Pre-Requisites

Knowledge of OSI layers
Knowledge of firewall concepts in an IPv4 network
Knowledge of the fundamentals of FortiGate, as presented in the FortiGate Security course

Lessons

 

In this two-day course, you will learn how to use advanced FortiGate networking and security. Topics include features commonly applied in complex or larger enterprise or MSSP networks, such as advanced routing, transparent mode, redundant infrastructure, site-to-site IPsec VPN, single sign-on (SSO), web proxy, and diagnostics.

This course and the FortiGate Security course are intended to help you prepare for the NSE 4 certification exam.

Who should attend

Networking and security professionals involved in the design, implementation, and administration of a network infrastructure using FortiGate appliances should attend this course.

This course assumes knowledge of basic FortiGate fundamentals. Participants should have a thorough understanding of all the topics covered in the FortiGate Security course before attending the FortiGate Infrastructure course.

Course Objectives

After completing this course, you should be able to:

• Analyze a FortiGate route table
• Route packets using policy-based and static routes for multipath and load -balanced deployments
• Configure SD-WAN to load balance traffic between multiple WAN links effectively
• Inspect traffic transparently, forwarding as a Layer 2 device
• Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs)
• Establish an IPsec VPN tunnel between two FortiGate devices
• Implement a meshed or partially redundant VPN
• Diagnose failed IKE exchanges
• Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)
• Deploy FortiGate devices as an HA cluster for fault tolerance and high performance
• Deploy implicit and explicit proxy with firewall policies, authentication, and caching
• Diagnose and correct common problems

Outline: FortiGate Infrastructure (FORT-INFRA)

Course Outline:

• 1. Routing
• 2. Software-Defined WAN (SD-WAN)
• 3. Virtual Domains
• 4. Layer 2 Switching
• 5. IPsec VPN
• 6. Fortinet Single Sign-On (FSSO)
• 7. High Availability (HA)
• 8. Web Proxy
• 9. Diagnostics

Cancellation Policy

All requests to change a registration must be in writing via e-mail to info@fastlaneca.com or faxed to us at 919-882-8036. Students may cancel more than 15 days from the start of the class with no penalty. If it is within 14 days of the start of the class, students can only reschedule. Fast Lane, or one of its Partners, reserves the right to cancel a course for any reason more than 14 days before the start of the class. Liability is limited to the registration fee only. Rescheduling: Students may reschedule a registration up to 7 business days before the scheduled start date without penalty. Rescheduling will be defined as transferring registration to the same course on a different date, or transferring to another course of equal or lesser value up to 6 months from the original course start date. If a student reschedules fewer than 7 business days before the class, or reschedules for a second time, the entire original course fee will be forfeited. An additional course fee will be required for the new registration. Substitutions: Substitutions are permitted prior to the start of the class. All substitutions must be submitted in writing to info@fastlaneca.com or faxed to us at prior to the start of class. No Shows: Failure to attend without written notice prior to the start date of the course will be considered a "no show" and will result in forfeiture of the full course price including NetApp courses paid for with NetApp Training Units. Fast Lane, at its own discretion may allow a no show student to re-sit another session of the same or lower priced course.