Fortinet NSE7 SD-WAN Training

Learn how to upload required Fortinet images to eve-ng and build a multi-device SD-WAN topology with FortiGate firewalls, FortiManager, and cloud links using a defined IP schema and six interfaces.

Set up a complete sd-wan lab in EVE-NG by downloading and uploading switch images and Fortinet devices, applying fixed permission, configuring IPs, and testing connectivity.

Export the lab topology to Google Drive or desktop, then import it back into the lab and reset by stopping and wiping all nodes before reuse.

In Fortinet NSE7 SD-WAN Training, learn to perform initial firewall configuration via CLI for three FortiGate devices: HQ, DC, and branch, setting hostnames, management interfaces, port configurations, and DNS.

Configure static ip addresses for HQ, branch, and data center clients according to the ip schema. Set gateways and dns, then verify with ifconfig and route, and ping gateways.

Learn how to backup, restore, and create revisions of FortiGate lab configurations to manage a 14-day evaluation license, using GUI or CLI across three firewalls.

Explore equal cost multipath (ecmp) in Fortinet sd-wan, balancing traffic across multiple next hops to the same destination. Learn load balancing methods, policy routing, and sd-wan concepts.

Explore equal cost multipath routing with two gateways, configure static routes with equal distance and priority, and observe source- and destination-based load balancing, failover, and verification.

Explore ECMP load balancing methods in an SD-WAN lab, including source IP base, weight base, usage base, and source-destination base, and verify traffic across dual links.

Explore policy routing on Fortinet FortiGate, showing how source, interface, destination, and protocol-based rules divert traffic before static and ISDB routes, with route cache and kernel routing tables.

Configure policy-based routing in Fortinet FortiGate using source and destination IP based rules. Route PC1 traffic to WAN1 and PC2 traffic to WAN2, and verify with traceroute and logs.

Create an sd-wan zone with two member interfaces, configure load balancing, add a static route, and apply a policy to route traffic across the sd-wan links.

Explore sd-wan rules and strategy, including services for path selection, implicit rules, and policy-like criteria (latency, jitter, packet loss) that dynamically choose and switch the best link.

Explore sd-wan load balancing methods, including source ip base, session/weight-based, spillover usage-based, source-destination base, and volume-based. Distinguish implicit rule balancing from user-defined rules and review default behavior.

Master sd-wan load balancing methods through hands-on labs. Test source ip base, and source/destination ip, session and volume based balancing, plus spillover thresholds, with cli and gui verification.

Configure and verify a manual sd-wan strategy rule, prioritizing when two over when one, and test using ping and traceroute across dc pc one and other hosts.

Practice configuring an SD-WAN best quality strategy, create a ping SLA, assign interface preferences, and test link selection by packet loss, latency, and jitter.

Explore the sd-wan lowest cost strategy by testing two links against latency, jitter, and packet loss, then use interface cost and top preference to choose the best path.

Demonstrates the maximize bandwidth SD-WAN rule, using both links with load balancing, ignoring interface preferences and cost, and validating with an SLA to optimize throughput.

Explore how performance SLA monitors SD-WAN links with continuous health checks, using ping and other protocols to measure latency, jitter, and packet loss, and trigger failover.

Configure and test a Fortinet sd-wan performance sla lab with active probes testing ping, http, dns, and tcp to measure latency, jitter, and packet loss; edit and monitor sla definitions.

Explore how passive and prefer passive sla modes in Fortinet sd-wan monitor latency, jitter, and packet loss using tcp-based health checks, with policy-level health measurement and cli configuration.

Monitor and diagnose sd-wan networks using dashboards and performance sla metrics; analyze bandwidth, volume, and sessions alongside packet loss, latency, jitter, and rule hits to troubleshoot and optimize sd-wan quality.

Explore the FortiGate cli as the essential alternative to graphical configuration, and learn core commands like config, get, show, diagnose, execute, alias, and exit with tab completion.

Configure sd-wan on the branch firewall via CLI, creating a zone and adding a member with gateway and static routes. Set load balancing and verify health checks and SLA thresholds.

Learn to migrate existing interfaces to sd-wan using integrated interfaces, automatically updating zones, policies, and routes while preserving configurations and avoiding manual deletion.

Learn how FortiManager centralizes management of Fortinet devices, enabling template-based policies, centralized configuration, and SD-WAN deployment from a single console.

Perform the FortiManager first time configuration by setting management and inside interfaces, adding a static route, and activating a license via FortiCloud or 40 cloud.

Add a FortiGate firewall to FortiManager by enabling 40 manager access on the LAN interface, creating a dom with a version, discovering the device in device manager, and importing policies.

Enable display options in FortiManager to reveal all policy and object settings, manage certificates, and prepare FortiGate management features for future labs.

Configure sd-wan through FortiManager by unifying the FortiGate under FortiManager, remove existing static routes and policies, then create an sd-wan zone with members, sla, and monitoring.

Explore sd-wan monitoring via FortiManager, viewing device location on a map, monitoring bandwidth, volume, sessions, service level agreement, and per-interface latency, jitter, and packet loss, with table and map views.

Learn how FortiGate builds a session table to track traffic and uses dirty and murder session flags as policies evolve. Understand how TCP/UDP/ICMP states guide session creation and return traffic.

Master cryptography fundamentals for VPN and network traffic protection by learning encryption and decryption, plaintext and ciphertext, and key concepts like confidentiality, integrity, and authentication.

Contrast symmetric encryption with a single key and asymmetric encryption with public and private keys, noting symmetric is faster and lighter than asymmetric.

Explore how hash functions generate a fixed-size digest from data to ensure integrity with MD5 and SHA variants, and how MAC and HMAC provide authentication for VPNs and IPsec.

Explain how diffie-hellman lets two parties derive a shared secret over an insecure network without exchanging private keys, using primes, generators, and group options.

discover ipsec, an open standard that secures side-to-side and remote access vpn with esp or ah, delivering confidentiality, integrity, and authentication.

Explore how internet key exchange negotiates IPsec security associations between VPN peers, configuring authentication, encryption, hash, group, and lifetime across phase one and phase two, including IKEv1 and IKEv2.

Discover how virtual private networks secure data across public networks with IPsec and SSL/TLS, offering site-to-site and remote access VPNs, client-based and clientless options, and strong protections.

Explore Fortinet ADVPN and its transition from hub-and-spoke topologies to dynamic spoke-to-spoke tunnels, reducing single points of failure, latency, and cost.