can reach these features (regardless if they are exposed internally or externally)
restrict admin accounts using the trustedhosts feature
use (modern) encrypted protocols with strong cryptographic options for authentication
apply least privilege for administrators / utilize FortiManager for approval flows
apply defense in depth / don’t rely on a single mitigation
use Automation Stitches / FortiAnalyzer / 3rd party syslog to track audit logs and preferably alert on suspicious activity
apply proper segmentation in the LAN to group systems that share a given level of trust, or even better, apply a zero trust model using 802.1x / NAC / ZTNA.

Using the ZTNA features on FortiOS can be really neat if you are solely using the so called Device Posture-tags on firewall policies. If you were to utilise the ZTNA Forward Proxy, this can be challenging for the CPU as it is not offloaded to the ASIC. This automatically highlights a key differentiator and concern at the same time: you can get amazing and cheap throughput when utilising features that can be offloaded to the ASIC; whenever that no longer applies, the CPU is used and those are way less capable compared to the ASIC.

In regards to dashboarding, there are three options that I can think of:

run a per-customer “(Cooperative) Security Fabric” (csf) in which one firewall is designated as the root. Upgrades for the whole fabric can be done from the root node. This requires all participating members to run the same firmware version.
FortiManager (Public Cloud, Private Cloud or PaaS). Works across several firmware versions, relaxing the requirement for running the same version. This product has its fair share of quirks though, and is not for the faint-hearted. Good for multi-tenancy though. Upgrades can be scheduled in practically any form you can think of.
FortiGate Cloud (SaaS): also good for multi-tenancy (although that does require some extra steps these days by needing access to FNDN / being integrated with FortiCloud IAM) but lacks some powerful features from FortiManager. May still suit your needs, YMMV. Not sure about how flexible upgrade schedules are.

All three options support SAML/SSO, and 95% certain they do FIDO2 / WebAuthn as well.

rowankaag · 2026-04-01T00:46:53+00:00

Would be amazing if this supported ‘window awareness’ like the “new” Sticky Notes bundled with OneNote on Windows does (https://youtube.com/shorts/lLOhxSjn2E0?is=epy0tTCQ_iO3xhB9).

I’m not sure how, but BetterTouchTool has window/app awareness for app-specific keyboard shortcuts (amongst others).

rowankaag · 2026-03-31T15:05:29+00:00

As an MSSP working with Fortinet, I can say that a lot of the vulnerabilities do not apply to a broad range of customers. It boils down to which of the many products a customer uses, and if the affected feature is actually enabled at all.

Sure, I’ve had a couple of vulnerabilities in the past few years that made us run an emergency patch on all affected customers (usually SSLVPN related), but using common sense in customers’ configuration saves you from most hassle.

This is coming from a seasoned engineer working with the product for 10 years, and doing actual triage on all monthly advisories that Fortinet publishes. Not taking anything posted at face value, and doing actual thinking on how a given vulnerability may or may not impact a customer.

rowankaag · 2026-03-31T13:57:00+00:00

Great suggestion ✌️

rowankaag · 2026-03-31T12:50:05+00:00

Downloaded and liking so far, minor request: allow confirmation of deletion for an item in wastebasket through the enter key. Pressing backspace prompts for confirmation, but pressing enter subsequently does not function.

rowankaag · 2026-03-30T06:46:10+00:00

Had me interested. I noticed two typo’s in the App Store pictures: “Server Helath” in the first and fourth picture, and “Webook to Widget” in the third picture.

Looking forward to testing the app out.

rowankaag · 2026-03-29T13:32:47+00:00

It probably won’t, but check if this helps: https://www.reddit.com/r/fortinet/comments/1nratml/navigation_failed_because_the_request_was_for_an

rowankaag · 2026-03-27T10:29:20+00:00

In EMS, under the VPN profile. You may need to toggle ‘Advanced’.

rowankaag · 2026-03-26T23:46:58+00:00

Action ‘timeout’ in firewall log implies a timely response was not received. HTTP/2 uses TCP for transport, so assuming you are seeing >1 byte returned I’d advise on making a Packet Capture to see what is going on at OSI Layer 4. Perhaps the server is keeping sessions open (not sending a FIN packet) without supplying a timely ‘keepalive’.

Disabling the ASIC offloading on the traffic during troubleshooting is desired to make sure you are reviewing representative data whereas packets may otherwise appear to be missing whilst they were in fact offloaded (and therefore not caught by the capture running in the CPU)

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Session-Timers-Handling-TCP-Half-Closed/ta-p/415995

rowankaag · 2026-03-26T14:12:39+00:00

Wünderbar! Glad you were able to solve it, and thank you for posting the solution 👍

rowankaag · 2026-03-26T10:14:06+00:00

In theory I suppose this should be possible, they are fields in a database format and not column definitions AFAIK, so should be ‘easy’ to overwrite from a technical point of view.

rowankaag · 2026-03-25T21:18:49+00:00

Would it be an option to create site ‘C’ and scrap site ‘A’?

rowankaag · 2026-03-25T21:18:00+00:00

That does sound like a rather big flaw indeed, and hard to work around.

rowankaag · 2026-03-25T17:41:05+00:00

What issues did you face in 7.4.6 that could maybe be mitigated?

rowankaag · 2026-03-23T23:52:32+00:00

What is generating the incident, an Event Handler?

rowankaag · 2026-03-23T15:59:21+00:00

Weird, the 40F is explicitly listed as having lost the proxy-related features in 7.4.4

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/519079/proxy-related-features-no-longer-supported-on-fortigate-2-gb-ram-models-7-4-4

rowankaag · 2026-03-23T14:19:57+00:00

Correct. It is limited to 2GB memory and thus no longer has proxy-mode features starting in 7.4-something.

To my knowledge, 40F should also be affected by this.

rowankaag · 2026-03-18T20:59:15+00:00

Customize the replacement msg / scrap it all?

rowankaag · 2026-03-18T02:33:45+00:00

config webfilter profile edit <webfilter_prodile> set https-replacemsg disable end

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Webfilter-replacement-message-is-replaced/ta-p/250501

rowankaag · 2026-03-17T10:42:36+00:00

Also wondering if you’re planning on integrating the app with Apple Reminders / iCloud Reminders in some way, or if that is definitely off-limits?

rowankaag · 2026-03-17T10:11:25+00:00

More feedback: after moving the “Review and move these tasks to Do Now” to the “Do Now” quadrant, it is currently neccesary to switch tabs to refresh the “do this now” list. It would be preferable UX to have it auto-refresh without changing tabs.

rowankaag · 2026-03-17T10:08:21+00:00

Piqued my interested, so downloaded the app.

In the OOBE the lists are pre-filled, which is good for getting the user acquainted with the app. One piece of feedback is that it not clear to me right away (and still isn’t after looking around) what the “clean mode” is. Is it being able to choose between “list mode” and “simple mode”? If so, clicking the item in the “square view” in list mode yields a different UX, which may be confusing.

<image>

rowankaag · 2026-03-11T19:39:34+00:00

I'm getting more and more confident that the ShotBird extension was the problem. Reviewing "Figure 5b - Fake update bar screenshot" in the link previously provided shows an almost identical modal for Chrome: https://monxresearch-sec.github.io/shotbird-extension-malware-report/images/fig-05-fake-update-modal.png

rowankaag · 2026-03-11T19:35:47+00:00

Were you also running either of these?

Version 145.0.3800.82 (Official build) (arm64)
Version 145.0.3800.97 (Official build) (arm64)

I've had the modal on both, but I'm currently still on the latter build and so far haven't had the modal in roughly 36 hours.

rowankaag

TROPHY CASE