In this two-day course, you will learn how to use

advanced FortiGate networking and security.

Topics include features commonly applied in complex

or larger enterprise or MSSP networks, such as

advanced routing, transparent mode, redundant

infrastructure, site-to-site IPsec VPN, single sign-on

(SSO), and diagnostics.

After completing this course, you should be able to:

• Analyze a FortiGate route table
• Route packets using policy-based and static routes for multipath and load-balanced deployments
• Configure SD-WAN to load balance traffic between multiple WAN links effectively
• Inspect traffic transparently, forwarding as a Layer 2 device
• Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs)
• Establish an IPsec VPN tunnel between two FortiGate devices
• Implement a meshed or partially redundant VPN
• Diagnose failed IKE exchanges
• Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)
• Deploy FortiGate devices as an HA cluster for fault tolerance and high performance
• Diagnose and correct common problems

Networking and security professionals involved in the

design, implementation, and administration of a

network infrastructure using FortiGate devices should

attend this course.

This course assumes knowledge of basic FortiGate

fundamentals. You should have a thorough

understanding of all the topics covered in the

Knowledge of OSI layers

• Knowledge of firewall concepts in an IPv4 network
• Knowledge of the fundamentals of FortiGate, as presented in the FortiGate Security course

1. Routing

2. SD-WAN Local Breakout

3. Virtual Domains (VDOMs)

4. Layer 2 Switching

5. IPsec VPN

6. Fortinet Single Sign-On (FSSO)

7. High Availability (HA)

8. Diagnostics

This course and the

intended to help you prepare for the NSE 4

certification exam.

System Requirements

If you take an online format of this class, you must have a computer with:

• High-speed Internet connection
• Up-to-date web browser
• PDF viewer
• Speakers / headphones
• Either:

o HTML 5 support or
o Up-to-date Java runtime environment (JRE) with
Java plugin enabled in your web browser
Wired Ethernet connection (not Wi-Fi) recommended.
Firewalls including Windows Firewall or FortiClient
must allow connections with the online labs.

If you take the online format of this class, you must

use a computer that has the following:

• A high-speed internet connection
• An up-to-date web browser
• A PDF viewer
• Speakers or headphones
• One of the following:

• HTML5 support
• An up-to-date Java Runtime Environment (JRE) with Java plugin enabled in your web browser

You should use a wired Ethernet connection, not a

Wi-Fi connection. Firewalls, including Windows

Firewall and FortiClient, must allow connections to

the online labs.