
Configure a Mikrotik WAN router by setting up LAN interfaces with addresses, linking ports for management and FMG connections, and implementing a masquerade firewall rule to enable internet access.
Explain how the 4D manager uses protocols to deliver Fortiguard services to devices, enable 4D analyzer features, and support device management via the FG FM and 4D guard protocols.
Configure devices through device manager by syncing a device database from FGFM; edit via device manager or central management modules, then install to apply and overwrite device database as needed.
Master FortiManager operations to synchronize FortiGate devices via device and policy layers, including install device settings, policy packages, quick install, import, retrieve configuration, and revert workflows.
FMG
config system global
set ssl-low-encryptio enable
set enc-algorithm low
set fgfm-ssl-protocol sslv3
Install the first policy from FortiManager to FortiGate, allowing all traffic from the management network (192.168.1.0) from port3 to port1, using the policy package and device settings.
config system interface
edit "port1"
set vdom "root"
set ip 10.10.20.1 255.255.255.0
set allowaccess ping
set type physical
set alias "WAN1"
set snmp-index 1
next
edit "port2"
set vdom "root"
set ip 10.10.2.254 255.255.255.0
set type physical
set alias "LAN"
set snmp-index 2
next
edit "port3"
set vdom "root"
set ip 192.168.2.254 255.255.255.0
set type physical
set alias "MGMT"
set snmp-index 3
end
config router static
edit 1
set gateway 10.10.20.254
set device "port1"
next
end
config system dns
set primary 1.1.1.1
set secondary 1.0.0.1
end
Switch between table view, map view, ring view, and folder view to manage FortiManager devices. Install policy, monitor synchronization status, and refresh or resynchronize devices.
Explore the device database dashboard in FortiManager, accessing system information, license data, Fortiguard services, and configuration details with revision history. Build and copy custom dashboards across devices.
Learn how FortiManager maintains a device configuration repository, manages revisions, and deploys or revert configurations across devices, with status, history, and download options.
Explore the device database network interface insights, create interfaces and zones, map zones to normalized interfaces for policy use, and perform packet captures on Fortigate interfaces for analysis with Wireshark.
Access and configure device settings via the device database cli configurations, including options not visible in the FortiManager GUI, and enable ssl vpn configuration through feature visibility.
Explore provisioning templates and template groups in FortiManager, including system, sd-wan, cli, and nsx-t templates. Publish these configurations to multiple devices and manage site-wide dns, ntp, FortiGuard, and admin settings.
execute factoryreset
Create, edit, and assign policy packages in FortiManager, organize them with folders, and install to specific devices while using policy checks, feature visibility, and find and replace to optimize objects.
Create and configure service objects and service groups for firewall and proxy use, assign ports (tcp/udp/sctp), and attach them to policies; set up one-time and recurring schedules.
Track policy pushes and device configurations with the task monitor, showing installation status, progress reports, and any errors across managed devices.
Configure Windows Server Active Directory by setting a static IP, installing the Active Directory Domain Services role, and promoting it as a lab.local domain controller with LDAP access for FortiManager.
Configure policy and objects to allow Active Directory from 40 manager to add, using port three to port two, ldap service, and icmp tests to verify connectivity.
Configure ldap authentication in FortiManager by connecting to an Active Directory server, creating a remote ldap server connection, and using ldap groups to authorize logins.
Configure a hub-and-spoke OSPF setup on FortiManager, assigning router IDs, area zero, and networks for firewall one and spokes, validate neighbors, and implement ICMP firewall policies for cross-network connectivity.
Configure a hub-and-spoke vpn community in FortiManager, enabling spokes to communicate through the hub via ipsec tunnels and applying phase one and two settings with auto negotiate.
Configure hub-and-spoke vpn addresses by defining hub LAN 10.10.1.0/24, creating a per-device mapped 10.10.0.0/16 for spoke devices, and adding a static 10.10.0.0/16.
Configure hub and spoke VPN policies on FortiManager, combining hub and spoke routes to enable spoke-to-spoke, hub-to-spoke, and spoke-to-hub communications through the VPN manager.
Course Description: The FortiManager Fundamentals course is designed to provide participants with a comprehensive understanding of FortiManager, a centralized management solution offered by Fortinet for managing Fortinet security devices. This course aims to equip students with the necessary knowledge and skills to efficiently configure, monitor, and administer multiple Fortinet devices through a single interface.
Throughout the course, participants will delve into various aspects of FortiManager, including its architecture, deployment options, and key features. They will learn how to set up and configure FortiManager for centralized management of Fortinet security devices such as FortiGate firewalls, FortiSwitches, and FortiAPs. Additionally, participants will gain hands-on experience in performing tasks such as device provisioning, policy management, and firmware updates using FortiManager.
Key Topics Covered:
Introduction to FortiManager:
Overview of FortiManager architecture
Deployment options and scalability considerations
Licensing and feature sets
Configuring FortiManager:
Initial setup and configuration
Integration with FortiGate and other Fortinet devices
High availability and redundancy configurations
Device Management:
Adding and managing devices in FortiManager
Device provisioning and configuration synchronization
Firmware management and upgrades
Policy Management:
Centralized policy management across multiple devices
Role-based administration and access control
Policy templates and version control
Scripting:
Scripting tasks with FortiManager CLI and automation tools
Integration with third-party orchestration platforms
Troubleshooting and Best Practices:
Diagnosing common issues with FortiManager
Best practices for efficient management and administration
Performance optimization and resource utilization