FortiGate NGFWs are network firewalls powered by purpose-built security processing units (SPUs) including the latest NP7 (Network Processor 7). They enable security-driven networking, and are ideal network firewalls for hybrid and hyperscale data centers. Fortinet NGFWs reduce cost and complexity by eliminating points products and consolidating industry-leading security capabilities such as secure sockets layer (SSL) inspection including the latest TLS1.3, web filtering, intrusion prevention system (IPS) to provide fully visibility and protect any edge. Fortinet NGFWs uniquely meet the performance needs of hyperscale and hybrid IT architectures, enabling organizations to deliver optimal user experience, and manage security risks for better business continuity.

In this course, you will learn how to implement, troubleshoot, and centrally manage an enterprise security infrastructure composed of multiple FortiGate devices. Networking and security professionals involved in the design, administration, and support of an enterprise security infrastructure using FortiGate devices. This course assumes advanced knowledge of networking, and extensive hands-on experience working with FortiGate, FortiManager, and FortiAnalyzer.

Agenda

1. Security Fabric

2. FortiOS Architecture

3. Traffic and Session Monitoring

4. Routing

5. FortiGuard

6. High Availability

7. Central Management

8. OSPF

9. Border Gateway Protocol (BGP)

10. Web Filtering

11. Intrusion Prevention System (IPS)

12. IPsec

13. Autodiscovery VPN (ADVPN)

    
    

    Objectives

    After completing this course, you will be able to:

    • Integrate FortiManager, FortiAnalyzer, and multiple FortiGate devices using the Fortinet Security Fabric

    • Centralize the management and monitoring of network security events

    • Optimize FortiGate resources

    • Diagnose and monitor user traffic using FortiGate debug tools

    • Troubleshoot issues with conserve mode, high CPU, firewall policies, session helpers, IPsec, FortiGuard, content inspection, routing, and HA

    • Harden the enterprise services

    • Simultaneously deploy IPsec tunnels to multiple sites using the FortiManager VPN console

    • Configure ADVPN to enable on-demand VPN tunnels between sites

    • Combine OSPF and BGP to route the enterprise traffic