FortiGate SD-WAN, Advanced Routing, and High Availability

Description

Advanced course aimed at professionals who need to design, implement, and operate complex FortiGate architectures.

The training covers dynamic routing, SD-WAN, high availability, redundancy, link optimization, and advanced diagnostics.

Through labs, participants will work with scenarios that include multiple Internet providers, remote branches, VPN, dynamic routing, and failover recovery.

Objectives

Upon completion of this course, the participant will be able to:

• Implement advanced routing.

• Configure OSPF.

• Configure BGP.

• Use Policy Based Routing.

• Work with ECMP.

• Design SD-WAN architectures.

• Configure SD-WAN rules.

• Define SLA and Performance SLA.

• Manage multiple WAN connections.

• Configure VPN over SD-WAN.

• Design high availability scenarios.

• Configure FortiGate HA.

• Perform advanced troubleshooting.

• Use CLI tools and packet capture.

Target Audience

• Network engineers.

• Advanced FortiGate administrators.

• Infrastructure architects.

• Cybersecurity professionals.

• WAN and SD-WAN network administrators.

Prerequisites

It is recommended to have:

• Previous experience with FortiGate.

• Knowledge of routing.

• Knowledge of VPN.

• Experience with firewall policies.

• Basic knowledge of OSPF and BGP.

Contents

Module 1. Advanced Routing

• FortiGate routing architecture.

• Routing table.

• Advanced static routing.

• ECMP.

• Policy Based Routing.

Module 2. OSPF

• Fundamentals.

• Areas.

• Adjacencies.

• Metrics.

• Redistribution.

• Troubleshooting.

Module 3. BGP

• BGP architecture.

• Neighbors.

• AS.

• Advertisements.

• Route selection.

• Policies.

• Troubleshooting.

Module 4. SD-WAN Fundamentals

• SD-WAN concepts.

• Use cases.

• Architecture.

• SD-WAN interfaces.

• Members.

Module 5. SD-WAN Rules

• Service Rules.

• Selection strategies.

• Cost.

• Quality.

• Priority.

• Load balancing.

Module 6. Performance SLA

• Health Checks.

• Latency.

• Jitter.

• Packet loss.

• Failover.

• Dynamic selection.

Module 7. VPN and SD-WAN

• Site-to-site VPN.

• Redundant tunnels.

• VPN over multiple links.

• Dynamic route selection.

Module 8. High Availability

• FortiGate HA architecture.

• Active-Passive.

• Active-Active concepts.

• Heartbeat.

• Synchronization.

• Failover.

Module 9. Redundancy and Continuity

• Dual ISP.

• Redundancy.

• Failover recovery.

• Resilient architecture design.

Module 10. Advanced Diagnostics

• Advanced CLI.

• Debug Flow.

• Sniffer.

• Packet Capture.

• Routing diagnostics.

• VPN diagnostics.

• SD-WAN troubleshooting.

Labs

• Enterprise topology with two ISPs.

• Dynamic routing with OSPF.

• BGP implementation.

• Policy Based Routing.

• ECMP.

• SD-WAN creation.

• Performance SLA configuration.

• ISP failure simulation.

• Automatic failover.

• Site-to-site VPN via multiple links.

• FortiGate high availability.

• Packet Capture.

• Debug Flow.

• Comprehensive troubleshooting.