NSE 4 – FortiGate Network Security Engineer | Hands-on

Course Benefits

• Expand your knowledge base and validate your skills to appeal to potential employers.
• Improve your potential earning power to command a higher salary.
• Learn to perform complex, hands-on activities through lab, study and practice sessions.
• Gain exposure to a wide variety of important features, functions, and tasks.
• Develop a Defence in Depth mindset against threat factors.
• Differentiate yourself from your peers with broader & deeper capabilities to defend your infrastructures using best approach for protection.

Objective

After completing FortiGate NSE4 course, you will be able to:

• Describe capabilities of FortiGate UTM
• Neutralize threats/misuse: viruses, torrents, and inappropriate websites
• Control network access based on device type
• Authenticate users via firewall policies
• Offer an SSL VPN for secure access to your private network
• Establish an IPsec VPN tunnel between two FortiGate appliances
• Compare policy- vs. tunnel-based IPsec VPN
• Apply port forwarding, source NAT, and destination NAT
• Interpret log entries
• Generate reports
• Use the GUI and CLI for administration
• Deploy the right operation mode
• Deploy an explicit proxy with firewall policies, authentication, and caching
• Simplify protocol handling with application control
• Deploy FortiGate devices as an HA cluster for fault-tolerance & high performance
• Inspect traffic transparently, forwarding as a Layer 2 device
• Manage FortiGate device’s route table
• Route packets using policy-based and static routes for multi-path and load-balance deployments
• Connect virtual domains (VDOMs) without packets leaving FortiGate
• Implement a meshed / partially redundant VPN
• Diagnose failed IKE exchanges
• Fight hacking & denial of service (DoS)
• Diagnose IPS engine performance issues
• Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory
• Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
• Understand encryption functions and certificates
• Defend against data leaks by identifying files with sensitive data, and blocking them from leaving your private network
• Diagnose and correct common problems
• Optimize performance by configuring to leverage ASIC acceleration chips, such as CP or NPs, instead of only the CPU resources
• Implement IPv6 and hybrid IPv4-IPv6 networks