
Explore Fortinet enterprise firewalls: physical, virtual, and cloud, delivered from edge to core with the security fabric and single pane management via 4D manager and 40 analyzer.
Upload required images to ifeng via ftp with winscp, unzip, and ensure correct naming in the opt unit lab edson and chemu folders; configure pfSense with six interfaces for lab.
Learn how to upload a FortiGate firewall image to EVE-NG, choosing the Fortinet image version such as 7.0.13, understanding licensing, naming conventions, folder structure, and deployment steps.
Configure FortiManager for a team manager topology on first-time setup by setting management and inside interfaces, IPs, and gateway, then apply or upload a license and complete login and settings.
Enable and configure a FortiAnalyzer ADOM, create a Fortigate firewall ADOM, adjust disk usage to 12 GB, and verify login to prepare for adding devices.
Explore the full security fabric topology on the root fortigate, detailing physical and logical connections, device views by traffic, count, OS, and vendor, with security rating recommendations.
Learn how automation stitches link triggers and actions to automate responses like reboot events and address creation, with sequential and parallel execution across the root Fortigate and security fabric.
Configure OSPF through FortiManager across firewall one and HQ firewall, assigning router IDs and area zero. Advertise 10.0.1, 192.168.100, and related networks, push settings, and verify OSPF neighbors and routes.
Explore the basics of the border gateway protocol (BGP), its role as an exterior gateway path-vector protocol, and the eBGP/iBGP neighbor relationships across autonomous systems on TCP port 179.
Explore how VPN manager centralizes hub-and-spoke, full-mesh, and dial-up topologies through VPN communities, gateways, phase one and phase two, and security policies, with map view and SSL VPN monitoring.
Explore advpn theory and autodiscovery, enabling spoke-to-spoke dynamic on-demand tunnels in a hub-and-spoke Fortinet vpn, delivering full-mesh reachability with on-demand ipsec tunnels.
Explore ipsec vpn topologies, hub and spoke, partial mesh, and full mesh, and how a central hub governs spoke-to-spoke traffic, latency, and scalability trade-offs, with ad vpn addressing their limitations.
Explore Fortinet's web filter with FortiGuard category base filter in FortiManager, enabling block, warn, or authenticate rules for streaming media and web hosting, and verify results in FortiGate logs.
Learn how to override a social media block by creating an application override that allows Facebook while blocking other social media, using application control and deployment steps.
Configure a custom IPS signature in the Fortinet firewall, enable logs, and test blocking of the EICAR virus with the IPS engine; verify blocks in logs and analyzer.
Create a custom file filter profile in FortiManager to block PDFs, enable SSL inspection in the policy, push the config to FortiGate, and verify blocks via logs.
Explore high availability for fortigate firewalls, comparing Fortigate clustering protocol, session life support, and VRRP open standards, and learn how active-active and active-passive configurations maintain traffic during failures.
Course Description:
Fortinet NSE 7 Enterprise Firewall training prepares learners to integrate, administer, troubleshoot, and manage an enterprise firewall solution that relies on FortiOS, FortiManager, and FortiAnalyzer. After finishing the videos in this Fortinet NSE 7 Enterprise Firewall training, you'll know how to integrate, administer, troubleshoot, and manage an enterprise firewall solution that relies on FortiOS, FortiManager, and FortiAnalyzer. You will explore Fortinet Security Fabric, VPN, and how to protect your network using security profiles, such as IPS, antivirus, web filtering, application control, and advanced routing.
FCSS:
The FCSS in Network Security certification validates your ability to design, administer, monitor, and troubleshoot Fortinet network security solutions. This curriculum covers network security infrastructures using advanced Fortinet solutions. You will receive this certification, if you have passed any version of the Fortinet NSE 7—Enterprise Firewall exam and one of the following exams:
Fortinet NSE 7–SD-WAN
Fortinet NSE 7–LAN Edge
Fortinet NSE 7–Secure Access
Fortinet NSE 7–Network Security 7.2 Support Engineer
Objectives:
After completing this course, you should be able to:
o Integrate multiple FortiGate devices using the Fortinet Security Fabric.
o Integrate multiple FortiGate devices with FortiManager & FortiAnalyzer.
o Centralize the management and monitoring of network security events.
o Harden the enterprise services using IPS and Security Profiles.
o Implement a high availability solution on FortiGate Firewalls.
o Deploy IPsec tunnels to multiple sites using the FortiManager VPN console.
o Configure ADVPN to enable on-demand VPN tunnels between sites.
o Combine OSPF and BGP to route the enterprise traffic.
Target Audience:
The Enterprise Firewall course is intended for networking and security professionals who are involved in the administration and support of a security infrastructure using FortiGate appliances. This includes network managers, administrators, installers, sales engineers, systems engineers, professional services engineers (presales and post sales) and technical support professionals. Anyone planning to take Enterprise Firewall course is strongly recommended to complete the FortiGate Security, FortiGate Infrastructure and FortiManager courses before this course.
Prerequisites:
This course assumes advanced knowledge of networking, and extensive hands-on experience working with FortiGate, FortiManager, and FortiAnalyzer. It is also recommended that you have an understanding of the topics covered in the following courses, or have equivalent experience: FortiManager, FortiAnalyzer, FortiGate Security and FortiGate Infrastructure.
Product Versions:
FortiGate 7.X
FortiManager 7.2.x
FortiAnalyzer 7.2.x