NSE4 - FortiGate Infrastructure

Popis kurzu

In this 2-day class, you will learn advanced FortiGate networking and security. Topics include features commonly in complex or larger enterprise/MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, advanced IPsec VPN, IPS, SSO, data leak prevention, diagnostics, and fine-tuning performance.

In this 2-day class, you will learn advanced FortiGate networking and security. Topics include features commonly in complex or larger enterprise/MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, advanced IPsec VPN, IPS, SSO, data leak prevention, diagnostics, and fine-tuning performance.

Určeno pro

Networking and security professionals involved in the design, implementation, and administration of a security infrastructure using FortiGate appliances.
This course assumes knowledge of basic yet FortiGate-specific fundamentals. As a result, if you know about firewalls, but are new to Fortinet, we do not recommend that you skip FortiGate I.

Obsah kurzu

• 
  

  After completing these courses, you will be able to:

  
  
  
  
  • Deploy FortiGate devices as an HA cluster for fault-tolerance & high performance
  
  
  • Inspect traffic transparently, forwarding as a Layer 2 device
  
  
  • Manage FortiGate device's route table
  
  
  • Route packets using policy-based and static routes for multi-path and load-balance deployments
  
  
  • Connect virtual domains (VDOMs) without packets leaving FortiGate
  
  
  • Implement a meshed / partially redundant VPN
  
  
  • Diagnose failed IKE exchanges
  
  
  • Fight hacking & denial of service (DoS)
  
  
  • Diagnose IPS engine performance issues
  
  
  • Offer Fortinet Single Sign On (FSSO) access to network services, integrated with Microsoft Active Directory
  
  
  • Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
  
  
  • Understand encryption functions and certificates
  
  
  • Defend against data leaks by identifying files with sensitive data, and blocking them from leaving your private network
  
  
  • Diagnose and correct common problems
  
  
  • Optimize performance by configuring to leverage ASIC acceleration chips, such as CP or NPs, instead of only the CPU resources
  
  
  • Implement IPv6 and hybrid IPv4-IPv6 networks
  
  
  
  

• Routing


• Software-Defined WAN (SD-WAN)


• Layer 2 Switching


• Virtual Domains


• Site-to-Site IPSec VPN


• Fortinet Single Sine-On (FFSO)


• High Availability (HA)


• Web Proxy


• Diagnostics

Předpoklady

• Knowledge of OSI layers


• Good knowledge of firewalling concepts in an IPv4 network


• Familiarity with all topics presented in the prerequisite FortiGate I course

Studijní materiály