NSE 8 Certification. Exam Description for FortiGate 5.2 and higher

Transcription

1 NSE 8 Certificatin Exam Descriptin fr FrtiGate 5.2 and higher

2 NSE 8 Certificatin Exam Descriptin fr FrtiGate 5.2 and higher Last Updated: 12 June 2017 Frtinet, FrtiGate, and FrtiGuard are registered trademarks f Frtinet, Inc. in the U.S. and ther jurisdictins, and ther Frtinet names herein may als be trademarks, registered r therwise, f Frtinet. All ther prduct r cmpany names may be trademarks f their respective wners. Cpyright Frtinet, Inc. All rights reserved. Cntents and terms are subject t change by Frtinet withut prir ntice. N part f this publicatin may be reprduced in any frm r by any means r used t make any derivative such as translatin, transfrmatin, r adaptatin withut permissin frm Frtinet, Inc., as stipulated by the United States Cpyright Act f 1976.

3 Table f Cntents NSE 8 FORTINET NETWORK SECURITY EXAM DESCRIPTION AND OVERVIEW...4 Written Exam...4 Practical Exam...4 TOPICS...5 Recmmended Study Material...8 Additinal Material and References...8 COMPONENT FIRMWARE VERSIONS...10 FINAL FACTS AND SUMMARY...11 NSE8 Certificatin Hlder...11 Written Exam...11 Practical Exam...12

4 NSE 8 Frtinet Netwrk Security 8 The Frtinet NSE 8 certificatin recgnizes a candidate s cmprehensive and in-depth ability t design, cnfigure, and trublesht netwrk security using Frtinet prducts in cmplex netwrks. NSE 8 is the tp level in the Frtinet certificatin prgram and is designed t reflect best practices using Frtinet slutins and in the netwrking and security industry. NSE 8 Certificatin Exam Descriptin 3

5 Exam Descriptin and Overview Assessment fr Frtinet NSE 8 certificatin has tw parts: a written exam, and a practical exam. Written Exam The Frtinet NSE 8 written exam is a 90-minute multiple-chice exam that is ffered at Pearsn VUE test centers wrldwide. Questins include design scenaris, exhibits, cnfiguratin extracts and trubleshting captures that assess the netwrking, security, and Frtinet slutin knwledge and experience f the test taker. A practice exam is available t give yu a sense f the kinds f questins yu'll find n the NSE 8 exam at Pearsn VUE; the practice exam is available in the Frtinet Learning Center. Practical Exam Once a candidate has passed the prerequisite NSE 8 written exam, the candidate can schedule t take the practical exam either remtely r in persn at ne f Frtinet s NSE 8 test centers wrldwide. The Frtinet NSE 8 practical exam is a tw-day hands-n evaluatin. During the practical exam, the candidate must cnfigure and validate a cmplete netwrk tplgy invlving multiple Frtinet prducts. Reference materials are nt allwed in the exam rm fr bth written and practical exams. NSE 8 Certificatin Exam Descriptin 4

6 Tpics Candidates preparing fr Frtinet NSE 8 certificatin exam can use the study guidelines belw. The guidelines belw may change at any time withut ntice. 1. FrtiGate device peratin a. Cntrlling management access b. CLI peratin and cnfiguratin i. Cmmands ii. Advanced CLI cnfiguratin c. Advanced trubleshting i. Diagnstics ii. Packet and flw captures iii. Analysis d. GUI peratin and cnfiguratin i. Dashbards ii. Menus e. Hardware peratin and cnfiguratin i. Hardware-related features and cnfiguratin f. Firmware management i. Upgrades 2. FrtiGate peratin mdes and VDOMS a. Operatin mde definitin and cnfiguratin i. NAT / rute mde ii. Transparent mde b. Cluster peratin i. Advanced cluster management ii. Different cluster peratin ptins c. Advanced VDOM peratin and cnfiguratin i. Resurce settings ii. Operatin mdes iii. Inter-VDOM cnfiguratins d. Virtual clustering i. Operatin and cnfiguratin 3. FrtiGate netwrk cnnectivity and reachability a. High availability (HA) peratin and cnfiguratin i. Operatin mdes ii. Cnfiguring and cnnecting b. Advanced clustering peratin i. Cluster management ii. VDOMs and HA iii. Virtual Cluster HA c. HA and lad balancing d. Advanced FrtiOS netwrk cnnectivity i. WAN lad balancing ii. Link lad balancing e. Advanced interface peratin and cnfiguratin NSE 8 Certificatin Exam Descriptin 5

7 i. VLANs ii. Wireless iii. DHCP iv. LACP f. OSI Layer 2 prtcls i. VLANs ii. ARP iii. Layer 2 features and cnfiguratins g. IPv4 addressing and ruting i. Static ruting ii. IPv4 t IPv6 h. IPv6 addressing and ruting i. Static ruting ii. IPv6 t IPv4 i. Advanced static and dynamic ruting i. IPv4 and IPv6: static, BGP, OSPF 4. FrtiGate plicies and NGFW a. Advanced firewall peratin and cnfiguratin i. Firewall plicies 1. IPv4 2. IPv6 ii. Web and explicit prxy b. Advanced security plicies i. Security prfile cnfiguratin c. NAT peratin and cnfiguratin i. Basic NAT ii. Advanced NAT: NAT64, NAT46 d. Firewall plicies i. Advanced cnfiguratin and features e. Endpint cntrl peratin and cnfiguratin i. Device identificatin f. Third-party integratin i. Prtcls ii. Features 5. FrtiGate VPNs a. Advanced IPSec VPN peratin and cnfiguratin i. Dynamic IPsec ii. VPN tunnels iii. Authenticatin b. Advanced SSL VPNs peratin and cnfiguratin i. Mdes f peratin and cnfiguratin ii. SSL VPN web prtals iii. Secure brwsing c. VPNs and advanced ruting i. VPNs and static ruting ii. VPNs and dynamic ruting 6. FrtiGate authenticatin a. Users and user grups b. Authenticatin methds peratin and cnfiguratin NSE 8 Certificatin Exam Descriptin 6

8 c. Firewall plicies and authenticatin d. Frtinet Single Sign-On e. Third-party integratin and authenticatin f. Tw-factr authenticatin 7. Frtinet wireless slutins a. Deplying wireless slutins b. FrtiGate as wireless cntrller c. Cnfiguring secure wireless d. Prtecting wireless netwrks 8. Frtinet centralized reprts and management a. Remte lg and reprting peratin and cnfiguratin b. FrtiAnalyzer peratin and cnfiguratin i. Advanced FrtiAnalyzer features c. FrtiManager peratin and cnfiguratin i. Advanced FrtiManager features d. FrtiOS lgging and reprting 9. Frtinet advanced technlgies a. FrtiGate security features and advanced technlgies integratin i. Architecture integratin ii. Design integratin iii. Interperability between FrtiGate and advanced technlgies slutins b. FrtiADC (D series) peratin and cnfiguratin i. Basic netwrking ii. Deplyment ptins iii. System management iv. Server lad balancing and its cmpnents c. FrtiWeb peratin and cnfiguratin i. Basic netwrking ii. Deplyment ptins iii. Plicy cnfiguratin iv. User authenticatin v. Lad balancing cnfiguratin vi. Attack blcking behavir and cnfiguratin d. FrtiSandbx integratin and cnfiguratin i. Basic netwrking ii. Deplyment ptins iii. FrtiGate and advanced technlgies integratin iv. Types f detectin e. FrtiAuthenticatr advanced peratin and cnfiguratin i. Basic setup and cnfiguratin ii. Authenticatin and user management iii. Frtinet Single Sign-On ptins f. FrtiMail advanced peratin and cnfiguratin i. Basic netwrking ii. Deplyment ptins and peratin mdes iii. System settings cnfiguratin iv. Plicy and prfiles cnfiguratin v. Antispam settings g. FrtiVice enterprise NSE 8 Certificatin Exam Descriptin 7

9 i. Basic settings and peratin ii. Phne system settings and extensins Fr all previus mentined tpics and slutins, trubleshting knwledge is an advantage. Recmmended Study Material This sectin lists the material recmmended t prepare fr the NSE8 certificatin: Administratin Guides and Handbks: FrtiGate FrtiManager FrtiAnalyzer FrtiADC (VM and D Series) FrtiWeb FrtiSandbx FrtiAuthenticatr FrtiMail FrtiVice (Enterprise) CLI References Ckbks Frtinet Knwledge Base articles Additinal Material and References There is n prerequisite t take the NSE8 certificatin exam, but we recmmend that test candidates attend and cmplete the fllwing curses and material: Technical curses: NSE 2: Netwrk Security Slutins NSE 3: Advance Netwrk Security Slutins Design NSE 4: FrtiGate I and II NSE 6: FrtiWeb FrtiMail FrtiOS Integrated and Clud Wi-Fi FrtiADC fr D Series Mdels and FrtiADC VM NSE 8 Certificatin Exam Descriptin 8

10 FrtiSandbx NSE7: FrtiGate III Third-party knwledge: Advanced virtual Infrastructure knwledge and experience. Advanced switching and ruting knwledge and experience. Advanced OS knwledge: Windws and Linux Security vulnerabilities and penetratin testing tls and techniques Prfessinal experience It is strngly recmmended t have vast knwledge and experience with Frtinet slutins, netwrking, and security: Design Deplyment Management / Administratin Trubleshting NSE 8 Certificatin Exam Descriptin 9

11 Cmpnent Firmware Versins Fr the test taker s reference, the fllwing is a list f firmware versins that is the basis f the NSE 8 certificatin exam: Prduct Name Firmware Versin 1 FrtiGate FrtiManager / FrtiAnalyzer FrtiADC (VM and D series) FrtiWeb FrtiSandbx FrtiAuthenticatr FrtiMail FrtiVice Enterprise 5.2.x 5.2.x 4.3.x 5.3.x 2.1.x 3.3.x 5.2.x 4.0.x 1 Firmware versins may change at any time withut ntice. NSE 8 Certificatin Exam Descriptin 10

12 Final Facts and Summary NSE8 Certificatin Hlder NSE8 certificatin indicates that the persn can: Design Frtinet architectures Deply and install advanced Frtinet slutins Maintain and manage Frtinet slutins Trublesht advanced Frtinet slutins infrastructures Written Exam Language: English nly Available at: Pearsn VUE Test Centers wrldwide Cst 2 : $400 Number f questins: 65 Time allwed t cmplete: 90 minutes ttal test time Scring methd: Each questin must be 100% crrect fr credit, n partial credit. N deductin fr incrrect answers. Type f questins: Multiple chice and multiple select with exhibits Time required between attempts: 15 days Time fr acknwledgement/scre t be reflected in FLC transcripts: 21 days Scring: Pass r fail Test taker will receive a dcument with pass r fail general result including sectins passed r failed. N further details r assistance will be prvided. Expiratin: T be determined Practice exam: Available frm the Frtinet Learning Center 2 Check pricelist fr updates. NSE 8 Certificatin Exam Descriptin 11

13 Practical Exam Language: English nly Available at: On site r remtely 3 ; scheduling required Cst 2 : $ Number f tasks: 48 Time allwed t cmplete: 2 days; prctred Scring methd: Each task must be 100% crrect fr credit. N partial credit. N deductin fr incrrect answers. Type f tasks: Hands-n cnfiguratin and trubleshting Time required between attempts: 15 days Time fr acknwledgement/scre t be reflected in FLC transcripts: 21 days Scring: Pass r fail Test taker will receive a dcument with pass r fail general result including sectins passed r failed. N further details r assistance will be prvided. Expiratin: T be determined 3 Remte exam details will be disclsed during NSE 8 Certificatin Exam Descriptin 12