Training Fortinet

NSE 2 – Network Security Core Solutions

NSE 2 Description

NSE 2 is the core solutions level of the Fortinet Network Security Expert (NSE) program. It is intended to provide a basic understanding of the solutions of the FortiGate product line.

• Pre-recorded voice/video instruction materials
• Module Assessments

NSE 2 Program Requirements

• Complete any five of the nine NSE 2 training modules
• Passing the five chosen module exams with a score of 90% or better

Who Should Attempt the NSE 2

NSE 2 is available to Fortinet partner and employees only wishing to learn about FortiGate Network Security Solutions. It is also the second step required in completion of the Fortinet Solutions and Sales steps of the program. Fortinet Sales and pre-sales associates and those of Fortinet Partners, are required to complete this step in order to progress to the next level of the program.

• FortiGate Overview
• Enterprise Edge/Branch
• Data Center
• Distributed Enterprise/SMB
• Cloud SDN
• FortiGuard Services
• Carrier MSSP
• Management
• Competitive Overview

NSE 3 – Network Security Advanced Solutions

NSE 3 Description

NSE 3 is the advanced solutions level of the Fortinet Network Security Expert (NSE) program. It is intended to provide a basic understanding of the advanced solutions of the Fortinet product line.

NSE 3 is available to Fortinet partner and employees only wishing to learn about Fortinet Network Security Advanced Solutions. It is also the third step required in completion of the Fortinet Solutions and Sales steps of the program. Fortinet Sales and pre-sales associates and those of Fortinet Partners, are required to complete the requirements to achieve NSE 3 Fortinet Network Security Associate (FNSA).

• Wireless Application Firewall (WAF) Solution
• Secure eMail Gateway Solution
• DDoS Protection Solution
• Advanced Threat Protection (ATP) Solution
• Wireless LAN Solutions
• Application Delivery Controller (ADC) Solution
• Identity Solution Management
• Client/BYOD Solutions
• Telephone System Solutions

NSE 3 includes study materials and assessments for each module via the Fortinet Learning Center (FLC), including:

• Pre-recorded voice/video instruction materials
• Module Assessments

NSE 3 Program Requirements

• Complete any four of the nine NSE 3 training modules
• Passing each chosen module exam with a score of 90% or better

Who Should Attempt the NSE 3

NSE 2 is available to Fortinet partner and employees only wishing to learn about FortiGate Network Security Solutions. It is also the second step required in completion of the Fortinet Solutions and Sales steps of the program. Fortinet Sales and pre-sales associates and those of Fortinet Partners, are required to complete this step in order to progress to the next level of the program.

NSE 4 6.2 – Security & Infrastructure

NSE 4 Description

Security, 3 days

In interactive labs, you will explore firewall policies, security fabric, user authentication, SSL VPN, dial-up IPsec VPN, and how to protect your network using security profiles such as IPS, antivirus, web filtering, application control, and more. These administration fundamentals will provide you with a solid understanding of how to implement basic network security.

Infrastructure, 2 days

In interactive labs, you will explore firewall policies, security fabric, user authentication, SSL VPN, dial-up IPsec VPN, and how to protect your network using security profiles such as IPS, antivirus, web filtering, application control, and more. These administration fundamentals will provide you with a solid understanding of how to implement basic network security.

NSE 4 Prerequisites

• Knowledge of network protocols
• Basic understanding of firewall concepts

Who Should Attempt the NSE 4

Networking and security professionals involved in the management, configuration, administration, and monitoring of FortiGate devices used to secure their organizations’ networks should attend this course. Participants should have a thorough understanding of all the topics covered in the FortiGate Security course before attending the FortiGate Infrastructure course.

Objectives – FortiGate Security & Infrastructure

After completing this course, you should be able to:

Deploy the appropriate operation mode for your network
Use the GUI and CLI for administration
Identify the characteristics of the Fortinet Security Fabric
Control network access to configured networks using firewall policies
Apply port forwarding, source NAT, and destination NAT
Authenticate users using firewall policies
Understand encryption functions and certificates
Inspect SSL/TLS-secured traffic to prevent encryption used to bypass security policies
Configure security profiles to neutralize threats and misuse, including viruses, torrents, and inappropriate websites
Apply application control techniques to monitor and control network applications that might use standard or non-standard protocols and ports
Fight hacking and denial of service (DoS)
Offer an SSL VPN for secure access to your private network
Implement a dialup IPsec VPN tunnel between FortiGate and FortiClient
Collect and interpret log entries

Analyze a FortiGate route table
Route packets using policy-based and static routes for multipath and load -balanced deployments
Configure SD-WAN to load balance traffic between multiple WAN links effectively
Inspect traffic transparently, forwarding as a Layer 2 device
Divide FortiGate into two or more virtual devices, each operating as an independent FortiGate, by configuring virtual domains (VDOMs)
Establish an IPsec VPN tunnel between two FortiGate devices
Compare policy-based to route-based IPsec VPN
Implement a meshed or partially redundant VPN
Diagnose failed IKE exchanges
Offer Fortinet Single Sign-On (FSSO) access to network services, integrated with Microsoft Active Directory (AD)
Deploy FortiGate devices as an HA cluster for fault tolerance and high performance
Deploy implicit and explicit proxy with firewall policies, authentication, and caching
Diagnose and correct common problems

Agenda

Security

1. Introduction and Initial Configuration
2. Security Fabric
3. Firewall Policies
4. Network Address Translation (NAT)
5. Firewall Authentication
6. Logging and Monitoring
7. Certificate Operations
8. Web Filtering
9. Application Control
10. Antivirus
11. Intrusion Prevention and Denial of Service
12. SSL VPN
13. Dialup IPsec VPN

Infrastructure

1. Routing
2. Software-Defined WAN (SD-WAN)
3. Virtual Domains
4. Layer 2 Switching
5. Site-to-Site IPsec VPN
6. Fortinet Single Sign-On (FSSO)
7. High Availability (HA)
8. Web Proxy
9. Diagnostics

Certification

The NSE 4 certification is valid for 2 years. You can re-certify by taking the current NSE 4 exam at a Pearson Vue center.

About the NSE 4 Exam

• Exam series: NSE4_FGT-6.2
• Number of questions: 70
• Time allowed to complete: 120 minutes
• Language: English and Japanese
• Status: Available

NSE 5 – FortiGate Network Security Management and Analysis

NSE 5 Description

The FortiGate Security Management and Analysis NSE 5 designation identifies your ability to use the FortiManager and FortiAnalyzer to provide Network Analysis and Reporting.

NSE 5 Program Requirements

• Completion of the NSE 5 exam at a Pearson Vue test center

FortiManager and FortiAnalyzer training is highly recommended to prepare you for the NSE 5 exam.

Who Should Attempt the NSE 5

Post-sales and support personnel who want acknowledgement that they are a Network Security Analyst Professional.

Certification

The NSE 5 certification is valid for 2 years.
You can re-certify by fulfilling the current NSE 5 requirements.

About the NSE 5 Exam

• Name: NSE 5 – Fortinet Network Security Analyst
• Language: English only
• Available at: Pearson Vue Test Centers worldwide
• Cost: $400
• Number of items: 50
• Time allowed to complete: 100 minutes total test time
• Passing Score: 70%
• Scoring Method: Item must be 100% correct for credit, no partial credit. No deduction for incorrect answers.
• Type of questions: Multiple Choice, Multiple Select
• Time required between attempts: 15 days
• Time for acknowledgement/score to be reflected in FLC transcripts: 21 days

NSE 6 – Fortinet Advanced Products Professional

NSE 6 Description

The FortiGate NSE 6 – Advanced Products Professional designation recognizes your broad and in-depth skills with Fortinet’s security products. This designation is earned by demonstrating your skill in four or more identified specialized content areas.

NSE 6 Program Requirements

NSE 6 Certification requires passing a minimum of four Fortinet Specialist Exams for the technologies below:

• FortiAuthenticator Specialist
• FortiSandbox Specialist
• FortiWeb Specialist
• FortiMail Specialist
• FortiADC Specialist
• FortiDDoS Specialist
• Integrated and Cloud Wi-Fi Specialist*
• Infrastructure Wi-Fi Specialist*

Fortinet Specialist Exams are hosted at Pearson Vue testing centers worldwide.

*If the Specialist exam is not available in your locale, contact your regional training administrator for more information and accommodation.

Corresponding coursework is recommended but not required.

Who Should Attempt the NSE 6

Post-sales and support personnel who want acknowledgement that they have in-depth knowledge and skills in a variety of Fortinet security products.

Certification

The NSE 6 certification is valid for two years. To remain current, you must have passed any current exams associated with your areas of specialization.

You can re-certify by taking the NSE 6 related exams at a Pearson Vue center.

About the NSE 6 Exams

Fortinet Specialist Exams

• Specialist designation is earned by successfully passing one of the product-specific exams
• Language: English only
• Available at: Pearson Vue testing centers worldwide
• Cost: $150
• Number of items: 15
• Time allowed to complete: 30 minutes total test time
• Passing score: 70%
• Scoring method: Item must be 100% correct for credit, no partial credit. No deduction for incorrect answers.
• Type of questions: multiple choice, multiple select
• Time required between attempts: 15 days
• Time for acknowledgement/score to be reflected in FLC transcripts: 21 days
• NSE 6 designation is earned by passing four or more separate Specialist Exams

NSE 6 Exam

• Comprehensive exam where candidates choose which four products will be in their test.
• Language: English only
• Available at: Pearson Vue testing centers worldwide
• Cost: $400
• Number of items: 60
• Time allowed to complete: 120 minutes total test time
• Passing score: 70%
• Scoring method: Item must be 100% correct for credit, no partial credit. No deduction for incorrect answers.
• Type of questions: multiple choice, multiple select
• Time required between attempts: 15 days
• Time for acknowledgement/score to be reflected in FLC transcripts: 21 days

NSE 7 – Fortinet Troubleshooting Professional

NSE 7 Description

NSE 7 designation certifies that individuals have the expertise to isolate, diagnose, and fix the most common issues in networks with FortiGate devices, and to configure more advanced features often used in large networks such as OSPF routing.

NSE 7 Program Requirements

• Successfully passing the NSE 7 exam at a Pearson Vue test center.

The FortiGate III course is highly recommended as the best way to prepare for the NSE 7 exam.

Who Should Attempt the NSE 7

Post-sales and support personnel who want acknowledgement that they have in-depth knowledge and skills in a variety of Fortinet security products.

Certification

The NSE 7 certification is valid for two years. You can re-certify by fulfilling the current NSE 7 requirements.

About the NSE 7 Exam

• Name: NSE 7
• Language: English only
• Available at: Pearson Vue Test Centers worldwide
• Cost: $200 Number of items: 30
• Time allowed to complete: 60 minutes total test time
• Passing Score: 70%
• Scoring Method: Item must be 100% correct for credit, no partial credit. No deduction for incorrect answers.
• Type of questions: Multiple Choice, Multiple Select
• Time required between attempts: 15 days
• Time for acknowledgement/score to be reflected in FLC transcripts: 21 days

NSE 8 – Fortinet Network Security Expert

NSE 8 Description

The FortiGate Security Expert designation recognizes a candidate’s broad and in-depth knowledge of network security design, configuration, and troubleshooting for complex networks.

NSE 8 Program Requirements

• Completion of the Fortinet NSE 8 written exam.
• Completion of the Fortinet NSE 8 practical exam.

Who Should Attempt the NSE 8

The Fortinet Network Security Expert 8 (NSE 8) exams are for those who are experts in network security and Fortinet’s suite of security products. The process to prepare for the exam can be costly and time consuming. In addition to formal training, you should have experience in a variety of complex networks, solving complicated security problems.

What are the pre-requisites for the NSE 8

There are no pre-requisites for the NSE 8 written exam.
The written exam is a pre-requisite for the practical exam.

How I can enroll for the NSE 8 Certification?

The written exam is available worldwide through Pearson VUE test centers. If you pass the written exam, you should check with your regional Fortinet Training administrator to schedule and coordinate the NSE 8 practical session. These sessions are available at some Fortinet NSE 8 test locations.

Certification

The NSE 8 certification is valid for two years. You can re-certify by taking the current written exam at a Pearson Vue test center.

About the NSE 8 Written Exam

The Fortinet NSE 8 written exam is a 90-minute multiple-choice exam that is offered at Pearson VUE test centers worldwide. Questions include design scenarios, exhibits, configuration extracts and troubleshooting captures that assess the networking, security, and Fortinet solution knowledge and experience of the test taker. A practice exam is available to give you a sense of the kinds of questions you’ll find on the NSE 8 exam at Pearson VUE.

• Name: NSE 8 – Fortinet Network Security Expert
• Language: English only
• Available at: Pearson VUE Test Centers worldwide
• Cost: $400
• Number of questions: 65
• Time allowed to complete: 90 minutes total test time
• Scoring method: Each question must be 100% correct for credit, no partial credit. No deduction for incorrect answers.
• Type of questions: Multiple choice and multiple select with exhibits
• Time required between attempts: 15 days
• Time for acknowledgement/score to be reflected in FLC transcripts: 21 days
• Scoring: Pass or fail
• Test taker will receive a document with pass or fail general result including sections passed or failed. No further details or assistance will be provided.
• Expiration: 2 years
• Practice exam: Available from the Fortinet Learning Center

About the NSE 8 Practical Exam

Once a candidate has passed the prerequisite NSE 8 written exam, a voucher should be acquired to schedule the practical exam either remotely or in person at one of Fortinet’s NSE 8 test locations worldwide. The Fortinet NSE 8 practical exam is a two-day hands-on evaluation. During the practical exam, the candidate must configure and validate a complete network topology involving multiple Fortinet products.

• Language: English only
• Available at: On site or remotely; scheduling required
• Cost: $ 1600.00
• Number of tasks: 48
• Time allowed to complete: 2 days; proctored
• Scoring method: Each task must be 100% correct for credit. No partial credit. No deduction for incorrect answers.
• Type of tasks: Hands-on configuration and troubleshooting
• Time required between attempts: 15 days
• Time for acknowledgement/score to be reflected in FLC transcripts: 21 days
• Scoring: Pass or fail
• Test taker will receive a document with pass or fail general result including sections passed or failed. No further details or assistance will be provided.