🛡️ FortiGate Firewall Training Curriculum

A structured, hands-on course designed for network engineers, security admins, and IT professionals looking to master FortiGate firewalls.

🔰 Module 1: Introduction to FortiGate Firewall

• Overview of FortiGate and Product Models
• Next-Generation Firewall Features
• Access Methods: GUI, CLI, SSH
• Understanding Packet Flow in FortiGate
• Backup and Restore Configuration

🌐 Module 2: Interface Configuration

• Layer 3 (Routed) Interface Setup
• Layer 2 (Switch Mode) Interface
• One-Arm Sniffer Configuration
• Redundant Interfaces Setup
• Software Switch Creation
• Aggregate (Link Aggregation) Interfaces
• Virtual Wire (Transparent Mode)
• Sub-Interface (SVI) Configuration

🧭 Module 3: Routing Configuration

• Static Routing Implementation
• Route Summarization with Static Routes
• Default Route Configuration
• RIP v2 Configuration
• OSPF:
  • Single Area Configuration
  • Multiple Area Configuration
  • OSPF Features
• BGP:
  • IBGP and EBGP Configuration
  • Key BGP Features
• LLDP (Link Layer Discovery Protocol) Setup

🔐 Module 4: Security Policy Management

• Introduction to Security Policies
• Interface-Based vs Zone-Based Policies
• IP Address-Based Rules
• MAC Address-Based Filtering
• Application, Service, and Port-Based Rules
• Creating and Managing Admin Users

🔄 Module 5: NAT Configuration

🔹 Policy-Based NAT

• Introduction to NAT Types in FortiGate
• Source NAT: PAT / Overload / Static / Dynamic
• One-to-One Source NAT
• Destination NAT (VIP)
• Fixed Port Range NAT
• Port Block Allocation NAT

🔸 Central NAT

• Central Source NAT Configuration
• Central Destination NAT and VIP Setup

🛠️ Module 6: DHCP & DNS Services

• Configure FortiGate as DHCP Server
• Setup FortiGate as DHCP Relay Agent
• DNS Configuration in FortiGate

⚙️ Module 7: Advanced Routing & Policy Routes

• Dual ISP Configuration
• IPSLA Monitoring Setup
• Load Balancing with Multiple ISPs
• Policy-Based Routing Configuration

👥 Module 8: Authentication & User Access

• Captive Portal Setup for User Authentication
• Integrating FortiGate with Active Directory (AD)

🤝 Module 9: High Availability (HA)

• Introduction to HA Concepts
• Active-Standby HA Configuration
• Sync, Failover, and Monitoring in HA Mode

🔐 Module 10: VPN Configuration

• IPsec VPN Configuration
• FortiClient VPN Setup
• Site-to-Site and Remote Access VPN

🧱 Module 11: VDOM & Inspection Features

• Introduction to Virtual Domains (VDOM)
• Creating & Managing VDOMs
• Security Profiles and Inspection Modes
• SSL Deep Inspection Setup
• DoS (Denial of Service) Policy Configuration

🌍 Module 12: System Management & SD-WAN

• FortiOS Upgrade Procedures
• Introduction to SD-WAN Concepts
• Basic SD-WAN Configuration

🏁 Bonus: Practical Scenarios & Best Practices

• Hands-on Lab Exercises
• Real-World Use Cases
• Troubleshooting Techniques
• Deployment Best Practices