In this course, you will learn how to deploy Fortinet solutions in the public cloud using various methods. You will learn how to use third-party automation tools to deploy and secure your cloud resources. You will also learn how to effectively troubleshoot common connectivity problems in Azure and AWS, and how to use FortiCNP to simplify risk management for your cloud workloads.

Product Versions:

• FortiGate 7.6
• FortiWeb 7.4

Exam:

• This course prepares you for the Fortinet NSE 7 – Public Cloud Security 7.6.4 Architect.

Associated Certifications:

• This course is intended to help you prepare for the Fortinet NSE 7 – Public Cloud Security Architect exam. This exam is in the FCSS Cloud Security certification track.

• Describe best practices when working with cloud deployments
• Use automation tools to deploy cloud resources in AWS and Azure
• Deploy Fortinet solutions to protect IaaS deployments
• Deploy Fortinet solutions to protect CaaS deployments
• Troubleshoot cloud deployment and network connectivity issues
• Use FortiCNP to simplify risk management

1. Cloud Security Best Practices
2. Infrastructure as Code
3. Securing IaaS Solutions
4. Securing CaaS Solutions
5. Troubleshooting
6. FortiCNP Features and Use Cases
7. FortiCNP Cloud Protection

• General knowledge of IaaS vendors
• Experience with FortiGate and Linux VMs
• Completion of the FCSS – Cloud Security for AWS and FCSS – Cloud Security for Azure courses or a clear understanding of network components and how to deploy resources in Azure and AWS

AWS Prerequisites:

Labs: students must have own account with:

• A valid payment method registered on the account*
• Capacity for at least four elastic IPs and 15 vCPUs in a single region
• Capacity to deploy FortiGate HA with 10 or more network interfaces
• Permissions to create the following:
  • Minimum 6 VPCs and 10 EC2 instances
  • S3 bucket
  • CloudShell
  • Security groups
  • Internet and Transit gateways
  • Lambda functions
  • IAM users with AWS Marketplace Full Access, Amazon EC2 Full Access permissions

Azure Prerequisites:

Labs: students must have own account with:

• • Pay-as-you-go subscription with valid payment method*
  • Ability to deploy FortiGate from Azure Marketplace and Terraform
  • Capacity for at least 15 vCPUs in a single region
  • Capacity to deploy FortiGate HA with 10 or more network interfaces

• Permissions to create the following:
  • App registrations (service principal) and keys
  • Minimum 6 VNets
  • Minimum 7 VMs with 15 vCPUs
• The ability to do the following:
  • Run Cloud Shell with storage setup
  • Read the Active Directory properties and use Azure functions
  • IAM user with contributor, owner, and user access administrator role permissions