NSE4 Security and Infrastructure Bundle

---

This course assumes knowledge of basic FortiGate fundamentals.

• Knowledge of network protocols
• Basic understanding of firewall concepts
• Knowledge of OSI layers
• Knowledge of firewall concepts in an IPv4 network

After completing this course, you should be able to:

• Deploy the appropriate operation mode for your network
• Use the GUI and CLI for administration
• Identify the characteristics of the Fortinet Security Fabric
• Control network access to configured networks using firewall policies
• Apply port forwarding, source NAT, and destination NAT
• Authenticate users using firewall policies
• Understand encryption functions and certificates
• Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
• Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites
• Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports
• Fight hacking and denial of service (DoS)
• Offer an SSL VPN for secure access to your private network
• Collect and interpret log entries
• Analyze a FortiGate route table
• Route packets using policy-based and static routes for multipath and load -balanced deployments
• Configure SD-WAN to load balance traffic between multiple WAN links effectively
• Inspect traffic transparently, forwarding as a Layer 2 device
• Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs)
• Establish an IPsec VPN tunnel between two FortiGate devices
• Implement a meshed or partially redundant VPN
• Diagnose failed IKE exchanges
• Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)
• Deploy FortiGate devices as an HA cluster for fault tolerance and high performance
• Deploy implicit and explicit proxy with firewall policies, authentication, and caching
• Diagnose and correct common problems

•  Introduction and Initial Configuration
• Security Fabric
• Firewall Policies
• Network Address Translation (NAT)
• Firewall Authentication
• Logging and Monitoring
• Certificate Operations
• Web Filtering
• Application Control
• Antivirus
• Intrusion Prevention and Denial of Service
• SSL VPN

•  Routing
• Software-Defined WAN (SD-WAN)
• Virtual Domains
• Layer 2 Switching
• IPsec VPN
• Fortinet Single Sign-On (FSSO)
• High Availability (HA)
• Web Proxy
• Diagnostics