Fortinet Certified Professional (FCP) FortiManager Course

Name: Fortinet Certified Professional (FCP) FortiManager Course
Rating: 3.7 (16 reviews)

Mastering FortiManager: Centralized Security Management Essentials Lab Course

Created bySecurity Gurus

Last updated 3/2024

English

English [Auto],

What you'll learn

Understanding FortiManager: Gain a comprehensive understanding of the architecture, deployment options, licensing, and feature sets of FortiManager.
Configuring FortiManager: Learn how to set up and configure FortiManager for centralized management, including initial setup, integration with Fortinet devices
Device Management: Acquire skills in adding and managing devices within FortiManager, performing device provisioning, configuration synchronization
Policy Management: Learn to centrally manage policies across multiple devices, implement role-based administration, utilize policy templates

Course content

8 sections • 65 lectures • 9h 32m total length

Introduction2:11
Set up a comprehensive FortiManager lab with Windows Server, Cisco gear, and FortiGate, then configure FortiManager components, device manager, policies, and AD/LDAP authentication for an OSPF VPN hub-and-spoke topology.

Uploading and Setting Up Windows Server Part 18:48
Uploading and Setting Up Windows Server Part 28:59
Integration Pack Install - Linux6:53
Install the Linux integration pack from GitHub, either via the script or by adding the repository, then use the Linux client for VNC connections to virtual machines.
Uploading and Setting Cisco Switches12:51
Adding The WAN Router mikrotik4:51
Learn to add and configure a Mikrotik router OS in a virtual lab: upload the image, rename to hda.qcow2, boot, and access the web GUI with default admin credentials.
Uploading and Testing Fortigate Firewall12:51
Uploading and Testing Fortimanager8:02
Upload the Fortinet FMG v7 folder to the event server via FTP, then configure FortiManager by creating a 100 GB disk, adding a FortiManager node, and testing connectivity.
Adding Other Images8:59
Upload 40 authenticator images and linux images (slacks, tiny core, ti linux) to the FortiManager lab, rename the fach image, create a second hard drive, and boot to verify connectivity.
Adding Windows 10 Part 17:16
Adding Windows 10 Part 214:26

Connecting To Get Trial - FMG11:24
Configuring WAN ROUTER7:14
Configure a Mikrotik WAN router by setting up LAN interfaces with addresses, linking ports for management and FMG connections, and implementing a masquerade firewall rule to enable internet access.
Initial Setup - FMG6:52
Initial Setup - FGT8:16
Security considerations3:44
Fortinet FortiManager security recommendations enforce a trusted host to limit administrator access. Set a single IP or subnet, apply GUI and CLI restrictions, and require complex passwords.
Trusted hosts Lab4:38
Set up a trusted host in FortiManager to restrict logins by a specific IP or network, configure the admin user with the IP, save, and verify access.
Security Recommendations
GUI overview6:06
Explore the FortiManager GUI overview, covering the banner navigation, device manager, group creation, policy installation, web CLI, and user theme customization.
Restarting and shutting down3:47
Master restarting, shutting down, and resetting factory defaults of FortiManager using gui (settings dashboard, unit operation widget) and cli commands like execute restart, execute shutdown, and execute reset all settings.

Communication through protocols3:31
Explain how the 4D manager uses protocols to deliver Fortiguard services to devices, enable 4D analyzer features, and support device management via the FG FM and 4D guard protocols.
Communication through protocols Quiz
Configuration through Device Manager4:32
Configure devices through device manager by syncing a device database from FGFM; edit via device manager or central management modules, then install to apply and overwrite device database as needed.
Configuration through Device Manager Quiz
ADOMs and devices5:04
ADOMs and devices Quiz
Operations8:20
Master FortiManager operations to synchronize FortiGate devices via device and policy layers, including install device settings, policy packages, quick install, import, retrieve configuration, and revert workflows.
Operations Quiz
Key features of the FortiManager system3:55
Key Features of the FortiManager System

Configure Fortimanager Interface2:22
Adding Fortigate to Fortimanager6:16
FMG
config system global
set ssl-low-encryptio enable
set enc-algorithm low
set fgfm-ssl-protocol sslv3
Installing the First Policy4:40
Install the first policy from FortiManager to FortiGate, allowing all traffic from the management network (192.168.1.0) from port3 to port1, using the policy package and device settings.
Fixing Installation Failed6:28
Diagnose and fix a policy installation failure in FortiManager by inspecting logs, removing a faulty VPN certificate CA entry, and reinstalling the policy.
Preparing FW2 Part 17:37
config system interface
edit "port1"
set vdom "root"
set ip 10.10.20.1 255.255.255.0
set allowaccess ping
set type physical
set alias "WAN1"
set snmp-index 1
next
edit "port2"
set vdom "root"
set ip 10.10.2.254 255.255.255.0
set type physical
set alias "LAN"
set snmp-index 2
next
edit "port3"
set vdom "root"
set ip 192.168.2.254 255.255.255.0
set type physical
set alias "MGMT"
set snmp-index 3
end

config router static
edit 1
set gateway 10.10.20.254
set device "port1"
next
end

config system dns
set primary 1.1.1.1
set secondary 1.0.0.1
end
Preparing FW2 Part 213:40
Configure a static route to reach FortiManager, create an inbound FortiGate policy for ICMP test, and verify connectivity through a Mikrotik router with a FortiManager virtual IP mapping.
Configuring HA for FW214:40
Add HA to FortiManager4:55
Device & Groups3:49
Table View & More13:10
Switch between table view, map view, ring view, and folder view to manage FortiManager devices. Install policy, monitor synchronization status, and refresh or resynchronize devices.
Firmware upgrade & templates6:25
Device database (DB)4:37
Device DB - Dashboard8:39
Explore the device database dashboard in FortiManager, accessing system information, license data, Fortiguard services, and configuration details with revision history. Build and copy custom dashboards across devices.
Device DB - Dashboard
Device DB - configuration management12:12
Learn how FortiManager maintains a device configuration repository, manages revisions, and deploys or revert configurations across devices, with status, history, and download options.
Device DB - Network Interface6:31
Explore the device database network interface insights, create interfaces and zones, map zones to normalized interfaces for policy use, and perform packet captures on Fortigate interfaces for analysis with Wireshark.
Device DB - Network Interface
Device DB - System HA1:39
Learn how to handle high availability on FortiGate devices using 4D manager, including its read-only HA pane, and why direct FortiGate configuration is recommended over remotely scripting.
Device DB - CLI Configurations1:56
Access and configure device settings via the device database cli configurations, including options not visible in the FortiManager GUI, and enable ssl vpn configuration through feature visibility.
Scripts13:39
Provisioning Templates21:11
Explore provisioning templates and template groups in FortiManager, including system, sd-wan, cli, and nsx-t templates. Publish these configurations to multiple devices and manage site-wide dns, ntp, FortiGuard, and admin settings.
New Topology + Removing Devices17:03
execute factoryreset
Adding New Devices to Fortimanager23:34

About policies7:35
Learn how FortiManager defines and applies security policies and policy packages across devices and VDOMs, including NAT, PAT, security profiles, and VPN options.
About Policies Quiz
Policy workflow2:22
provision new devices or VMs with FortiManager, assign system templates and dynamic objects. define policy packages and manage objects, policies, and device updates in daily operations.
Managing policy packages20:01
Create, edit, and assign policy packages in FortiManager, organize them with folders, and install to specific devices while using policy checks, feature visibility, and find and replace to optimize objects.
Managing policies17:05
Managing Objects - Addresses12:59
Managing objects - Service objects & Schedules12:56
Create and configure service objects and service groups for firewall and proxy use, assign ports (tcp/udp/sctp), and attach them to policies; set up one-time and recurring schedules.

Task Monitor6:02
Track policy pushes and device configurations with the task monitor, showing installation status, progress reports, and any errors across managed devices.
Managing administrator accounts11:30
Global administration settings9:03
Authentication4:51
Configuring Active Directory11:51
Configure Windows Server Active Directory by setting a static IP, installing the Active Directory Domain Services role, and promoting it as a lab.local domain controller with LDAP access for FortiManager.
Creating User In AD For Fortimanager3:30
Create an active directory group and three users for FortiManager authentication. Add users to the group, set passwords and never expire, and plan policies to allow FortiManager access.
Configuring Policy & Objects to Allow AD9:55
Configure policy and objects to allow Active Directory from 40 manager to add, using port three to port two, ldap service, and icmp tests to verify connectivity.
Adding LDAP Authentication to Fortimanager10:40
Learn to configure LDAP authentication for FortiManager by linking to Windows Active Directory, defining the LDAP server (port 389), and logging in with AD users and groups.

Configuring Spoke1 & Spoke2 Interfaces10:40
Configure ldap authentication in FortiManager by connecting to an Active Directory server, creating a remote ldap server connection, and using ldap groups to authorize logins.
Configuring Hub, Spoke1, Spoke2 OSPF15:34
Configure a hub-and-spoke OSPF setup on FortiManager, assigning router IDs, area zero, and networks for firewall one and spokes, validate neighbors, and implement ICMP firewall policies for cross-network connectivity.
VPN Manager Hub and Spoke - Creating VPN Community Part 16:26
Configure a hub-and-spoke vpn community in FortiManager, enabling spokes to communicate through the hub via ipsec tunnels and applying phase one and two settings with auto negotiate.
VPN Manager Hub and Spoke - Creating Addresses Part 26:31
Configure hub-and-spoke vpn addresses by defining hub LAN 10.10.1.0/24, creating a per-device mapped 10.10.0.0/16 for spoke devices, and adding a static 10.10.0.0/16.
VPN Manager Hub and Spoke - Adding The Gateways Part 38:49
learn to add hub and spoke gateways to a Fortinet FortiManager VPN community, configure managed gateways, set protected subnets with per device mappings, and enable automatic routing, installing device settings.
VPN Manager Hub and Spoke - Hub & Spoke Policies Part 415:28
Configure hub and spoke VPN policies on FortiManager, combining hub and spoke routes to enable spoke-to-spoke, hub-to-spoke, and spoke-to-hub communications through the VPN manager.

Requirements

Basic Networking Knowledge: Students should have a fundamental understanding of networking concepts, including TCP/IP, routing, switching, and network protocols.
Familiarity with Fortinet Products: It is beneficial for students to have prior familiarity with Fortinet security products, particularly FortiGate firewalls
Technical Proficiency: Students should be comfortable working with computer systems and have basic proficiency in using command-line interfaces
Access to Lab Environment: Access to a virtual lab environment or physical FortiGate devices for hands-on practice is recommended to reinforce learning concepts through practical exercises.

Description

Course Description: The FortiManager Fundamentals course is designed to provide participants with a comprehensive understanding of FortiManager, a centralized management solution offered by Fortinet for managing Fortinet security devices. This course aims to equip students with the necessary knowledge and skills to efficiently configure, monitor, and administer multiple Fortinet devices through a single interface.

Throughout the course, participants will delve into various aspects of FortiManager, including its architecture, deployment options, and key features. They will learn how to set up and configure FortiManager for centralized management of Fortinet security devices such as FortiGate firewalls, FortiSwitches, and FortiAPs. Additionally, participants will gain hands-on experience in performing tasks such as device provisioning, policy management, and firmware updates using FortiManager.

Key Topics Covered:

Introduction to FortiManager:
- Overview of FortiManager architecture
- Deployment options and scalability considerations
- Licensing and feature sets
Configuring FortiManager:
- Initial setup and configuration
- Integration with FortiGate and other Fortinet devices
- High availability and redundancy configurations
Device Management:
- Adding and managing devices in FortiManager
- Device provisioning and configuration synchronization
- Firmware management and upgrades
Policy Management:
- Centralized policy management across multiple devices
- Role-based administration and access control
- Policy templates and version control
Scripting:
- Scripting tasks with FortiManager CLI and automation tools
- Integration with third-party orchestration platforms
Troubleshooting and Best Practices:
- Diagnosing common issues with FortiManager
- Best practices for efficient management and administration
- Performance optimization and resource utilization

Who this course is for:

Network Administrators
Security Engineers
IT Professionals
System Administrators
Network Security Analysts
Cybersecurity Specialists
Network Operations Center (NOC) Engineers
Network Architects
Information Security Officers

Fortinet Certified Professional (FCP) FortiManager Course

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 2min

Setting Up The Lab10 lectures • 1hr 34min

Setting up FortiManager8 lectures • 52min

FortiManager Key Concepts5 lectures • 25min

Device Manager21 lectures • 3hr 15min

Policy & Objects6 lectures • 1hr 13min

System Settings8 lectures • 1hr 7min

Extras6 lectures • 1hr 3min

Requirements

Description

Who this course is for: