Description
Who should attend
Networking and security professionals involved in diagnosing, troubleshooting, and supporting an enterprise security infrastructure using FortiGate devices should attend this course.
Prerequisites
This course assumes advanced knowledge of networking, and extensive hands-on experience working with FortiGate.
You must have an understanding of the topics covered in the FortiGate Security (FORT-SECI) and FortiGate Infrastructure (FORT-INFRA) courses, or have equivalent experience.
It is also recommended that you have an understanding of the topics covered in the Enterprise Firewall (FORT-ENTFIREWALL) course.
Course Objectives
After completing this course, you will be able to:
- Set up a baseline for FortiGate and analyze the first steps to diagnose a FortiGate
- Monitor process activity, diagnose conserve mode, and troubleshoot unexpected reboots and frozen devices
- Analyze information in the session table and debug flow output
- Troubleshoot session helpers
- Troubleshoot common problems related to local, LDAP, and RADIUS authentication
- Troubleshoot common FSSO problems
- Troubleshoot FortiGuard and web filtering problems
- Monitor an HA cluster and troubleshoot common HA problems
- Troubleshoot and diagnose IPsec VPNs with debug and sniffer commands
- Troubleshoot routing problems with debug commands
- Monitor OSPF status and o troubleshoot common OSPF problems with debug commands
- Monitor and verify the BGP status with commands and troubleshoot common BGP issues
Outline: Network Security Support Engineer (NST)
- 1. Troubleshooting Concepts
- 2. System Resources
- 3. Sessions, Traffic Flow, and Networking
- 4. Security Fabric
- 5. Firewall Authentication
- 6. FSSO
- 7. Security Profiles
- 8. High Availability
- 9. IPsec
- 10. IPsec―IKEv2
- 11. Routing
- 12. BGP
- 13. OSPF
