01 Intro
01 Intro
Fortinet Certifications
Firewalls Page
Fortigate Firewall (NSE ) Contents
What is firewall ?!
Hardware Device and ports
How to build the course lab from scratch step-by-step
Installation and initial configuration
System settings (host name, System Time, Password Policy......)
Inspection Modes
NGFW Modes
Basic configuration
Managing admin password and profiles
Reset admin lost password.
Administrator profiles.
Understand and configure interface types:
Aggregate Interfaces
Redundant interfaces
VLAN interface
Software Switch interface
Zone configuration
DHCP service configuration
DNS services configuration
Managing objects
Firewall local user database
Managing guest user
Captive portal
Routing
Static Routing
Dynamic Routing OSPF, RIP, BGP
Policy Routing
Back up, Restore firewall configuration
Upgrade, downgrade the firmware
NAT
Understanding NAT !
Static NAT
Dynamic NAT
PAT
Publishing Servers
Access Policy
Integration with active directory
BYOD (Bring Your Own Device)
Web Filtering
Firewalls Page
Web Filtering
SSL decryption and inspection
What is encryption and decryption!
How SSL works !
Differences between SSL and IPSec !
How SSL traffic can be decrypted !
Antivirus
IPS inspection
Application Filtering
DNS Filter
DoS protection
Virtual Private Network (VPN)
What is VPN ! and why used !
How VPN works in general !
VPN types !
Deploying Site to Site VPN !
Deploying Remote Access VPN !
Traffic Shaping
Managing Certificates
ZTNA (Zero Trust Network Access)
Forticloud
Virtual Domains (VDOM)
Endpoint Control and EMS
DLP (Data Leak Prevention)
High Availability
A/P (Active/Passive)
A/A (Active/Active)
SNMP
Packet Capture
Virtual Wire pair
Redundant Internet with SD-WAN
Performance SLA
Passive Authentication
Logging and Monitoring
FortiGate in Transparent mode
FortiGate as a WAF
Fortinet demo center
Firewall.
Commonly describes systems or devices that are placed between a trusted and an untrusted network.
A firewall could control which user s traffic is allowed through the firewall.
A firewall can detect and block malicious data.
Firewalls Page
Classic Firewall Vs Next Generation Firewall
Firewalls Page
Lab topology.
Basic configuration.
Edit the vm settings with cpu and G RAM.
Default username admin , no password. Type the new password
Configure port with a static ip address and allow management traffic
# config system interface
# edit port
# set mode static
# set ip (the default of port is )
# set allowaccess http https ping telnet
# end
# execute ping
Then configure the firewall with a default route to be able to reach Forti-cloud
config router static
edit
set dst /
set gateway
set device "port "
next
end
# show router static
Then open browser http://
By default the port is the internal interface and assigned the ip /
HTTPS, ping, DHCP, SSH services are running on port
Firewalls Page
HTTPS, ping, DHCP, SSH services are running on port
Firewalls Page