NSE 4 FortiGate Infrastructure

In this 2-day class, you will learn advanced FortiGate networking and security. Topics include features commonly in complex or larger enterprise/MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, advanced IPsec VPN, IPS, SSO, data leak prevention, diagnostics, and fine-tuning performance.

Obsah školení

• After completing these courses, you will be able to:

  • Deploy FortiGate devices as an HA cluster for fault-tolerance & high performance
  • Inspect traffic transparently, forwarding as a Layer 2 device
  • Manage FortiGate device's route table
  • Route packets using policy-based and static routes for multi-path and load-balance deployments
  • Connect virtual domains (VDOMs) without packets leaving FortiGate
  • Implement a meshed / partially redundant VPN
  • Diagnose failed IKE exchanges
  • Fight hacking & denial of service (DoS)
  • Diagnose IPS engine performance issues
  • Offer Fortinet Single Sign On (FSSO) access to network services, integrated with Microsoft Active Directory
  • Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
  • Understand encryption functions and certificates
  • Defend against data leaks by identifying files with sensitive data, and blocking them from leaving your private network
  • Diagnose and correct common problems
  • Optimize performance by configuring to leverage ASIC acceleration chips, such as CP or NPs, instead of only the CPU resources
  • Implement IPv6 and hybrid IPv4-IPv6 networks

• Routing
• Software-Defined WAN (SD-WAN)
• Layer 2 Switching
• Virtual Domains
• Site-to-Site IPSec VPN
• Fortinet Single Sine-On (FFSO)
• High Availability (HA)
• Web Proxy
• Diagnostics