Day 0: Introduction to FortiGate and Network Security
This kickoff explains how the course is built around real-world FortiGate firewall operations, mapped to the NSE 4 blueprint but focused on practical, job-ready skills for students and new grads moving into cybersecurity. We’ll set expectations and outcomes, confirm hands-on lab access, and show how each exercise feeds your exam prep—certification is the bonus; competence on live gear is the goal.
This day covers the foundational steps of bringing a FortiGate firewall online, from a factory reset state to having management access via both CLI and GUI, including setting up initial IP connectivity for management.
This day focuses on preparing the FortiGate to handle user traffic by configuring its network interfaces, organizing them into security zones, and setting up DHCP services for connected clients.
This day delves into the essential NAT capabilities of FortiGate, covering how to translate source and destination IP addresses and ports for various network access scenarios.
This day establishes a strong understanding of FortiGate firewall policies, their essential components, and how they determine what traffic is allowed or blocked.
Day 5: Static Routing, Failover, ECMP & Policy Routes
This day covers how FortiGate makes routing decisions, focusing on static routes, how to implement redundancy with failover, and how to distribute traffic using ECMP. Also we discuss how Policy routes works and traffic is routed according to the policies.
This day introduces dynamic routing protocols, explaining their purpose and providing hands-on experience with configuring RIP, OSPF, and BGP on FortiGate firewalls.
Day 7: Digital Certificates & SSL/TLS Inspection Fundamentals
This day lays the groundwork for SSL/TLS inspection by reviewing digital certificate concepts, their management on FortiGate, and the underlying principles of decrypting and inspecting encrypted traffic.
This day focuses on configuring FortiGate to decrypt and inspect outbound encrypted traffic originating from internal clients, ensuring they trust the FortiGate's re-signed certificates.
This day covers the configuration of inbound SSL inspection to protect internal web servers by allowing the FortiGate to decrypt and inspect incoming encrypted traffic.
This day focuses on FortiGate's antivirus features, exploring different scanning modes, advanced detection techniques, and how to configure antivirus profiles.
This day covers the comprehensive web filtering capabilities of FortiGate, allowing granular control over web access based on categories, URLs, and user actions.
This day explores FortiGate's DNS filtering capabilities, demonstrating how to prevent access to malicious and inappropriate websites at the DNS resolution stage.
This day introduces the core concepts of application control, explaining how FortiGate achieves deep visibility into network applications and the various ways to classify and act upon them.
Day 14: Application Control Advanced Configuration
This day moves to advanced application control configurations, teaching how to implement granular policies using categories, overrides, behaviors, and the quarantine action.
This day covers the Intrusion Prevention System (IPS) on FortiGate, demonstrating how to deploy sensors to protect against a wide range of network attacks and exploits.
This day focuses on FortiGate's Denial of Service (DoS) prevention mechanisms, covering how to configure policies to detect and mitigate various flood and scanning attacks.
This day provides a deep dive into Site-to-Site IPsec VPNs, covering both wizard-based and manual configuration, and ensuring proper routing and firewall policies for secure inter-network communication.
This day focuses on configuring SSL VPN for remote access, including portal and IP pool setup, split tunneling, and integrating with firewall policies for secure client connectivity.
This day focuses on securing user and administrator access to FortiGate and network resources using local accounts, remote authentication servers, and robust two-factor authentication.
This day covers the critical High Availability feature, explaining how FortiGate devices can be clustered to provide redundancy and continuous operation in case of hardware or link failures.
This day introduces FortiGate's SD-WAN capabilities, covering how to configure zones, add interfaces as members, and create rules to intelligently steer traffic across multiple WAN links.
This day covers the Fortinet Security Fabric, a powerful integration of Fortinet products for unified visibility, management, and automated threat response across the network.
This final day is dedicated to reinforcing learning, consolidating knowledge, and preparing learners for the FortiGate Administrator certification exam.