• FortiAnalyzer 7.0.2

After completing this course, you should be able to:

• Describe key features and concepts of FortiAnalyzer
• Deploy an appropriate architecture
• Use administrative access controls
• Monitor administrative events and tasks
• Configure high availability
• Understand HA synchronization and load balancing
• Upgrade the firmware of an HA cluster
• Verify the normal operation of an HA cluster
• Manage ADOMs
• Manage RAID
• Register supported devices
• Troubleshoot communication issues
• Manage disk quota
• Manage registered devices
• Protect log information
• View, search, manage, and troubleshoot logs
• Monitor and manage events
• Manage and customize event handlers
• Create and manage incidents
• Explore tools used for threat hunting
• Create, run, and troubleshoot playbooks
• Import and export playbooks
• Generate and customize reports
• Customize charts and datasets
• Manage and troubleshoot reports

1. Introduction and Initial Configuration
2. Administration and Management
3. Device Registration and Communication
4. Logging
5. FortiSoC—Incidents and Events
6. FortiSoC—Playbooks
7. Reports

Anyone who is responsible for the day-to-day management of FortiAnalyzer devices and FortiGate security information.

• Familiarity with all topics presented in the NSE 4 FortiGate Security and NSE 4 FortiGate Infrastructure courses
• Knowledge of SQL SELECT syntax is helpful, but not required