Skip to main content
Training Institute
  • Library
  • Schedule
  • Certifications
  • ATC
  • Academic Partner Program
  • Fast Track Workshops
  • More
Log in
Contents
Library Schedule Certifications ATC Academic Partner Program Fast Track Workshops

Contact Us

Training / Library
Download Brochure

Blocks

Course Description

In this course, you will learn how to deploy FortiGate VMs in the public cloud using various methods. You will learn how to use third-party automation tools to deploy FortiGate VMs and secure your network. You will take a deep dive into AWS SD-WAN Connect deployment and learn how to utilize AWS Transit Gateway to secure east-west and north-south traffic. You will also learn how to effectively troubleshoot FortiGate deployments in Azure and how to use FortiCNP to simplify risk management for your AWS workloads.

Who Should Attend

Anyone who is responsible for the deployment or day-to-day management of Fortinet solutions on cloud vendors should attend this course.

Prerequisites
  • General knowledge of IaaS vendors
  • Experience with FortiGate and Linux VMs
  • Completion of the FCSS - Cloud Security for AWS and FCSS - Cloud Security for Azure courses or a clear understanding of network components and how to deploy resources in Azure and AWS
AWS Prerequisites

Labs: students must have own account with:

  • A valid payment method registered on the account*
  • Capacity for at least four elastic IPs and 15 vCPUs in a single region
  • Capacity to deploy FortiGate HA with 10 or more network interfaces
  • Permissions to create the following:
    • Minimum 6 VPCs and 10 EC2 instances
    • S3 bucket
    • CloudShell
    • Security groups
    • Internet and Transit gateways
    • Lambda functions
    • IAM users with AWSMarketplaceFullAccess, AmazonEC2FullAccess permissions
Azure Prerequisites

Labs: students must have own account with:

  • Pay-as-you-go subscription with valid payment method*
  • Ability to deploy FortiGate from Azure Marketplace and Terraform
  • Capacity for at least 15 vCPUs in a single region
  • Capacity to deploy FortiGate HA with 10 or more network
    • interfaces
  • Permissions to create the following:
    • App registrations (service principal) and keys
    • Minimum 6 VNets
    • Minimum 7 VMs with 15 vCPUs
  • The ability to do the following:
    • Run Cloud Shell with storage setup
    • Read the Active Directory properties and use Azure functions
    • IAM user with contributor, owner, and user access administrator role permissions

*Estimated lab cost/student, following all instructions, is USD $10/cloud vendor/day. Free trial will not work for some exercises.

Agenda
  1. FortiGate Deployment
  2. Automation
  3. Deploying a FortiGate VM Using Terraform
  4. Troubleshooting
  5. Cloud-Native Protection: FortiCNP
Objectives

After completing this course, you will be able to:

  • Deploy a FortiGate SD-WAN Connect scenario with AWS Transit Gateway
  • Deploy a FortiGate VM on AWS/Azure in single, HA modes
  • Use Terraform to deploy environments
  • Use Ansible to make FortiGate configuration changes
  • Troubleshoot Terraform and HA deployment issues
  • Use FortiCNP to simplify risk management
System Requirements

If you take an online format of this class, you must use a computer that has the following:

  • A high-speed Internet connection
  • An up-to-date web browser
  • A PDF viewer
  • Speakers or headphones
  • One of the following:
    • HTML5 support
    • An Up-to-date Java runtime environment (JRE) with Java plugin enabled in your web browser

You should use a wired Ethernet connection, not a Wi-Fi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.

Enroll Now

Access the latest self-paced training version
Purchasing Process

More information on how to purchase instructor-led courses, on-demand labs, exam vouchers, and study material.
Find an Instructor-Led Class

Browse our schedule for upcoming classes delivered by Fortinet.
Product Versions

  • FortiGate 7.2

Course Duration
  • Lecture time (estimated): 6 hours
  • Lab time (estimated): 10 hours
  • Total course duration (estimated): 16 hours
    • 3 full days or 4 half days
Formats
  • Instructor-led (classroom and online)
  • Self-paced online
(ISC)2

  • CPE training hours: 6
  • CPE lab hours: 10
  • CISSP domains: Communication and Network Security

Part Number (SKU)
  • FT-PUB-CDS: Instructor-led course
  • No lab access available within self-paced course

See Purchasing Process for more information

Exam

This course prepares you for the Fortinet NSE 7 - Public Cloud Security 7.2 exam. By passing this exam, you will be awarded the associated exam badge.


Certification

This exam is in the FCSS Public Cloud Security certification track.


Data retention summary