Fortinet NSE 4-FortiOS 7.6 Administrator Training Part 2/2

Demonstrates firewall authentication using FortiGate, explains identity verification, username and password, idle timeout, and the role of user ID in identifying users, groups, and applying targeted policies.

Explore active and passive authentication methods for Fortigate firewalls, including captive portal, username/password with optional OTP, and SSL/IPsec VPN, plus Fortinet single sign on for seamless, automatic user authentication.

Configure captive portal on a Fortigate LAN interface, restrict access to a local group of users, create local users, test authentication, and verify sessions via the dashboard and logs.

Configure active authentication with Active Directory using LDAP on Fortigate, test connectivity, and map AD groups to Fortigate to enforce group or user based policies.

Verify active authentication with Active Directory by logging in from multiple PCs and confirming HR and IT users appear in identities, sessions, and logs; validate via CLI LDAP test.

Configure a radius server on Windows Server 2019 by installing network policy and access services, registering in Active Directory, and creating a radius client with a shared secret.

Configure active authentication with a radius server on Fortigate, mapping radius groups and testing HR users against a Windows Server 2019 radius, then verify policy with a radius-based access rule.

Learn how to verify radius active authentication by testing user logins through a Fortigate firewall and Windows Server 2019, checking identities, sessions, logs, and CLI verification.

Install the FSSO agent on the Active Directory server to enable passive authentication, download and install the DC and FSO agents from Fortinet, configure pooling mode, and monitor user logins.

Learn how to join a Windows 11 client to Active Directory, configure DNS, join the domain test.local, restart, and verify domain users such as HR1 can log in.

Configure passive authentication with Active Directory using the FSO agent, map AD groups to Fortinet single sign on, update firewall policies and routes, and verify login without entering credentials.

Learn to verify AD passive authentication by logging in with HR and sales AD users, and confirm agent-captured login details, firewall policy, and forward-traffic logs reflect the active user.

Learn how Fortigate admin accounts grant access to the management interface via cli, gui, api, or ssh, and how default and additional administrator profiles control firewall access and actions.

Create a local administrator account inside the firewall by defining a custom local profile with selective permissions. Test login to verify GUI and CLI access reflect those permissions.

Configure remote administrator accounts via Active Directory using LDAP, map admin and support groups to the firewall, create admin and support profiles, then test logins.

Configure fw2 via cli by quickly applying management port, hostname, and entropy settings, then create routing, dns policies, and lan-to-wan firewall rules to verify connectivity.

Explore how virtual private networks create a secure tunnel over the public internet to ensure data confidentiality, integrity, and authentication.

Explain site-to-site and remote access vpn types, including client-based and client-less options. Highlight ipsec and ssl/tls as core protocols, with des, 3des, aes, sha/md5 integrity, and pre-shared keys or certificates.

Explore remote access vpn types, including IPsec and ssl vpn, browser-based web mode and Forticlient tunnel mode, and split versus full tunneling with Fortigate.

Enable SSL VPN web mode on FortiOS 7.6, configure portal mappings for AD groups (HR, IT, and sales), and test external access to DMZ servers via the VPN.

Deploy ssl tunnel mode in Fortinet FortiOS by configuring tunnel access, split tunneling, and firewall policies, install FortiClient on linux, and verify access to dmz servers through the tunnel.

Configure and test ipsec remote access vpn with the FortiGate wizard, define ip ranges and phase one/two, use pre-shared key 123456, and verify connectivity with Windows client and logs.

Deploys template-based ipsec site-to-site vpn between two FortiGate firewalls, enabling connectivity between local and remote subnets using a pre-shared key and simplified phase one and two configuration.

Configure a static IPv6 site-to-site vpn between two Fortigate firewalls by building an IPsec tunnel, tuning phase 1 and 2, configuring policies and static routes, and validating with logs.

Set up and test a dial-up IPsec site-to-site VPN between two Fortinet firewalls, configuring IKEv1, phase 1 and 2, pre-shared key, policies, and automatic routes.

Explore software-defined wide area networking (sd-wan) with Fortinet, unifying multiple links into a single virtual interface for smarter routing, load balancing, health checks, and application-based routing with centralized control.

Identify the Fortigate sd-wan components: sd-wan members and zone, performance SLA, sd-wan rules, manual rules, and health checks that monitor links and support centralized routing and failover.

Configures fortinet sd-wan with two isp, creates an sd-wan zone and members, sets load balancing to source-destination ip, defines static routes, and validates dual-link usage across tests.

Configure the SD-WAN source IP load balancing across two gateways and two WAN ports, then verify traffic distribution with traceroute, dashboards, and logs.

Learn to configure and verify SD-WAN load balancing by source and destination IP in Fortinet FortiOS, using GUI and CLI, and validate with traffic, traceroute, and logs.

Learn to configure session-based SD-WAN load balancing across two links using weighted port one and port two, and verify the results via GUI and CLI.

Configure and verify spillover load balancing for SD-WAN across two ISPs using a 1024 KB spillover threshold. Do this via GUI and CLI and verify with traceroute and dashboard data.

Configure and verify volume-based load balancing in SD-WAN using the graphical interface and CLI, set an 80/20 volume ratio, and test traffic distribution with traceroute and logs.

learn how sd-wan rules match traffic and steer it across multiple links using top-to-bottom first-fit logic, with an implicit, volume-based rule and manual or automatic criteria.

Configure a manual SD-WAN rule to route traffic by top-down precedence, create PC2 and generic rules, test with traceroute, and switch between links based on availability.

Understand sd-wan performance sla, a health check that monitors latency, jitter, and packet loss and can reroute traffic to healthy links using thresholds and check intervals.

Configure and validate SD-WAN performance SLA on a Fortinet firewall using ping, HTTP, and DNS tests; monitor latency, jitter, and packet loss.

Learn how dhcp automatically assigns ip addresses, subnet masks, gateways, and dns, with Fortigate acting as dhcp server, client, or relay to simplify network configuration and management.

Configure a FortiGate firewall as a DHCP server on LAN, set address range 1–253 with the gateway as interface IP, test with PC clients and explore leases and reservations.

Configure Windows Server 2019 as a DHCP server by installing the DHCP role and creating an IPv4 scope with gateway and DNS, then configure the firewall as a DHCP relay.

Configure the FortiGate firewall as a DHCP relay (change mode to relay) to forward client requests to the Windows Server 2019 DHCP server and update policies to allow DHCP traffic.

Demonstrates how to back up and restore FortiGate firewall configurations using graphical interface and CLI, with encrypted and unencrypted options, and notes on reboot.

Learn how to upgrade FortiGate firewall firmware using automatic and manual paths, verify images, back up configurations, and reboot devices while following the recommended 763 upgrade path.

Use FortiGate's graphical packet capture to troubleshoot by selecting an interface, applying filters (host, port, protocol), capturing DNS and HTTP traffic, saving as a pcap, and analyzing with Wireshark.

Learn packet sniffing to troubleshoot networks with diagnose sniffer, interface filters, verbose headers for IP and Ethernet data, and host and port filters with time formats.

Explore Fortinet FortiOS network layer diagnostics using practical CLI commands, including ping, traceroute, session monitoring, interface testing, routing, arp, and performance checks.