Fortinet NSE 7 - Public Cloud Security Architect
Cybersecurity
COURSE OVERVIEW
In this course, you will learn how to deploy Fortinet solutions in the public cloud using various methods. You will learn how to use third-party automation tools to deploy and secure your cloud resources. You will also learn how to effectively troubleshoot common connectivity problems in Azure and AWS, and how to use FortiCNAPP to simplify risk management for your cloud workloads.
WHO SHOULD ATTEND
Anyone who is responsible for the deployment or day-to-day management of Fortinet solutions on cloud vendors should attend this course.
PREREQUISITES
- General knowledge of IaaS vendors
- Basic understanding of cloud security concepts
- Experience with FortiGate, FortiWeb, and Linux VMs
- Understanding of network components and how to deploy resources in Azure and AWS.
AWS Prerequisites
Labs: students must have own account with:
- A valid payment method registered on the account*
- Capacity for min. 4 elastic IPs and 15 vCPUs in a single region
- Capacity to deploy FortiGate EC2 instances with a combined total of 10 or more network interfaces
- Capacity to deploy FortiWeb EC2 instances
- Permissions to create the following:
- Minimum of 6 VPCs and 10 EC2 instances
- S3 bucket
- CloudShell
- Security groups
- Internet and transit gateways
- Lambda functions
- IAM users with AWSMarketplaceFullAccess and AmazonEC2FullAccess permissions
Azure Prerequisites
Labs: students must have own account with:
- Pay-as-you-go subscription with valid payment method*
- Ability to deploy FortiGate from Azure Marketplace, using Bicep or Terraform
- Capacity for at least 16 vCPUs in a single region
- Capacity to deploy FortiGate VMs with a combined total of 10 or more network interfaces
- Permissions to create the following:
- App registrations (service principal) and keys
- Minimum 6 VNets
- Minimum 7 VMs with a combined total of 15 vCPUs
- The ability to do the following:
- Run Cloud Shell with storage setup
- Read the AD properties and use Azure functions
- Create an IAM user with contributor, owner, and user access administrator role permissions
*Estimated lab cost/student, following all instructions, is USD $15/cloud vendor/day. Free trial will not work for some exercises.
Duration: 3 Days / 24 Hours
Delivery Method: Classroom-based, Virtual Instructor Led Training
AGENDA
- Cloud Security Best Practices
- Infrastructure as Code
- Securing IaaS Solutions
- Securing CaaS Solutions
- Troubleshooting
- FortiCNAPP Features
- FortiCNAPP Risk Management and Threat Detection
- FortiCNAPP Code Security and Vulnerability Management
OBJECTIVES
After completing this course, you will be able to:
- Describe best practices when working with cloud deployments
- Use automation tools to deploy cloud resources in AWS and Azure
- Deploy Fortinet solutions to protect IaaS deployments
- Deploy Fortinet solutions to protect CaaS deployments
- Troubleshoot cloud deployment and network connectivity issues
- Use FortiCNAPP to simplify risk management, threat detection, and code security
SYSTEM REQUIREMENTS
If you take an online format of this class, you must use a computer that has the following:
- A high-speed Internet connection
- An up-to-date web browser
- A PDF viewer
- Speakers or headphones
- One of the following:
- HTML5 support
- An Up-to-date Java runtime environment (JRE) with Java plugin enabled in your web browser
You should use a wired Ethernet connection, not a Wi-Fi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.
REGISTER NOW
