(Fortinet NSE-4): Course Topics
FortiGate deployment
- Perform initial configuration.
- Implement the Fortinet Security Fabric.
- Configure log settings and diagnose problems using the logs.
- Identify and configure different operation modes for an FGCP HA cluster.
- Diagnose resource and connectivity problems.
Virtual Domains
- Describe and configure VDOMs to split FortiGate into multiple virtual devices.
- Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs).
Introduction and Initial Configuration
- Deploy the appropriate operation mode for your network.
- Use GUI and CLI for administration.
Routing and Layer 2 switching
- Analyze a FortiGate route table.
- Route packets using policy-based and static routes for multipath and load-balanced deployments.
- Configure and route packets using static and policy-based routes.
- Configure SD-WAN to load balance traffic between multiple WAN links effectively.
- Configure FortiGate interfaces or VDOMs to operate as Layer 2 devices.
- Route packets using ECMP routing.
Certificate Operations
- Understand encryption functions and certificates.
Fortinet Single Sign-On
- Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD).
ZTNA
- Understand the fundamentals and benefits of using ZTNA.
- Configure and implement different SSL-VPN modes to provide secure access to the private network.
- Implement a meshed or partially redundant IPsec VPN.
- Configure SSL VPN for remote access.
- Offer an SSL VPN for secure access to your private network.
- Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies.
IPsec VPN
- Configure SSL IPSec VPN for remote access.
- Establish an IPsec VPN tunnel between two FortiGate devices.
- Implement a meshed or partially redundant VPN.
- Diagnose failed IKE exchanges.
Network Address Translation
- Apply port forwarding, source NAT, and destination NAT.
Logging and Monitoring
- Collect and interpret log entries.
Web filtering
- Configure and implement web filtering on fortigate firewall.
- Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites.
- Antivirus
Application Control
- Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports.
Content inspection
- Describe and inspect encrypted traffic using certificates.
- Identify FortiGate inspection modes and configure web and DNS filtering.
- Configure application control to monitor and control network applications.
- Explain and configure antivirus scanning modes to neutralize malware threats.
- Configure IPS, DoS, and WAF to protect the network from hacking and DDoS attacks.
- Apply web filter and application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports.
High Availability
- Deploy FortiGate devices as an HA cluster for fault tolerance and high performance.
Firewall policies, DNAT and authentication
- Identify and configure how firewall policy NAT and central NAT work.
- Identify and configure different methods of firewall authentication.
- Explain FSSO deployment and configuration.
- Authenticate users using firewall policies.
- Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies.
- Control network access to configured networks using firewall policies.
- Use GUI and CLI for administration.
- Control access to network resources using firewall policies.
Intrusion Prevention and Denial of Service
- Fight hacking and denial of service (DoS).
- Protect your network against known attacks using IPS signatures.
- Mitigate and block DoS attacks.
Security Fabric
- Configure the Fortinet Security Fabric.
- Identify the characteristics of the Fortinet Security Fabric.
Diagnostics
- Diagnose and correct common problems.