Courses / FortiGate

Networking · SecurityIn production

FortiGate Firewall: Zero to Administrator

A practical FortiGate course for IT staff who look after a real network: a school campus, an office or an industrial plant. You build one lab network from a factory-reset FortiGate VM to a fully working site: interfaces and VLANs, policies and NAT, web filtering and application control, SSL inspection, IPsec and remote-access VPN, user authentication, high availability, logging and, above all, the day-to-day troubleshooting that an administrator does every week.

  • 45 lecturesabout 9 hours of video
  • 45 hands-on demoswith lab files to follow along
  • Beginner to intermediatelevel
  • FortiOS 7.6 (notes for 8.0 where screens differ)recorded on

What you will be able to do

  • Set up a FortiGate from factory reset to a secure, working site
  • Design VLANs and zones for staff, students or production, guests and servers
  • Write firewall policies and NAT that are tight, readable and easy to audit
  • Filter web and applications without breaking the business, including SSL inspection
  • Build site-to-site IPsec and remote-access VPN for staff
  • Troubleshoot like a pro with logs, the packet sniffer and debug flow
  • Upgrade firmware, back up, and run a FortiGate HA pair safely

Is this course for you?

Who it is for

  • IT administrators and support engineers who have a FortiGate on site and want to run it with confidence
  • Network engineers moving from another vendor to Fortinet
  • Students preparing for Fortinet's FortiGate Administrator (FCP) exam who want real-world practice

Before you start

  • Basic networking: IP addresses, subnet masks, default gateway, DNS
  • A PC with 16 GB RAM for the lab (VMware Workstation Player, VirtualBox or EVE-NG)

Your lab

FortiGate VM (free evaluation licence from the Fortinet support portal), two Linux or Windows client VMs, and an optional second FortiGate for the VPN and HA sections. Every lab starts from a saved configuration file, so learners can join at any section.

Curriculum

10 sections · 45 lectures · 537 minutes

01Getting started5 lectures · 48 min

Know what a FortiGate is, build the lab and log in for the first time.

  1. Welcome and what you will build
    5 min
  2. Next-generation firewalls in plain words
    8 min
  3. Building the lab
    14 min
  4. First login, GUI tour and the CLI
    12 min
  5. Firmware, licences and FortiGuard
    9 min
02Interfaces, VLANs and zones5 lectures · 58 min

Turn one physical port into a clean, segmented network.

  1. Physical interfaces, roles and administrative access
    10 min
  2. VLANs for staff, students and guests
    14 min
  3. DHCP and DNS on the FortiGate
    11 min
  4. Zones and when to use them
    8 min
  5. Labsegment the campus network
    15 min
03Firewall policies and NAT6 lectures · 73 min

Allow exactly what the site needs and see every session.

  1. How the FortiGate processes a packet
    10 min
  2. Addresses, services and schedules
    10 min
  3. Writing your first policies
    15 min
  4. Source NAT, IP pools and virtual IPs
    14 min
  5. Policy hygiene and audits
    9 min
  6. Labpolicies for a real site
    15 min
04Security profiles5 lectures · 66 min

Control web, applications and threats without breaking the business.

  1. Web filtering with FortiGuard categories
    13 min
  2. Application control
    11 min
  3. SSL inspection without breaking everything
    15 min
  4. Antivirus, IPS and DNS filter
    12 min
  5. Laba filtering policy the school accepts
    15 min
05Users and authentication4 lectures · 45 min

Write rules by person and group, not by IP address.

  1. Local users, groups and admin accounts
    9 min
  2. Active Directory with LDAP
    13 min
  3. FSSO for transparent login
    13 min
  4. Captive portal for guests
    10 min
06VPN5 lectures · 70 min

Connect branches and remote staff securely.

  1. IPsec basics without the maths
    11 min
  2. Site-to-site VPN between two FortiGates
    16 min
  3. Remote access for staff
    15 min
  4. Troubleshooting VPN
    13 min
  5. Labconnect the branch office
    15 min
07Routing and SD-WAN3 lectures · 35 min

Use two internet lines well and fail over cleanly.

  1. Static routes, distance and priority
    10 min
  2. SD-WAN with two ISPs
    15 min
  3. Failover testing
    10 min
08Logging, monitoring and reports3 lectures · 32 min

Know what happened, when and by whom.

  1. Log settings and where logs go
    10 min
  2. Reading forward traffic and security logs
    13 min
  3. FortiView dashboards and reports
    9 min
09High availability and maintenance4 lectures · 44 min

Keep the firewall running through failures and upgrades.

  1. HA active-passive
    14 min
  2. Backups and configuration revisions
    8 min
  3. Firmware upgrade without drama
    12 min
  4. Hardening checklist
    10 min
10Troubleshooting toolkit5 lectures · 66 min

Solve real problems fast with the built-in tools.

  1. A troubleshooting method
    8 min
  2. Packet sniffer
    13 min
  3. Debug flow
    14 min
  4. Performance problems
    11 min
  5. LabFinal project: the whole site
    20 min

Your instructor

Adnan Ali

IT infrastructure specialist with more than 12 years in schools and industrial projects: 13 years running the network, firewalls, servers and learning systems of a 500+ user IB school campus, then site IT for a cement plant project. The labs in this course come from that day-to-day work, not from a slide deck.

Be first to know when it opens

Send a note and you will get one e-mail when FortiGate opens, with an early-bird price.