How to create DHCP server and a policy in the Fortigate

-
Here is an example script that demonstrates how to use the  fortigate-api  package to create a DHCP server and a policy in the Fortigate   from fortigate_api import FortigateAPI # Create a FortigateAPI object fgt = FortigateAPI(host="host", username="username", password="password") # Create a DHCP server data = {     "default-gateway": "192.168.255.1",     "netmask": "255.255.255.0",     "interface": "vlan.123",     "ip-range": [         {"start-ip": "192.168.255.2", "end-ip": "192.168.255.254",}     ], } fgt.dhcp_server.create(data) # Create a policy in the Fortigate data = dict(     name="POLICY",     status="enable",     action="accept",     srcintf=[{"name": "any"}],     dstintf=[{"name": "any"}],     srcaddr=[{"name": "all"}],     dstaddr=[{"name&quo
Post a Comment

Cyber Crime related awareness

-

 Cyber identity theft and cyber impersonation:-

What constitutes the crime and punishment in world-

1. Creating a fake account in someone else name on MS using login credentials of someone else.

2. It is a crime under section 66C and 66D of the information technology act 2000.

3. Punishment for carrying out such a crime is 3 years in jail and fine up to rupees 100000.

How to avoid (public information)-

1. Follow password best practices.

2. Identifying phishing emails and avoid phishing.

3. Use safe net banking / mobile banking practices.

4. Making sure that credit / debit card PIN are kept secret.

5. Use of social media in a safe manner.

Sending and publication of obscene or sexually explicit materials:-

What constitutes the crime and punishment involved- 

1. Is an offence under section 67 and section 67A of the information technology Act, 2000.

2. Under section 67, for fishing or transmitting of obsense material-liable to imprisonment of 3 years with fine upto rupees 5 lakh.

3. Under section 67A for publishing or transmitting sexually explicit material-liable to imprisonment of 5 year with the fine of rupees 10 lakh.

How to avoid (public information)-

1. Do not send to anyone any  defamatory, offensive or obscene message which may be cause any individual or group of people a negative impact.

2. Do not transmit any sexually explicit material with any WhatsApp group, messenger, etc.

3. Immediately delete if any such message is received so that there is no scope and unintentionally forwarding.

4. Follow safe browsing habits.

Violation of privacy through capturing, publishing and transmitting image of private area of a person without consent:-

1. Constitutes a crime under section 66E of the information technology Act, 2000.

2. Punishable with three years of imprisonment and 200000 rupees of fine.

3. Child pornography 🚸- sexual abuse, creating video clip 📷, publishing, transmitting or facilitating of these in any way, of any person under 18 years of age-is a crime under section 67B of the Information Technology Act, 2000.

4. Section 67b stipulates 5 year imprisonment and 10 lakh rupees fine for first instance, which goes up to 7 years imprisonment and 10 lakh rupees fine for repeat offences.

How to avoid-

1. Do not capture yourself / or allow anyone else to capture your private images using any electronic device.

2. Do not capture anyone in a physically private space.

3. Be aware of possible cameras in public spaces such as trial rooms of retail stores or malls.

4. Do not trust anyone-no matter how intimate relationship- to capture your private images/ videos.

Cyber terrorism threatening unity, integrity, security or sovereignty of India:-

1. Cyber terrorism is an offence under section 66F of Information Technology Act, 2000. It is punishable with imprisonment for life time.

2. Cyber terrorism as the name suggest if is any activity related to computer resources (including mobile phones), which may lead- 

3. To the death or injuries to any person.

4. May to disruption of critical public services.

5. May lead to negatively affect the relationship of this country with any foreign state.

6. Can harm national security or integrity or sovereignty.

Awareness plan for citizens:- 

Be vigilant for any cyber activity which metric ton the unity and integrity of the country and society.







Comments

Post a Comment

Popular posts from this blog

How to Configure VXLAN in FortiGate Firewall

-
Image
How to Configure VXLAN in FortiGate Firewall A brief explanation of the given topology: - Ø On top of all, there are two FortiGate Firewalls with L3 connectivity in between. Ø Under Each Firewall we have one Cisco Switch with two VLAN configured i.e.;3500 & 3600 Ø Uplink for switches has been configured with 802.1Q trunk which is connected to FortiGate Firewall. Ø Each switch has two PCs connected one in VLAN 3500 & other one in 3600 VLAN. Ø We have configured VLAN and VXLAN on both the FortiGate Firewall. Ø In this topology PCs in the same VLAN will be able to communicate with each other through a L3 link using VXLAN technology and they will be encapsulated such that both the PCs will think that they are within the L2 domain.           FortiGate Firewall Configuration VXLAN Configuration: - FGT-1: config system vxlan     edit "vxlan3500"         set interface "port
Read more

Higher Availability in FortiGate and VRRP in Cisco

-
Image
  Higher Availability in FortiGate and VRRP in Cisco A brief explanation of the given topology: - Ø On top of all, there are two FortiGate Firewalls one Active other one as Standby. Ø With the Higher Availability (HA) configured for handling the Failover of active Firewall. Ø There are two CORE switches with VRRP Configuration: CORE-1 as Master and CORE-2 as Slave. Ø Between two CORE-1 and CORE-2, two links in the Port Channel have been configured. Ø SVIs and static default route toward the Firewall has been configured for LAN users. Ø Also, the DHCP server has been configured for DATA and VOICE VLANs. Ø Two Layer 2 switches with uplinks as trunk and VLANs. FortiGate Firewall Configuration HA Configuration in FortiGate Firewall: - Here I have kept by default priority i.e.; 128 for “ ACTIVE-FIREWALL ” whose role is primary and I have set 100 for the “ STANDBY-FIREWALL ” whose role is secondary.   By default, the selection process of HA in FortiGat
Read more

Python Script to take the Backup of Multiple device in a Network

-
Image
from netmiko import ConnectHandler Sw_1 = { 'device_type': 'cisco_ios', 'host': '192.168.6.10', 'username': 'admin', 'password': 'Admin@123', 'port': 22, # optional, defaults to 22 'secret': 'secret', # optional, defaults to '' } Sw_2 = { 'device_type': 'cisco_ios', 'host': '192.168.6.20', 'username': 'admin', 'password': 'Admin@123', 'port': 22, # optional, defaults to 22 'secret': 'secret', # optional, defaults to '' } Sw_3 = { 'device_type': 'cisco_ios', 'host': '192.168.6.30', 'username': 'admin', 'password': 'Admin@123', 'port': 22, # optional, defaults to 22 'secret': 'secret', # optional,
Read more