FortiEDR | Training Institute

Course Description

In this class, you will learn how to use FortiEDR to protect your endpoints against advanced attacks with real-time orchestrated incident response functionality. You will also explore FortiEDR features and how they protect your endpoints automatically in real time.

Who Should Attend

IT and security professionals involved in the administration and support of FortiEDR should attend this course.

Prerequisites

A basic understanding of cybersecurity concepts

Agenda

Product Overview and Installation
Administration
Security Policies
Fortinet Cloud Security and Playbooks
Communication Control
Events and Alerting
Threat Hunting and Forensics
RESTful API
Troubleshooting

Objectives

After completing this course, you should be able to:

Explain the FortiEDR approach and how it works
Identify the communicating components and how they are configured
Perform important administrative tasks, including: managing console users, updating collectors, deleting personal data for GDPR compliance, deploy multi-tenant environment and viewing system events
Carry out basic troubleshooting steps, including: verifying that FortiEDR is installed and actively blocking malware, identifying whether FortiEDR has blocked a process or connection, finding logs, and contacting FortiEDR Support
Perform important administrative tasks, including: managing console users, updating collectors, deleting personal data for GDPR compliance, and viewing system events
Recognize what Fortinet Cloud Service is and how it works
Complete basic tasks in of each area of the management console: the Dashboard, the Event Viewer, the Forensics tab, the Threat Hunting module, Communication Control, Security Policies, Playbooks, Inventory, and the Administration tab
Manage security events and their status
Block communication from applications that are risky or unwanted, but not inherently malicious
Find and remove malicious executables from all the devices in your environment
Understand how FortiEDR integrates with Fortinet Security Fabric, and how FortiXDR works
Use RESTful API to manage your FortiEDR environment
Prioritize, investigate, and analyze security events
Remediate malicious events and create exceptions to allow safe processes
Carry out basic troubleshooting tasks on all FortiEDR components
Obtain collector logs and memory dumps

System Requirements

If you take an online version of this class, you must have a computer with:

A high-speed Internet connection
An up-to-date web browser
A PDF viewer
Speakers / headphones
One of the following:

HTML5 support
An up-to-date Java Runtime Environment (JRE) with Java plugin enabled in your web browser

You should use a wired Ethernet connection, not a WiFi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.

Enroll Now

Access the latest self-paced training version

Looking for a previous version?

Click here to find previous versions of self-paced courses.

Purchasing Process

More information on how to purchase instructor-led courses, on-demand labs, exam vouchers, and study material.

Find an Instructor-Led Class

Browse our schedule for upcoming classes delivered by Fortinet.

Product Versions

FortiEDR 5.0

Course Duration

Lecture time (estimated): 6 hours
Lab time (estimated): 6 hours
Total course duration (estimated): 12 hours

2 full days or 3 half days

Formats

Instructor-led training
Self-paced training

ISC2

CPE training hours: 6
CPE lab hours: 6
CISSP domains: Communication and Network Security

Part Number (SKU)

See Purchasing Process for more information

Exam

More information about the exam.

Certification

This course is intended to help you prepare for the Fortinet NSE 6 - FortiEDR Administrator exam. This exam is part of the FCSS SASE certification track.