Fortigate

Foritigate Firewall Training (NSE-4)

• In this 2-weeks class, you will learn how to use FortiGate UTM.
• In interactive labs, you will explore firewall policies, basic VPNs, virus detection, web filtering, application control, user authentication, and more.
• These administrative fundamentals will provide you with a solid understanding of how to integrate basic network security.

Duration: 12 Days
Prerequisites:

• Strong Knowledge of TCP/IP Protocols
• Basic Knowledge of Firewalls

COURSE OUTLINE:
Introduction to firewalls 1 Generation and 2nd Gne firewalls

• Understanding 1 Generation firewalls
• Understanding 2 Generation firewalls
• Understanding 2nd Gne Firewalls and futures
•  Understanding UTM firewalls futures

Module-1: Introduction to fortigate

• Understanding Features of Fortigate
• Understanding Fortigaurd Queries & Packages
• Initial Configuration
• Upgrading Firmware
• Backup & Restore
• Configuring DHCP

Module-2: Introduction to Routing

• configure static and dynamic routing
• Configure ospf and redistribution
• configure rip and redistribution
• BGP Configuration

Module-3: Firewall Policies

• Basic Firewall  Policies
• configure policies for internet
• Understanding NAT
• Configuring Static  NAT
• Configuring Static nat (port forwarding) using Virtual Server

Module-4: Authentication

• Create Authentication Policies
• Creating User and policies
• Create Admin privilege accounts
• Monitor firewall Users

Module-5: Logging & Monitoring

• Understanding Log severity levels
• Understanding Logs &Sublog types
• Understanding  Log structures
• Configuring log settings
• Redirect logs to Syslog & SNMP

Module-6: Antivirus

• Types of Virus & Malware
• Proxy based vs flow based scans
• Configure Antivirus scanning
• Test  Antivirus scanning
• Monitor antivirus logs

Module-7: Webfilter

• Understanding FortigateWeb-filtering Mechanism
• Configuring Content Filtering
• Configuring URL Filtering
• Monitor Webfilter logs

Module-8: Application Control

• Updating Application Control Database
• Configuring Application control profile
• Traffic Shaping
• Logging Application control event

Module-9: Intrusion Prevention system

• Choose IPS Signatures
• Configure Anomaly based Detection
• Configure signature based detection
• Configure DOS Sensor
• Monitor & Recognize Attacks using IPS

Module-10: Certificate Operations

• Generating a CSR
• Configuring SSL/SSH inspection
• Generating Self signed Certificate
• Enable SSL Inspection in Foritigate

Module-11: Virtual Domains

• Understanding VDOM’s
• VDOM resource vs Global resource
• Configuring Independent VDOM

Module-12: Data Leakage Prevention

• Understanding Function of DLP
• Filter files & Messages

Module-13: Basic IPSEC VPN

• Understanding Architecture of IPSEC
• Understanding IKE Phase 1 & 2
• Configure IPSEC between two networks
• Monitor VPN Traffic

Module-14: SSL VPN

• Understanding SSL Architecture
• Operation Modes of SSL
• Configuring SSL VPN WebMode
• Configuring Bookmark
• Configure firewall policies for SSL VPN
• Monitor SSL Users