In this three-day class, candidates will learn the fundamentals of using FortiManager for centralized network administration of many FortiGate devices and the fundamentals of using FortiAnalyzer 6.0 for centralized logging and reporting. Candidates will learn how to configure and deploy FortiAnalyzer, and identify threats and attack patterns through logging, analysis, and reporting. Finally, students will examine some helpful troubleshooting techniques.

In interactive labs, candidates will explore:

• Deployment strategies, which include single or multiple ADOMs, device registration, policy packages, shared objects, installing configuration changes, provisioning FortiManager as a local FortiGuard distribution server, and troubleshooting the features that are critical to day-to-day use after you deploy FortiManager.
• Administration and management, register devices for log collection with FortiAnalyzer, use FortiAnalyzer to centrally collect logs; perform a forensic analysis of logs based on simulated network attacks; create reports, and explore solutions to common misconfiguration issues.

NSE5 FortiManager

• Describe the key features and capabilities of FortiManager
• Deploy administrative domains (ADOMs) to support multiple customers on a single FortiManager
• Restrict concurrent ADOM access by using workspaces and workflow mode
• Use provisioning templates for device-level changes across many devices
• Identify the synchronization states and manage the revision history of managed devices
• Manage firewall policies across multiple FortiGate devices using policy packages with shared and dynamic objects
• Deploy policies and objects from the global ADOM to multiple ADOMs
• Understand Security Fabric integration with FortiManager
• Deploy SD-WAN using central management
• Describe high-availability (HA), backup, and recovery options for FortiManager
• Manage the firmware of supported devices centrally
• Offer a local FortiGuard distribution server to your Fortinet devices
• Diagnose and troubleshoot import and installation issues

NSE5 FortiAnalyzer

• Describe key features and concepts of FortiAnalyzer
• Deploy an appropriate architecture
• Use administrative access controls
• Monitor administrative events and tasks
• Manage ADOMs
• Configure RAID
• Register supported devices
• Troubleshoot communication issues
• Manage disk quota
• Manage registered devices
• Protect log information
• View and search logs
• Troubleshoot and manage logs
• Monitor events
• Generate and customize reports
• Customize charts and datasets
• Manage reports
• Troubleshoot reports

• Anyone who is responsible for day-to-day management of FortiGate security policies using the FortiManager platform
• Anyone who is responsible for day-to-day management of a FortiAnalyzer appliance and FortiGate security information.

• Knowledge of firewalling concepts in an IPv4 network
• Familiarity with all topics in FortiGate Security and FortiGate Infrastructure
• Basic understanding of network management systems
• Familiarity with all topics presented in FortiGate Security and FortiGate Infrastructure
• Knowledge of the SQL select syntax is helpful

NSE5 FortiManager

• Introduction and initial configuration
• Administration and management
• Device registration
• Device level configuration and installation
• Policy and objects
• Advanced configuration
• Diagnostics and troubleshooting
• Additional configuration

NSE5 FortiAnalyzer

• Introduction and Initial Configuration
• Administration and Management
• Device Registration and Communication
• Logging
• Reports