In this lab-only course, available for purchase only, you are assigned a series of do-it-yourself (DIY) configuration tasks in a virtual lab environment.

The configuration tasks cover some of the topics in the NSE 4 certification exam and include the use of the most common FortiGate features, such as firewall policies, the Fortinet Security Fabric, user authentication, SSL and IPsec VPNs, equal-cost multi-path (ECMP) routing, IPS, high availability (HA), and content inspection.

After completing this course, you will be able to:

• Use the GUI and CLI for administration
• Control access to network resources using firewall policies
• Authenticate users using firewall policies
• Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
• Apply web filter and application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports
• Protect your network against known attacks using IPS signatures
• Mitigate and block DoS attacks
• Configure SSL VPN and IPSec VPN for remote access
• Route packets using ECMP routing
• Deploy FortiGate devices as an HA cluster for fault tolerance and high performance
• Configure the Fortinet Security Fabric

Networking and security professionals involved in the management, configuration, administration, and monitoring of FortiGate devices used to secure their organizations' networks should attend this course.

The NSE 4 Immersion course is intended for students who have some experience operating FortiGate devices and want to refresh their skills. This course is ideal for students who have already taken the NSE 4 FortiGate Security and FortiGate Infrastructure courses, or have equivalent working experience, and want to get more hands-on lab practice before taking the NSE 4 certification exam.

You must have an understanding of the topics covered in the following courses, or have equivalent experience:

• NSE 4 FortiGate Security
• NSE 4 FortiGate Infrastructure

System Requirements

If you take the online format of this class, you must use a computer that has the following:

• A high-speed Internet connection
• An up-to-date web browser
• A PDF viewer
• Speakers or headphones
• One of the following:
  HTML 5 support;
  An up-to-date Java Runtime Environment (JRE) with Java plugin enabled in your web browser

You should use a wired Ethernet connection, not a WiFi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.

1. Firewall Policy, DNAT, and Authentication
2. SSL and Content Inspection
3. IPS
4. SSL VPN and IPsec VPN
5. ECMP Routing
6. Security Fabric
7. HA