Advance Security, Fine Tuning of Fortinet Fortigate Firewall

Configure static routes on Fortigate to control packet forwarding in smaller networks. Distinguish directly connected, fully specified, and backup static routes and understand how administrative distance determines route precedence.

Configure static routes on the Fortigate and interconnected routers to reach LAN networks such as 192.168.0.0/30, the 10 network, and 172.16.1.0 network, then verify with ping and show router static.

Compare RIP v1 and RIP v2 as distance-vector routing, explaining hop count up to 15, classful versus classless updates, and how subnet information and multicast differ.

Configure RIP version 2 on Fortigate and three Cisco routers, disable auto summarization, synchronize timers, and verify routes with ping.

Explore the open shortest path first (ospf) routing protocol, a link-state, non-proprietary alternative to rip, with multicast updates, vlsm, areas, triggered updates, and cost-based routing decisions.

Learn end-to-end ospf configuration on fortigate and cisco routers, set router IDs, advertise networks in area 0, validate adjacencies, and verify learned routes.

Learn how the BGP exterior gateway routing protocol uses path vector routing within autonomous systems, and why its slow updates help stabilize internet routing.

Configure bgp on fortigate with two routers, using update source loopback to form a neighbor with r1's loopback 1.1.1.1, and advertise the loopback and 10.10.10.0 networks.

Learn to configure BGP on FortiGate, set router ID and neighbor AS 3000, advertise connected networks, and verify routes and reachability between R1, R2, and PCs.

Explore higher availability in Fortigate by using virtual router redundancy protocol, cluster protocol (fgcp), session life support protocol (fgsp), and redundancy utm protocol (frup) to enable active-active or active-passive modes.

Configure Fortigate ha in active-passive mode using heartbeat on port 4 and 5, with group name MYHA and session pickup for seamless failover and synchronization of configs to the backup.

Configure active-active Fortigate HA using FGCP to enable load balancing failover between primary and backup devices. Set identical group name and password, and monitor sessions with heartbeat interfaces for synchronization.

Learn how Fortigate VDOMs create multiple virtual domains with separate policies and routing, keeping traffic confined, and how inter-VDOM links enable cross-VDOM communication using dedicated interfaces.

Configure Fortimanager in GNS3 to centrally manage multiple Fortinet devices, including Fortigate, Fortiswitch, and VPN policies. Automate backups, ensure consistent FortiOS versions, and push security policies across the network.

Learn how Fortianalyzer collects and correlates logs from Fortinet devices to identify threats and reduce detection time, and how to configure Fortianalyzer in GNS3 for log convergence.

Configure FortiAnalyzer and FortiGate to forward device logs, add the FortiGate in FortiAnalyzer, and establish a secure ssl connection using tls 1.0 with low encryption.

Explore PRTG, a Paessler network monitoring software, and learn how to download, install, enter a license key, and access the login and backend services for basic monitoring and sensors.

Configure SNMP on a Fortigate device to communicate with PRTG, using SNMP versions 1, 2, or 3, and choose relevant OIDs from the MIB to send traps.

Add Fortigate to PRTG and configure SNMP v2 with the community string. Enable auto discovery and select sensors such as ping, uptime, CPU usage, and disk usage.

Understand administrative domains (ADOMs) in Fortianalyzer and how they map Fortinet devices for secure multi domain administration. Distinguish ADOMs from Fortigate VDOMs and learn admin roles, super user versus profuser.

Explore virtual domain interfaces (VDOMs) on Fortigate, where each VDOM has its own security policy and routing table, isolates traffic, and supports inter-VDOM links for controlled cross-VDOM access.

Enable VDOMs in Fortigate via the command line, select between split VDOM and multiVDOM modes, and understand licensing, VM image limits, and GUI visibility after CLI enablement.

Explore the VDOM modes in Fortigate, including split task VDOM and multi VDOM configurations, and outline independent, management, and mesh setups with root VDOM policies.

Learn how to create and delete Fortigate VDOMs using the command line, enable split VDOM mode on FortiOS 6.0+, and understand why root and FGTraffic VDOMs cannot be removed.

Explore how to delete a Fortinet Fortigate VDOM by purging firewall policies, IPv4/IPv6 policies, VIP, and static routes, then delete the VDOM via config vdom.

Assigns interfaces to a vdom and demonstrates moving ports 5 and 6 into the FGTraffic vdom, then configures vdom-specific policies and traffic management via command line or GUI.

Discover how to create a VDOM link in Fortigate to connect two VDOMs, assign interfaces, and optionally set IP addresses for inter-VDOM routing.

Configure loopback interfaces on Fortigate to keep devices online for diagnostics and VPN troubleshooting, using an address such as 20.20.20.20.

Enable captive portal on Fortigate to present a login page for wifi users, authenticate via local users or a portal, and grant internet access based on user groups and policies.

Learn to customize Fortigate captive portal by editing system replacement messages, HTML and CSS for login and error pages, upload logos, and tailor messages for ssl vpn and blocked access.

Explains hair pinning in Fortigate, redirecting internal traffic through the firewall to enforce security policies. Demonstrates creating a VIP for a public IP to internal server port forwarding for telnet.

Automate Fortigate tasks with automatic scripting to back up configurations via CLI or GUI, and transfer backups to a TFTP server in a continuous loop.