In this course, you will learn how to use the most common FortiGate features.
In interactive labs, you will explore firewall policies, user authentication, high availability, logging and monitoring, site-to-site IPsec VPN, FortiGate in Cloud, FortiSASE, and how to protect your network using security profiles, such as IPS, antivirus, web filtering, application control, and more. These administration fundamentals will provide you with a solid understanding of how to implement the most common FortiGate features.
Product Versions
- FortiOS 7.6.0
Course Duration
- Lecture time (estimated): 13 hours
- Lab time (estimated): 11 hours
- Total course duration (estimated): 24 hours
- 4 full days or 7 half days
Who Should Attend
Networking and security professionals involved in the management, configuration, administration, and monitoring of FortiGate devices used to secure their organizations’ networks should attend this course.
You should have a thorough understanding of all the topics covered in the FortiGate Operator course before attending the FortiOS Administrator course.
Prerequisites
- Knowledge of network protocols
- Basic understanding of firewall concepts
Agenda
- System and Network Settings
- Logging and Monitoring
- Firewall Policies and NAT
- Routing
- Firewall Authentication
- Fortinet Single Sign-On (FSSO)
- Certificate Operations
- Antivirus
- Web Filtering
- Intrusion Prevention and Application Control
- IPsec VPN
- SD-WAN Configuration and Monitoring
- High Availability
- Diagnostics and Troubleshooting
- FortiGate in the Cloud
- FortiSASE
Objectives
After completing this course, you will be able to:
- Configure FortiGate basic networking from factory default settings
- Configure and control administrator access to FortiGate
- Use the GUI and CLI for administration
- Describe methods of device registration
- View and search for logs on FortiGate and FortiAnalyzer
- Configure IPv4 firewall policies
- Apply port forwarding, source NAT, and destination NAT
- Analyze a FortiGate route table
- Configure static routing
- Implement route redundancy and load balancing
- Configure a remote LDAP and RADIUS authentication server on FortiGate
- Monitor firewall users from the FortiGate GUI
- Deploy Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)
- Describe encryption functions and certificates
- Describe SSL inspection on FortiGate
- Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites
- Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports
- Configure IPsec VPN using the IPsec wizard and manual process
- Configure SD-WAN and verify traffic distribution
- Identify the primary and secondary device tasks in an HA cluster
- Identify the different operation modes for HA with the FortiGate Clustering Protocol (FGCP)
- Diagnose and correct common problems
- Identify FortiGate VM and FortiGate CNF in the cloud
- Identify FortiSASE and various FortiSASE use cases
System Requirements
If you take the online format of this class, you must use a computer that has the following:
- A high-speed Internet connection
- An up-to-date web browser
- A PDF viewer
- Speakers or headphones
- One of the following:
- HTML 5 support
- An up-to-date Java Runtime Environment (JRE) with Java plugin enabled in your web browser
You should use a wired Ethernet connection, not a Wi-Fi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.