In this course, you will learn about common SD-WAN deployment scenarios using
the Fortinet Secure SD-WAN solution. You will explore different situations, from a
single enterprise site to environments with multiple data centers in multiple
regions, that will help you to enhance and troubleshoot SD-WAN deployments. You
will also learn how to deploy a new topology using the SD-WAN overlay template
and the zero-touch provisioning process.
Product Version
FortiOS 7.4.4
FortiManager 7.4.5
Course Duration
Lecture time (estimated): 11 hours
Lab time (estimated): 12 hours
Total course duration (estimated): 23 hours
Who Should Attend
Anyone responsible for designing a Fortinet SD-WAN solution or for the day-to-day management of a Fortinet SDWAN
deployment and network operations should attend this course.
Certification
This course is intended to help you prepare for the FCSS—SD-WAN 7.4 Architect certification exam. This exam is
part of the following certification tracks:
Fortinet Certified Solution Specialist – Network Security
Fortinet Certified Solution Specalist – Secure Access Service Edg
Prerequisites
l You must have advanced knowledge of networking, and
extensive hands-on experience working with FortiGate
and FortiManager.
l It is recommended that you have an understanding of the
topics covered in the following courses, or have
equivalent experience:
FCP – FortiGate Administrator 7.4
FCP – FortiManager Administrator 7.4
Agenda
1. Introduction
2. Centralized Management
3. Zero-Touch Provisioning and SD-WAN Monitoring
4. Members, Zones, and Performance SLAs
5. Routing and Sessions
6. Rules
7. SD-WAN Overlay Design and Best Practices
8. Dual-Hub and Multiregion Topologies
9. ADVPN
10. Troubleshooting Lab Exercises
Objectives
After completing this course, you should be able to:
Describe the capabilities of the Fortinet Secure SD-WAN
solution
Deploy FortiOS SD-WAN solutions with FortiManager
and FortiAnalyzer
Configure basic SD-WAN features
Configure advanced SD-WAN features
Understand and use the FortiManager SD-WAN overlay
template
Understand and use ZTP to deploy SD-WAN branch
devices
Understand the SD-WAN route and rule lookup process
Understand the different rule criteria and strategies
available to steer traffic using SD-WAN, and how SDWAN
responds to changing link conditions
Deploy SD-WAN using basic IPsec and routing
configuration
Deploy SD-WAN using advanced IPsec and routing
configuration
Troubleshoot SD-WAN routing and rule matching issues
Training Delivery Options and SKUs
Instructor-Led Training
Includes standard NSE training content delivered in
person onsite, or live online using a virtual classroom
application. Training is delivered within public classes
or as a private class. Private requests are scoped,
quoted, developed, and delivered by Fortinet Training
(minimum quantities apply).
Contact your Fortinet Resellers or Authorized Training
Partners to purchase this course.
Self-Paced Training
Includes online training videos and resources through
the Fortinet Training Institute library, free of charge.
You can purchase on-demand lab access with
interactive, hands-on activities using the following
methods:
Credit card, through the course on the Fortinet Training
Institute
Purchase order (PO), through Fortinet Resellers or
Authorized Training Partners
After you complete the purchase, you receive lab
access and the accompanying lab guide within the selfpaced
course.
For training and lab SKUs, or additional purchasing
information, refer to Purchasing Process.
ISC2
l CPE training hours: 11
l CPE lab hours: 12
l CISSP domains: Security Operations
Program Policies and FAQs
For questions about courses, certification, or training
products, refer to Program Policy Guidelines or
Frequently Asked Questions.