Fortigate Firewall Administration Course

Set up a FortiGate lab with GNS3 by installing VMware Workstation, importing the GNS3 VM, and installing the GNS3 all-in-one package. Activate licenses and load images from the resources folder.

Master FortiView in the FortiGate dashboard to monitor sources, destinations, applications, and IPsec and SSL VPN activity. Add and customize widgets, and review real-time policies for efficient visibility.

Create address objects and address groups in FortiGate by configuring subnets, IP ranges, FQDNs, geography, dynamic, and MAC addresses, then apply them in DMZ firewall policies.

Back up the FortiGate firewall from GUI or CLI, store on local PC or USB with optional encryption, and restore configurations via GUI or CLI, including TFTP-based transfers.

Explore Fortigate automation stitches that trigger actions from configuration changes to backups, and learn to configure, test, and monitor TFTP-backed backups via CLI scripts.

Learn how to upgrade FortiGate firmware from 6.4.5 to 6.4.7 by verifying release notes, checking licensing, downloading from Fortinet support, uploading the image, backing up config, and confirming the upgrade.

Configure a dhcp server on FortiGate firewall via cli and the graphical interface, setting the interface, gateway, ip range, and dns, then save with end.

Enable Fortigate dhcp relay to forward client requests to an external dhcp server, configure a dhcp pool, set port relay, and add a route so the firewall reaches the server.

demonstrates traffic shaping on FortiGate to control bandwidth by user or by ip, using shared and per ip shapers, with policy creation, destination and application targeting, and testing.

Learn to configure dynamic dns on FortiGate firewalls, mapping dynamic public IPs to a stable domain, using FortiGuard DNS and CLI when GUI is unavailable on VM and 1000 series.

Create VLANs on a Cisco switch, link them to Fortigate, configure VLAN interfaces and IP routing, and implement static routes to enable inter‑VLAN communication and Fortigate reachability.

Learn inter-vlan routing on FortiGate with two methods: firewall policy across VLAN 10 and VLAN 20, or a zones approach; test with a PC ping; policy offers traffic visibility.

Configure a redundant interface on a FortiGate firewall using CLI and the graphical interface, combining two ports into one LAN interface, assigning an IP, and testing failover.

Configure LACP on FortiGate and switch to form an active link aggregation across two FortiGate ports, enhancing redundancy and bandwidth, then verify connectivity with ping and failover tests.

Learn how to switch a FortiGate firewall from NAT to transparent mode, turning it into a switch behind a router, and configure its interface IP and gateway for internet access.

Enable nat in FortiGate transparent mode by configuring an ip pool and applying it in the firewall policy via cli, then verify connectivity with ping.

Configure FortiGate NAT with IP pools to translate addresses to public IPs. Explore overload, 1 to 1, fixed port range, and port block allocation, applied via dynamic IP pool policy.

Learn how Fortigate policy based routing overrides the routing table to steer specific traffic, using two ISPs and hands-on lab examples to route web traffic via a chosen interface.

This lecture explains FortiGate web filter profiles, categories, and actions (block, monitor, warn) with overrides, content filtering, and deep inspection in proxy mode.

Learn how a DNS filter blocks access by domain name resolution, enabling domain-wide control, botnet domain blocking, safe search, and category-based actions, integrated with FortiGate firewall policies.

Explore FortiGate application control to detect apps by category, assign monitor, block, or quarantine actions, enforce network protocols, and apply traffic shaping to manage bandwidth and user experience.

Explore intrusion prevention (ibis) on FortiGate, creating a custom profile, enabling botnet and signature-based protections, and applying policies to shield a web server from external attacks.

Configure a Fortigate IPv4 DDoS policy to detect and block tcp syn flood and icmp flood attacks, using lab topology, thresholds, and quarantine to protect the firewall and web server.

Fortigate local in policies protect internet-facing interfaces by restricting inbound admin traffic and implementing a two-policy approach: allow trusted admin access and deny all else, using cli and gui.

Learn to configure FortiGate's email filter to block spam, phishing, and malware using SMTP, POP3, and IMAP settings, FortiGuard and DNSBL integrations, and CLI options.

Learn to create and manage local users on a FortiGate firewall, assign them to groups, and enforce internet access via authenticated policies using both GUI and CLI steps.

Connect a FortiGate firewall to an LDAP (Active Directory) server to authenticate remote users, test connectivity, and manage LDAP groups for VPN access and administration.

Master captive portal setup to authenticate non-domain devices (linux, web servers) via local, radius, or AD users. Configure LAN portal, exempt sources/destinations, redirects, and customizable login pages (GUI and CLI).

Learn how FortiGate sd-wan rules control session distribution across multiple interfaces, using manual, best quality, lowest cost, and maximize bandwidth strategies guided by health checks, latency, jitter, and packet loss.