FS-A FortiSandbox Administrator (NSE6)  

This course will help:
  • Gain knowledge and skills to protect an organization from modern threats capable of bypassing traditional security solutions
  • Study the principles of detecting advanced cyber threats using FortiSandbox
  • Learn to use FortiSandbox for the dynamic generation of local threat intelligence
  • Understand how Advanced Threat Protection (ATP) components use FortiSandbox data to protect an organization from modern attacks
  • Prepare for the Fortinet NSE 5 certification exam

Course syllabus:

  • Attack Methodologies
  • Deployment and System Settings
  • Scanning and Rating Components
  • High Availability
  • FortiGate Integration
  • FortiMail Integration
  • FortiWeb Integration
  • FortiClient EMS Integrations
  • Results Analysis

You will learn:

  • Identify threat actors and their motivations
  • Identify different types of counterattacks
  • Describe the Fortinet solutions for different stages of the Cyber Kill Chain
  • Analyze the MITRE ATT&CK matrix
  • Identify FortiSandbox architecture and key components
  • Plan a FortiSandbox deployment
  • Describe FortiSandbox input methods
  • Select an appropriate deployment mode and configure initial settings
  • Explain FortiSandbox interface requirements
  • Configure alert emails, SNMP monitoring, and a remote backup
  • Analyze dashboards, the operation center, and system events
  • Monitor FortiSandbox operation and troubleshoot system issues
  • Manage guest VMs
  • Configure VM association settings and scan options
  • Configure high availability cluster settings and health checks
  • Monitor cluster health and individual nodes
  • Configure FortiGate, FortiMail, FortiWeb, and FortiClient EMS integration with FortiSandbox
  • Configure threat intelligence sharing
  • Monitor submission logs from various Fortinet Security Fabric devices
  • Troubleshoot integration issues

Pre-requisites:

To successfully complete this course, participants should have an understanding of the topics covered in the FCF – FortiGate Fundamentals course, or have equivalent practical experience.

It is also recommended that participants have an understanding of the topics covered in the following courses, or have equivalent practical experience:

  • FortiGate Administrator
  • FortiMail
  • FortiWeb
  • FortiClient EMS
Sign up for a course FS-A FortiSandbox Administrator (NSE6)