FortiGate Security, VPN, and Advanced Protection

Description

This course delves into Fortinet FortiGate security capabilities, addressing threat protection, security profiles, traffic inspection, and VPN communications.

Participants will learn to configure security features such as antivirus, web filtering, application control, IPS, and SSL Inspection, as well as site-to-site IPsec VPNs and remote access.

The training incorporates advanced laboratories that replicate enterprise scenarios with multiple networks and sites.

Objectives

Upon completing the course, the participant will be able to:

• Design advanced security policies.

• Apply security profiles.

• Configure antivirus protection.

• Implement web filtering.

• Configure Application Control.

• Configure IPS.

• Work with SSL inspection.

• Design site-to-site VPNs.

• Configure secure remote access.

• Segment networks.

• Analyze events and threats.

• Perform security troubleshooting.

Target Audience

• Security administrators.

• Network engineers.

• Infrastructure technicians.

• Cybersecurity professionals.

• FortiGate administrators with basic knowledge.

Prerequisites

Knowledge equivalent to the course:

FortiGate Administrator

or previous experience managing:

• Firewalls.

• TCP/IP networks.

• Routing.

• NAT.

• VPN.

Contents

Module 1. Advanced firewall policies

• Traffic flow.

• Rule evaluation.

• Advanced objects.

• Identity-based policies.

• Segmentation.

Module 2. Security Profiles

• UTM concept.

• Security profiles.

• Applying profiles to policies.

Module 3. Antivirus and malware protection

• Inspection engines.

• Antivirus.

• Threat detection.

• Actions and quarantine.

Module 4. Web Filtering

• Categories.

• Policies.

• Exceptions.

• Monitoring.

Module 5. Application Control

• Application identification.

• Usage policies.

• Blocking and monitoring.

• High-risk applications.

Module 6. IPS

• Intrusion Prevention System.

• Signatures.

• Profiles.

• Exceptions.

• Best practices.

Module 7. SSL Inspection

• SSL inspection.

• Certificates.

• Deep Inspection.

• Security and privacy considerations.

Module 8. IPsec VPN

• IPsec fundamentals.

• Phase 1.

• Phase 2.

• Site-to-site VPN.

• Routing via VPN.

• Diagnostics.

Module 9. Remote access

• Remote access VPN.

• Authentication.

• Policies.

• Access control.

Module 10. Monitoring and response

• Logs.

• Security events.

• Alerts.

• Diagnostics.

• Troubleshooting.

Practical labs

• Topology with multiple networks.

• Advanced policy configuration.

• Antivirus and Web Filtering.

• Application Control.

• IPS.

• SSL Inspection.

• IPsec VPN configuration between two sites.

• Remote access.

• Malicious traffic simulation.

• Log and event analysis.

• Incident resolution.