FortiGate Firewall Administration
The FortiGate course is a hands-on training program focused on network security and firewall administration. You will learn initial FortiGate setup, interface and routing configuration, firewall policies, NAT, VPN fundamentals (IPsec/SSL), user authentication, security profiles (web filtering, application control, antivirus), logging and monitoring, troubleshooting, and best practices through real lab scenarios. The course builds practical skills for Network Security and System/Network Administrator roles.
Duration2 months
Schedule2 times per week
FormatHYBRID
Üstünlüklərimiz
Professional Mentors
Guidance and support from experienced specialists
Practical Learning
Not just theory — hands-on experience through real projects
Modern Technologies
Python, AI, web development and other trending fields
Career Support
CV preparation, interview simulations and access to job opportunities
Curriculum
32
Fortinet NSE 4 - FortiOS Administrator Course Syllabus
- 1.Module 1: System Initialization, Firmware, & Log Architecture Exam Focus: Deployment & System Configuration (20–25%) • System Initialization & Base Setup: Factory default restoration, administrative access controls (GUI, CLI, trusted hosts), and DHCP server configuration options. • Licensing & System Operations: Managing FortiGuard license entitlements, configuration file backup/restore procedures, and FortiGate firmware upgrade paths. • Log Workflow & Storage: Log storage targets (local, FortiAnalyzer, FortiCloud), FortiAnalyzer device registration, and log message filtering/searching. Module 2: High Availability (FGCP) & Troubleshooting Diagnostics Exam Focus: Deployment & System Configuration (20–25%) • FortiGate Clustering Protocol (FGCP): HA modes (Active-Passive vs. ActiveActive),primary election process, HA settings modification, and management interfaces. • Session Synchronization & Failover: Monitored interfaces, link state propagation, seamless failover mechanics, and hitless HA cluster firmware upgrades. • Packet Capture & Diagnostics: Layer 1/2 physical troubleshooting, packet capture using packet sniffers, and execution of CLI debug flow traces. • Resource Optimization: Monitoring CPU/memory utilization, identifying abnormal behaviors, and managing Memory Conserve Mode thresholds. Module 3: Cloud Edge & Secure Remote Access (CNF, VMs, & FortiSASE) Exam Focus: Deployment & System Configuration (20–25%) • Public Cloud Infrastructure: Security challenges in public cloud environments, FortiGate VM deployments across AWS/Azure, and cloud licensing models. • FortiGate Cloud-Native Firewall (CNF): Architecture, deployment scenarios, and integration into cloud workflows. • FortiSASE Architecture & Onboarding: Hybrid workforce security requirements, FortiSASE core components, user onboarding methods, and security policy integration. Module 4: Firewall Policies, NAT Execution, & Remote Authentication Exam Focus: Firewall Policies & Authentication (20–25%) • Firewall Policy Mechanics: Policy structure, matching logic, inspection modes (Flow vs. Proxy), and policy-based logging. • Source & Destination NAT: Static/Dynamic SNAT, IP pools, and Destination NAT (DNAT) using Virtual IPs (VIPs) and port forwarding. • Identity & Authentication: Remote authentication servers (LDAP & RADIUS configuration), Active vs. Passive user authentication, and GUI user monitoring. Module 5: Enterprise Single Sign-On (FSSO) Architecture Exam Focus: Firewall Policies & Authentication (20–25%) • FSSO Architecture & Operation: Identity tracking methods, Domain Controller (DC) Agent Mode vs. Collector Agent Mode. • Domain Integration: Configuring Collector Agents, Active Directory group monitoring, and mapping AD groups to FortiGate firewall policies. • FSSO Maintenance & Troubleshooting: Diagnosing login/logoff tracking issues, NTLM fallbacks, and user buffer verification via CLI. Module 6: Encrypted Traffic Inspection & Deep Content Security Exam Focus: Content Inspection (25–30%) • SSL/SSH Inspection Modes: Certificate Inspection vs. Deep SSL/SSH Inspection, private CA distribution to endpoints, and handling certificate errors. • Web Filtering & Categories: Flow-based vs. Proxy-based web filtering, FortiGuard category enforcement, custom URL filters, and quota handling. • Application Control: Application control in profile mode, deep packet inspection signatures, event monitoring, and application override troubleshooting. Module 7: Threat Prevention (Antivirus & Intrusion Prevention System) Exam Focus: Content Inspection (25–30%) • Antivirus Scanning Mechanisms: Antivirus profiles in flow-based and proxy-based modes, protocol options, and virus log analysis. • Intrusion Prevention System (IPS): IPS sensors, signature matching, custom signatures, rate-based filters, and blocking known exploits. • System Resource Protection: Analyzing IPS engine behavior, optimizing signature databases, and resolving IPS high-CPU conditions. Module 8: Routing Fundamentals, SD-WAN, & IPsec VPN Topologies Exam Focus: Routing (10–15%) & VPNs (10–15%) • Routing Foundations: Static routing, administrative distance, metric priorities, ECMP load balancing, and routing table lookup behavior. • SD-WAN Architecture: SD-WAN member interfaces, performance SLA targets, link quality monitoring (jitter, latency, packet loss), and SD-WAN rules. • IPsec VPN Deployment: IPsec concepts (Phase 1 & Phase 2), deploying IPsec tunnels via Wizard and manual configuration, and log analysis. • Redundant Tunnels & Mesh Topologies: Site-to-site redundant IPsec VPNs between FortiGate units and troubleshooting tunnel status/phase negotiation issues.
Our Top Graduates
Bu kurs üçün hələ məzun məlumatı əlavə olunmayıb.
Our Teachers
No teachers found in this category.
Market Salaries
1500 AZN
Junior
0-1 year experience
2300 AZN
Middle
1–3 years experience
3500+ AZN
Senior
3+ years experience
Frequently Asked Questions
idtech is a modern learning ecosystem providing education in technology, programming, and digital skills.
You can register by filling out the form in the 'Apply' section on our website.
Our courses are suitable for both beginners and those looking to deepen their expertise.
Yes, lessons are available both online and in classrooms.