NSE 4
FortiGate Security
In this three-day course, candidates will learn how to use basic FortiGate features, including security profiles. In interactive labs, candidates will explore firewall policies, user authentication, SSL VPN, dial-up IPsec VPN, and how to protect their network using security profiles such as IPS, antivirus, web filtering, application control, and more. These administration fundamentals will provide candidates with a solid understanding of how to implement basic network security.
Course Description
In this course, you will learn how to use basic FortiGate features, including security profiles.
In interactive labs, you will explore firewall policies, the Fortinet Security Fabric, user authentication, SSL VPN, and how to protect your network using security profiles, such as IPS, antivirus, web filtering, application control, and more. These administration fundamentals will provide you with a solid understanding of how to implement basic network security.
Who Should Attend
Networking and security professionals involved in the management, configuration, administration, and monitoring of FortiGate devices used to secure their organizations' networks should attend this course.
You should have a thorough understanding of all the topics covered in the FortiGate Security course before attending the FortiGate Infrastructure course.
Prerequisites
• Knowledge of network protocols
• Basic understanding of firewall concepts
Agenda
1. Introduction and Initial Configuration
2. Security Fabric
3. Firewall Policies
4. Network Address Translation (NAT)
5. Firewall Authentication
6. Logging and Monitoring
7. Certificate Operations
8. Web Filtering
9. Application Control
10. Antivirus
11. Intrusion Prevention and Denial of Service
12. SSL VPN
Objectives
After completing this course, you will be able to:
• Deploy the appropriate operation mode for your network
• Use the GUI and CLI for administration
• Identify the characteristics of the Fortinet Security Fabric
• Control network access to configured networks using firewall policies
• Apply port forwarding, source NAT, and destination NAT
• Authenticate users using firewall policies
• Understand encryption functions and certificates
• Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
• Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites
• Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports
• Fight hacking and denial of service (DoS)
• Offer an SSL VPN for secure access to your private network
• Collect and interpret log entries
FortiGate Infrastructure
In this two-day course, candidates will learn how to use advanced FortiGate networking and security features. Topics include features commonly applied in complex or larger enterprise or MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, site-to-site IPsec VPN, SSO, web proxy, and diagnostics.
Course Description
In this course, you will learn how to use advanced FortiGate networking and security.
Topics include features commonly applied in complex or larger enterprise or MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, site-to-site IPsec VPN, single sign-on (SSO), and diagnostics.
Who Should Attend
Networking and security professionals involved in the design, implementation, and administration of a network infrastructure using FortiGate devices should attend this course.
This course assumes knowledge of basic FortiGate fundamentals. You should have a thorough understanding of all the topics covered in the FortiGate Security course before attending the FortiGate Infrastructure course.
Prerequisites
• Knowledge of OSI layers
• Knowledge of firewall concepts in an IPv4 network
• Knowledge of the fundamentals of FortiGate, as presented in the FortiGate Security course
Agenda
1. Routing
2. SD-WAN Local Breakout
3. Virtual Domains (VDOMs)
4. Layer 2 Switching
5. IPsec VPN
6. Fortinet Single Sign-On (FSSO)
7. High Availability (HA)
8. Diagnostics
Objectives
After completing this course, you will be able to:
• Analyze a FortiGate route table
• Route packets using policy-based and static routes for multipath and load-balanced deployments
• Configure SD-WAN to load balance traffic between multiple WAN links effectively
• Inspect traffic transparently, forwarding as a Layer 2 device
• Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs)
• Establish an IPsec VPN tunnel between two FortiGate devices
• Implement a meshed or partially redundant VPN
• Diagnose failed IKE exchanges
• Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)
• Deploy FortiGate devices as an HA cluster for fault tolerance and high performance
• Diagnose and correct common problems
System Requirements
If you take the online format of this class, you must use a computer that has the following:
• A high-speed Internet connection
• An up-to-date web browser
• A PDF viewer
• Speakers or headphones
• One of the following:
o HTML 5 support
