Fortinet: FortiGate config leaks are genuine but misleading Fortinet has confirmed that previous analyses of records leaked by the Belsen Group are indeed genuine FortiGate configs stolen during a zero-day raid in 2022. The leaked data includes IP addresses, configurations (including firewall rules), and passwords – some of which were in plain text, according to infosec watcher Kevin …
Network firewalls are dead and have been for years.
It's all at the application layer now, abusing permitted allowed connections with the attack.
I'm not aware of any FOSS security products that cover all modern broad spectrum attack surfaces. You can do it with FOSS, but is requires integration of 25-30 different products. If can be done, but the effort and supprotability is huge. It's a brave organisation that would do this.
Closed source usually are suites with better coverage - and support.
Only some vendors seem to be CVE factories. Others seem to know what "secure coding" means. But they change more.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
