Introduction To Fortigate Part 1 Infrastructure

Looking to step into the Network Security field with the Fortigate firewall? Or are you required to manage a FortiGate NGFW for your organization? Then this is the right book for you! The FortiGate is an amazing device with many cybersecurity features to protect your network. If you are new to FortiGate's then this is the perfect book for you! This book will cover general overview of working with Fortinet. Also, you will gain a solid understanding on day to day administrative tasks. Next, you will learn how FortiGate interacts with various layer-2 protocol. Also you will get a chance how to filter network traffic and apply security policies which is very exciting. Lastly, you will learn about the session table and how Fortigate handles traffic. Below is a full list of what this book covers: Chapter One - Introduction to FortiGate-Identify platform features of FortiGate-Describe Security Processor Unit SPU-Identify factory defaults-Understand the different operational modes-Understand FortiGate and FortiGuard Relationship-Manage administrator profiles-Manage administrative profiles-Manage network interfaces-Manage basic services-backup and restore config file-upgrade and downgrade firmware-Understand CLI structure-Understand GUI navigation-Initial ConfigurationChapter - 2 - Layer two technologies-Configuration of layer-2 VLANs-Describe VLANs and VLAN tagging process-Describe FortiOS Transparent Mode-Configure FortiOS Transparent Mode settings-Describe Transparent Mode Bridge Table-Describe MAC forwarding-Describe how to find MAC address on FortiOS-Describe Forwarding Domains-Describe and configure Virtual Switches-Describe Spanning Tree Protocol-Describe and Configure various NAT Mode layer-2 protocols-Describe and configure Layer-3 VLAN interface-Describe Virtual Wire Pairing-Describe and Configure VXLANChapter-3 Layer Three Technologies: -Configuration of Static Routes-implementation of Policy-Based Routes-Control traffic for well-known Internet Services-Interpret the FortiOS Routing Table-Understand FortiOS anti-spoofing mechanism-Implement route failover and floating route-Understand ECMP-Recognize active route vs standby route vs inactive routes-Use built in sniffer and diagnose flow debug tools, -Understand Session Table Entry.Chapter 4 - Firewall Policy and NAT-Identify components in Firewall Policy-Describe how traffic matches Firewall Policy Entries-Configure Firewall Policy Logging-Describe Policy GUI list views-Describe Policy ID's vs Policy Sequence numbers-Described where objects are referenced-Explain Name restrictions on Firewall Policies-Perform Firewall Policy re-ordering-Describe NAT and PAT-Explain different configuration modes for NAT-Configure and Describe SNAT and DNAT VIPs-Troubleshoot NAT issues

Looking to step into the Network Security field with the Fortigate firewall? Or are you required to manage a FortiGate NGFW for your organization? Then this is the right book for you! The FortiGate is an amazing device with many cybersecurity features to protect your network. If you are new to FortiGate's then this is the perfect book for you! This book will cover general overview of working with Fortinet. Also, you will gain a solid understanding on day to day administrative tasks. Next, you will learn how FortiGate interacts with various layer-2 protocol. Also you will get a chance how to filter network traffic and apply security policies which is very exciting. Lastly, you will learn about the session table and how Fortigate handles traffic. Below is a full list of what this book covers: Chapter One - Introduction to FortiGate-Identify platform features of FortiGate-Describe Security Processor Unit SPU-Identify factory defaults-Understand the different operational modes-Understand FortiGate and FortiGuard Relationship-Manage administrator profiles-Manage administrative profiles-Manage network interfaces-Manage basic services-backup and restore config file-upgrade and downgrade firmware-Understand CLI structure-Understand GUI navigation-Initial ConfigurationChapter - 2 - Layer two technologies-Configuration of layer-2 VLANs-Describe VLANs and VLAN tagging process-Describe FortiOS Transparent Mode-Configure FortiOS Transparent Mode settings-Describe Transparent Mode Bridge Table-Describe MAC forwarding-Describe how to find MAC address on FortiOS-Describe Forwarding Domains-Describe and configure Virtual Switches-Describe Spanning Tree Protocol-Describe and Configure various NAT Mode layer-2 protocols-Describe and configure Layer-3 VLAN interface-Describe Virtual Wire Pairing-Describe and Configure VXLANChapter-3 Layer Three Technologies: -Configuration of Static Routes-implementation of Policy-Based Routes-Control traffic for well-known Internet Services-Interpret the FortiOS Routing Table-Understand FortiOS anti-spoofing mechanism-Implement route failover and floating route-Understand ECMP-Recognize active route vs standby route vs inactive routes-Use built in sniffer and diagnose flow debug tools, -Understand Session Table Entry.Chapter 4 - Firewall Policy and NAT-Identify components in Firewall Policy-Describe how traffic matches Firewall Policy Entries-Configure Firewall Policy Logging-Describe Policy GUI list views-Describe Policy ID's vs Policy Sequence numbers-Described where objects are referenced-Explain Name restrictions on Firewall Policies-Perform Firewall Policy re-ordering-Describe NAT and PAT-Explain different configuration modes for NAT-Configure and Describe SNAT and DNAT VIPs-Troubleshoot NAT issues

Network Security Expert 4 Study Guide | Part-II Fortinet Network Security Introduction Introduction to FortiGate Part-II Infrastructure picks up where Part-I left off. The book begins by going on FortiOS VDOM technology and Session Helpers. You will gain a solid understanding on how VDOM's work and why they are needed. You will also learn why Session Helpers exist. Also, you will have an opportunity to gain insight into how FortiGate High Availability technology works as well. You will feel confident in your HA deployment after reading this book I promise you! Next, we dig into FortiOS logging technology which is essential for any SOC. Next, we review some popular VPN technologies like IPsec and SSL. This book shows you how to configure and use both technologies on FortiGate. After VPNs, we step into FortiOS SDWAN technology which is hot right now! you will learn what SDWAN is and how to deploy it! lastly we finish up Part-II Infrastructure with a full chapter on troubleshooting all the technology covered in Part-I and Part-II. VDOMs and Session Helpers | Chapter 5 - Configure, Define and Describe Session Helpers - Understand and Configure ALG - Define and describe VDOMs - Understand Management VDOM - Understand VDOM Administrators - Configure multiple VDOMs - understand and configure Inter-vdom link - limit resource allocated to VDOMs - Inter-VDOM Link Hardware Acceleration - VDOM Diagnostics High Availability | Chapter 6 - Identify Different Operation HA Modes - Config HA - Understand HA Election Process - Identify primary secondary units - Debug HA sync - Configure Session sync - HA failover types - Identify how HA modes pass traffic - Configure and understand Virtual Clustering - Verify HA operations - Upgrade HA firmware - FortiGate Clustering Protocol - HA Clustering Requirements - HA Diagnostics Logging and Monitoring | Chapter 7 - Log basics - Describe performance and logging - Identify local log storage - configure logging - Understand disk allocation - Identify External log storage - Configure log backups - configure alert email and threat weight - configure remote logging - understand log transmission - configure reliable logging and OFTPS - understand miglogd - Understand FortiView IPsec VPN | Chapter 8 - Understand IPsec and IKE fundamentals - Understand VPN topology - Understand route-based VPN - Configure Site-to-site VPN - Understand ASIC offload with VPN - Configure redundant VPNs - VPN best practices - Verify IPsec VPN - Understand Dial-up VPN SSL VPN | Chapter 9 - Understand SSL VPN concepts - Describe the differences between SSL an IPsec - Configure SSL VPN Modes - Configure SSL Realms - Configure SSL Authentcation - Monitor SSL VPN users and logs - Troubleshoot SSLVPN SDWAN | Chapter 10 - Understand SDWAN concepts - Understand SDWAN design - Understand SDWAN requirements - Configure SDWAN virtual link and load balance - Configure SDWAN routing and policies - Configure SDWAN health check - understand SLA link quality measurements - Understand SDWAN rules - configure dynamic link selection - Monitor SDWAN - Verify SDWAN traffic Diagnostics and Troubleshooting | Chapter 11 - Troubleshoot Layer-2 - Troubleshoot Routing - Troubleshoot Firewall Policy - Troubleshoot High Availability - Troubleshoot Logging - Troubleshoot IPsec - Troubleshoot SSL VPN - Troubleshoot SDWAN

Network Security Expert 4 Study Guide | Part-II Fortinet Network Security Introduction Introduction to FortiGate Part-II Infrastructure picks up where Part-I left off. The book begins by going on FortiOS VDOM technology and Session Helpers. You will gain a solid understanding on how VDOM's work and why they are needed. You will also learn why Session Helpers exist. Also, you will have an opportunity to gain insight into how FortiGate High Availability technology works as well. You will feel confident in your HA deployment after reading this book I promise you! Next, we dig into FortiOS logging technology which is essential for any SOC. Next, we review some popular VPN technologies like IPsec and SSL. This book shows you how to configure and use both technologies on FortiGate. After VPNs, we step into FortiOS SDWAN technology which is hot right now! you will learn what SDWAN is and how to deploy it! lastly we finish up Part-II Infrastructure with a full chapter on troubleshooting all the technology covered in Part-I and Part-II. VDOMs and Session Helpers | Chapter 5 - Configure, Define and Describe Session Helpers - Understand and Configure ALG - Define and describe VDOMs - Understand Management VDOM - Understand VDOM Administrators - Configure multiple VDOMs - understand and configure Inter-vdom link - limit resource allocated to VDOMs - Inter-VDOM Link Hardware Acceleration - VDOM Diagnostics High Availability | Chapter 6 - Identify Different Operation HA Modes - Config HA - Understand HA Election Process - Identify primary secondary units - Debug HA sync - Configure Session sync - HA failover types - Identify how HA modes pass traffic - Configure and understand Virtual Clustering - Verify HA operations - Upgrade HA firmware - FortiGate Clustering Protocol - HA Clustering Requirements - HA Diagnostics Logging and Monitoring | Chapter 7 - Log basics - Describe performance and logging - Identify local log storage - configure logging - Understand disk allocation - Identify External log storage - Configure log backups - configure alert email and threat weight - configure remote logging - understand log transmission - configure reliable logging and OFTPS - understand miglogd - Understand FortiView IPsec VPN | Chapter 8 - Understand IPsec and IKE fundamentals - Understand VPN topology - Understand route-based VPN - Configure Site-to-site VPN - Understand ASIC offload with VPN - Configure redundant VPNs - VPN best practices - Verify IPsec VPN - Understand Dial-up VPN SSL VPN | Chapter 9 - Understand SSL VPN concepts - Describe the differences between SSL an IPsec - Configure SSL VPN Modes - Configure SSL Realms - Configure SSL Authentcation - Monitor SSL VPN users and logs - Troubleshoot SSLVPN SDWAN | Chapter 10 - Understand SDWAN concepts - Understand SDWAN design - Understand SDWAN requirements - Configure SDWAN virtual link and load balance - Configure SDWAN routing and policies - Configure SDWAN health check - understand SLA link quality measurements - Understand SDWAN rules - configure dynamic link selection - Monitor SDWAN - Verify SDWAN traffic Diagnostics and Troubleshooting | Chapter 11 - Troubleshoot Layer-2 - Troubleshoot Routing - Troubleshoot Firewall Policy - Troubleshoot High Availability - Troubleshoot Logging - Troubleshoot IPsec - Troubleshoot SSL VPN - Troubleshoot SDWAN

Traditionally, network security (firewalls to block unauthorized users, Intrusion Prevention Systems (IPS) to keep attackers out, Web filters to avoid misuse of Internet browsing, and antivirus software to block malicious programs) required separate boxes with increased cost and complexity. Unified Threat Management (UTM) makes network security less complex, cheaper, and more effective by consolidating all these components. This book explains the advantages of using UTM and how it works, presents best practices on deployment, and is a hands-on, step-by-step guide to deploying Fortinet's FortiGate in the enterprise. Provides tips, tricks, and proven suggestions and guidelines to set up FortiGate implementations Presents topics that are not covered (or are not covered in detail) by Fortinet’s documentation Discusses hands-on troubleshooting techniques at both the project deployment level and technical implementation area

The Network Security Professional designation recognizes your ability to install and manage the day-to-day configuration, monitoring, and operation of a FortiGate device to support specific corporate network security policies.Fortinet's NSE4 actual exam material brought to you by group of certification experts.

If you are new to Fortigate firewall, or just moving from another firewall platform ( Check-Point, Palo alto ). then this book is for you. here you will learn how to: Configure your administrator account with MFABackup revisionsConfigure Interfaces and servicesUnderstand Your Firewall SessionsAnalyze LogsManage your memory resourcesDiagnose With CLI commandsFortigate Firewall Admin Pocket Guide is here for one purpose only. to give you the skills to administrate your Fortigate firewall Fast with a solid foundationThis Book is For Beginners and Intermediate User

Gain basic skills in network forensics and learn how to apply them effectively Key FeaturesInvestigate network threats with easePractice forensics tasks such as intrusion detection, network analysis, and scanningLearn forensics investigation at the network levelBook Description Network forensics is a subset of digital forensics that deals with network attacks and their investigation. In the era of network attacks and malware threat, it’s now more important than ever to have skills to investigate network attacks and vulnerabilities. Hands-On Network Forensics starts with the core concepts within network forensics, including coding, networking, forensics tools, and methodologies for forensic investigations. You’ll then explore the tools used for network forensics, followed by understanding how to apply those tools to a PCAP file and write the accompanying report. In addition to this, you will understand how statistical flow analysis, network enumeration, tunneling and encryption, and malware detection can be used to investigate your network. Towards the end of this book, you will discover how network correlation works and how to bring all the information from different types of network devices together. By the end of this book, you will have gained hands-on experience of performing forensics analysis tasks. What you will learnDiscover and interpret encrypted trafficLearn about various protocolsUnderstand the malware language over wireGain insights into the most widely used malwareCorrelate data collected from attacksDevelop tools and custom scripts for network forensics automationWho this book is for The book targets incident responders, network engineers, analysts, forensic engineers and network administrators who want to extend their knowledge from the surface to the deep levels of understanding the science behind network protocols, critical indicators in an incident and conducting a forensic search over the wire.