Fortinet Network Security Expert 4 (NSE4)

Introduction
Fortinet Network Security Expert
(NSE4)
What is?

¡ The NSE 4 Network Security Professional designation recognizes the ability to install and
manage the day-to-day configuration, monitoring, and operation of a FortiGate device to support
specific corporate network security policies.

Target Audience

● Security administrators ● Security consultants

● Network administrators ● System engineers

Course Objectives
¡ Deploy the appropriate operation mode for your network.

¡ Use the GUI and CLI for administration.

¡ Identify the characteristics of the Fortinet security fabric
¡ Control network access to configured networks using firewall policies.

¡ Apply port forwarding, source NAT, and destination NAT.

¡ Authenticate users using firewall policies

¡ Understand encryption functions and certificates.

Course Objectives
¡ Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security
policies.

¡ Configure security profiles to neutralize threats and misuse, including viruses,

torrents, and inappropriate websites.

¡ Apply application control techniques to monitor and control network applications

that might use standard or non-standard protocols and ports.

¡ Fight hacking and denial of service(DoS).

¡ Defend against data leaks by identifying files with sensitive data, and
block them from leaving your private network. Cont.
Course Objectives
¡ Offer an SSL VPN for secure access to your private network.

¡ Implement a dialup IPsec VPN tunnel between FortiGate and FortiClient.

¡ Collect and interpret log entries.

¡ Analyze a FortiGate's route table.

¡ Route packets using policy-based and static routes for multi-path and load balanced
deployments.

¡ Configure SD-WAN to load balance traffic between multiple WAN links

effectively.
Cont.
Course Objectives

¡ Inspect traffic transparently, forwarding as a Layer2 device.

¡ Divide FortiGate into two or more virtual devices, each operating as an independent
FortiGate, by configuring virtual domains (VDOMs).

¡ Establish an IPsec VPN tunnel between two FortiGate appliances.

¡ Compare policy-based to route-based IPsec VPN.

¡ Implement a meshed or partially redundant VPN.

¡ Diagnose failed IKE exchanges.

Cont.
Course Objectives

¡ Offer Fortinet Single Sign On (FSSO) access to network services,

integrated with Microsoft Active Directory.

¡ Deploy FortiGate devices as an HA cluster for fault tolerance and high performance.
¡ Deploy implicit and explicit proxy with firewall policies, authentication, and
caching.

¡ Diagnose and correct common problems.

Cont.
Course Prerequisites

¡ Knowledge of network protocols

¡ Basic understanding of firewall concepts
Course Outline
 Introduction to FortiGate and the Security Fabric

 Firewall Policies

 Network Address Translation (NAT)

 Firewall Authentication

 Logging and Monitoring

 Certificate Operations

 Web Filtering
Course Outline
 Application Control

 Antivirus

 Intrusion Prevention and Denial of Service

 SSL VPN

 Dialup IPsec VPN

 Data Leak Prevention (DLP)

Cont.
Course Outline
 Routing

 Software-Defined WAN (SD-WAN)

 Virtual Domains
 Layer 2 Switching

 Site-to-Site IPsec VPN

 Fortinet Single Sign-On (FSSO)

 High Availability (HA)

Cont.
Course Outline
 Web Proxy

 Diagnostics

Cont.
Lab Outline
 Introduction to FortiGate

 Firewall Policies
 Network Address Translation (NAT)
 Firewall Authentication

 Logging and Monitoring

 Certificate Operations

 Web Filtering
 Application Control
Lab Outline
 Antivirus

 Intrusion Prevention System (IPS) and Denial of Service (DoS)

 SSL-VPN

 Dialup IPsec VPN

 Data Leak Prevention (DLP)

 Routing

 SD-WAN
Lab Outline
 Virtual Domains

 Transparent Mode

 Configuring a Site-to-Site IPsec VPN

 Fortinet Single Sign-On (FSSO)

 High Availability (HA)

 Web Proxy

 Diagnostics
Lab Topology
Study material
Calendar
 Thursday Friday
S1

21 24
2019 JUNE MONDAY
CALENDAR YEAR CALE NDAR MO WITH FIRST CAY G F 'SEE
K
Monday Tuesday Wednesday Friday Saturday Sunday
Th ursday

w L" : IriEruuu«£iWi ”u Jul ti

<tz2 w u 2 : r ir ew3II PM de
aJ1:NQ’ut)rkUUlQSi

03 05 07 09
06
7. 'a'» r •e i ”g
w B 6: Ctr I ‘iE8\e Clue
8EiWiS w B z : 'A'e8 Fil•ei ii
10 g
11 12 16
13 14 15

0
•
w

P
e
c
”
 2019 JUNE MONDAY

i& "]
7r&r+
Suzre
nlVui
]e
2019 JULY
CALE NDAR YEAR CALE NDA I MONTH FIRST CAY OF WEE K

Monday Tuesday Wednesday Thursday Friday Saturday

0l 02 03
07

2iuzgo«cs

OB 10 11

15 16 17 IB

22 23 24 25

J9 30 3l
Q&A