NSE4 - FortiGate II Infrastructure (EN)

Description

In this two-day course, you will learn how to use advanced FortiGate networking and security. Topics include features commonly applied in complex or larger enterprise or MSSP networks, such as advanced routing, virtual firewalls – VDOMs, transparent mode, redundant infrastructure, dial-up and site-to-site IPsec VPN, SSO and diagnostics.

Training is provided by the Authorized Training Center (ATC), DNS a.s.

Goals

• Analyze a FortiGate's routing table.
• Route packets using policy-based and static routes for multi-path and load balanced deployments.
• Configure SD-WAN to load balance traffic between multiple WAN links effectively.
• Inspect traffic transparently, forwarding as a Layer 2 device.
• Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs).
• Establish an IPsec VPN tunnel between two FortiGate appliances.
• Compare policy-based to route-based IPsec VPN.
• Implement a meshed or partially redundant VPN.
• Diagnose failed IKE exchanges.
• Offer Fortinet Single Sign On (FSSO) access to network services, integrated with Microsoft Active Directory.
• Deploy FortiGate devices as an HA cluster for fault tolerance and high performance.
• Diagnose and correct common problems.

Target

Contents

• Routing
• Software-Defined WAN (SD-WAN)
• Virtual Domains
• Layer 2 Switching
• IPsec VPN
• Fortinet Single Sign-On (FSSO)
• High Availability (HA)
• Diagnostics

Prerequisites

• Knowledge of OSI layers
• Knowledge of firewall concepts in an IPv4 network

Study Materials