Description

This training will teach you how to deploy the Fortinet security solution to protect your corporate network. At the end, you will be able to install it and will master the essential elements of its configuration, including application filtering, VPNs and high availability.

Who is this training for ?

For whom ?

Technician, administrator and systems/networks/security engineer.

Prerequisites

Training objectives

Describe the FortiGate functionalitiesImplement an SSL and IPSEC VPN

Install and configure the firewall

Implement a network and application filtering strategy

Implement the high availability of FortiGate

Training program

• Introduction
  • Firewall technologies and characteristics.
  • The architecture.
  • The FORTINET product family.
  • The components of the Appliance.
• Configuration et administration
  • Administrative tasks.
  • CLI/GUI and FortiManager modes.
  • The installation procedure.
  • Getting started main interface.
  • Practical work Install and configure the firewall.
• Network filtering and application filtering
  • The firewall's access control policy.
  • Address and port filtering.
  • Define a filtering policy.
  • Rules management.
  • Content filtering and pattern detection.
  • URL filtering.
  • Advanced options.
  • Anti-spam filters.
  • SMTP protocol control.
  • Attached files.
  • Protection profiles.
  • L 'antivirus.
  • Blocking by file extension.
  • Practical work Implementation of a network and application filtering strategy.
• NAT and routing
  • NAT/Route/Transparent usage modes.
  • Static routing and dynamic routing.
  • Which routing policy should be put in place? rnPractical work rnSetting up a routing policy.
  • Authentication with AD or Radius.
• VLANs and Virtual Domains (VDOM)
  • Reminders on the concept of VLAN.
  • When to use it? Administration and supervision.
  • InterVDOM routing.
  • Practical work Installation and configuration of VLAN and VDOM.
• VPN with IPSEC
  • IPSEC reminders.
  • The site-to-site IPSEC VPN.
  • Interface mode and tunnel mode.
  • The IPSEC VPN client to site.
  • The "FortiClient" client.
  • Xauth authentication.
  • Tunnels with the pre-shared key.
  • Practical work Configure an IPSEC tunnel.
• VPN with SSL
  • Reminders about the SSL protocol.
  • Tunnel mode and Portal mode.
  • Choose the appropriate mode.
  • Practical work SSL tunnel configuration in portal and tunnel mode.
• High availability
  • The concepts of high availability.
  • The active-passive/active-active mode.
  • Meet the needs of the business.
  • Practical work Implementation of active/passive FGCP high availability.