Fortinet NSE 4 – FortiGate II

You will learn advanced FortiGate networking and security.

Topics include features commonly applied in complex or larger enterprise or MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, advanced IPsec VPN, IPS, SSO, data loss prevention, and diagnostics.

Networking and security professionals involved in the design, implementation, and administration of a security infrastructure using FortiGate appliances.

After completing these modules, you will be able to:

• Deploy FortiGate devices as an HA cluster for fault-tolerance and high performance
• Inspect traffic transparently, forwarding as a Layer 2 device
• Analyze a FortiGate’s route table
• Route packets using policy-based and static routes for multi-path and load-balance deployments
• Connect virtual domains (VDOMs) without packets leaving the FortiGate
• Implement a meshed / partially redundant VPN
• Diagnose failed IKE exchanges
• Fight hacking and denial of service (DoS)
• Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory
• Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
• Understand encryption functions and certificates
• Defend against data loss by identifying files with sensitive data, and blocking them from leaving your private network
• Diagnose and correct common problems
• Optimize performance by leveraging the ASIC acceleration chips, such as CP or NPs, instead of only the CPU resources
• Implement IPv6 and hybrid IPv4-IPv6 networks

Networking and security professionals involved in the design, implementation, and administration of a security infrastructure using FortiGate appliances.

This course assumes knowledge of basic FortiGate fundamentals. We strongly recommend participants complete the FortiGate I course before starting this course.