Security

FortiGate Firewall Training

From fundamentals to advanced real-world deployment: packet flow, firewall policies and NAT, troubleshooting, SSO, SSL inspection, SSL and IPsec VPN, web filtering, High Availability, FortiClient, FortiManager and FortiAnalyzer.

⭐Intermediate Level

🏆FortiGate Firewall Administration

Course Overview

This hands-on FortiGate training takes you through 14 modules, from firewall fundamentals to enterprise security management. You will learn how FortiGate processes packets, configure interfaces, zones, firewall policies and NAT, and troubleshoot with the FortiOS CLI. The course then covers firmware upgrades and backups, Active Directory SSO, SSL inspection, SSL VPN and site-to-site IPsec VPN, web filtering, Active-Passive and Active-Active High Availability, FortiClient and ZTNA, and centralised management and log analysis with FortiManager and FortiAnalyzer.

What You'll Learn

✓

Configure and administer FortiGate firewalls

✓

Implement firewall policies, NAT and network segmentation

✓

Deploy and troubleshoot site-to-site IPsec VPNs and remote-access VPNs

✓

Configure web filtering and SSL inspection

✓

Troubleshoot packet flow, routing and connectivity issues

✓

Implement FortiGate High Availability

✓

Manage firewalls centrally and analyse logs with FortiManager and FortiAnalyzer

Detailed Curriculum

Module 1: Firewall Fundamentals▼

→Introduction to firewalls and their importance in network security
→Traditional Firewall vs. Next-Generation Firewall (NGFW)
→FortiGate hardware models and product overview: 40F, 100F, 200F and 600F series
→Virtual Domains (VDOMs)
→Deployment modes: NAT/Route Mode, Transparent Mode and VDOM Mode

Module 2: Packet Flow and Processing▼

→Understanding packet processing inside FortiGate
→Packet ingress and interface processing
→Session lookup and the session table
→Routing lookup and firewall policy matching
→NAT processing and security profile inspection
→Session creation and management
→Packet forwarding and drop decisions

Module 3: Basic FortiGate Lab Configuration▼

→FortiGate interfaces and zones
→Interface configuration and IP addressing
→Creating and managing firewall policies
→Source NAT and destination NAT configuration
→Inter-zone communication; LAN and DMZ network configuration
→Network connectivity testing, configuration validation and verification

Module 4: Firewall Troubleshooting▼

→Troubleshooting network connectivity issues
→Firewall policy verification; NAT and routing troubleshooting
→Session table inspection
→Packet capture, traffic analysis and debugging packet flow
→FortiGate log analysis; common firewall issues and solutions
→CLI commands: diagnose debug flow, diagnose sniffer packet, get router info routing-table, diagnose sys session list

Module 5: FortiGate Upgrade and Configuration Backup▼

→Backing up current FortiGate configurations
→Understanding FortiOS firmware versions
→Pre-upgrade checks and compatibility verification
→FortiOS upgrade procedures and post-upgrade verification
→Configuration restoration and rollback procedures
→Upgrade planning and best practices

Module 6: FortiGate Single Sign-On (SSO)▼

→Introduction to Single Sign-On and user identification
→FortiGate SSO agent overview
→Active Directory integration; user and group identification
→Firewall policies for authenticated users and SSO-based access control
→Monitoring and troubleshooting SSO

Module 7: SSL Inspection▼

→Introduction to SSL/TLS inspection
→Certificate-based inspection vs. deep (full) SSL inspection
→Configuring SSL inspection profiles and applying them to firewall policies
→Certificate authority, certificate trust and client certificate trust
→Security profile integration: Antivirus, Web Filtering, IPS and Application Control
→SSL inspection troubleshooting

Module 8: SSL VPN▼

→Introduction to remote-access SSL VPN
→SSL VPN portal configuration
→User and group authentication; VPN access policies
→Connection settings, client configuration and split tunneling
→Remote user access to corporate networks
→SSL VPN connectivity testing and troubleshooting

Module 9: Web Filtering▼

→URL filtering and website categories
→Web filter profile configuration: allow, block and monitor URLs
→URL filter overrides and exemptions
→Application Control integration with web filtering
→Social media, streaming, shopping and gaming controls; business access policies
→Web filtering logs and reporting

Module 10: IPsec VPN▼

→Site-to-site IPsec VPN configuration
→Phase 1 and Phase 2 configuration; IKE versions and negotiation settings
→Pre-shared key and certificate authentication
→Tunnel establishment, verification and routing over IPsec
→NAT and firewall policies for VPN traffic
→Head Office and Branch Office connectivity; VPN monitoring and troubleshooting

Module 11: High Availability (HA)▼

→Active-Passive and Active-Active HA modes
→HA cluster configuration; heartbeat interfaces and monitoring
→HA synchronization, configuration replication and session synchronization
→Failover and failback procedures
→Primary and secondary unit management; cluster verification
→Troubleshooting HA issues

Module 12: FortiClient▼

→FortiClient features, components, installation and deployment
→Remote-access VPN configuration
→Endpoint security features and monitoring
→Zero Trust Network Access (ZTNA) fundamentals
→Fabric Agent integration
→FortiClient user experience and troubleshooting

Module 13: FortiManager▼

→Centralized FortiGate management; device onboarding and registration
→Device management, administrative domains (ADOMs) and policy packages
→Centralized firewall policy management
→Configuration templates, provisioning and firmware management
→Device configuration synchronization
→Monitoring and troubleshooting FortiManager

Module 14: FortiAnalyzer▼

→Centralized logging and analysis; FortiGate device registration
→Log collection, filtering, searching and investigation
→Security reports, dashboards, FortiView and security analytics
→Traffic and event log analysis
→FortiSwitch, FortiAP and FortiClient log integration
→Security incident investigation and troubleshooting using logs

Tools & Technologies

FortiGate (40F–600F / VM)

FortiOS CLI & GUI

FortiClient

FortiManager

FortiAnalyzer

Active Directory (SSO)

Career Opportunities

Network Security Engineer

₹6.5-12.0 LPA

Configure and manage FortiGate firewall deployments

SOC / Security Analyst

₹5.5-10.0 LPA

Monitor, investigate and respond to firewall security events

Firewall Administrator

₹5.0-9.0 LPA

Run day-to-day policy, VPN and HA operations on FortiGate

Course Fee

₹8,000

+ ₹1,440 GST (18%) · Total ₹9,440

Course access is valid for 6 months from the date of enrollment.

Enroll Now →

✓Real lab environment

✓6 months course access

✓Expert instructor support

✓Placement assistance