Course Description

In this course, you will learn about FortiWeb deployment, configuration, and management. You will learn how to set up server objects, define security policies, and implement HA. This course covers protection against advanced threats using data validation, client-side security, and machine learning. You will also explore API security, bot mitigation, and application delivery features such as URL rewriting, single sign-on, caching, and acceleration. Additional topics include DoS prevention, logging, FortiAI integration, compliance standards (PCI DSS, OWASP), and basic troubleshooting.

Who Should Attend

Security professionals involved in the management, configuration, administration, and monitoring of FortiWeb in small to large enterprise deployments should attend this course.

Prerequisites

• You must have an understanding of the topics covered in NSE 4 – FortiOS Administrator, or have equivalent experience.It is also recommended that you have an understanding of the following topics:
  • HTTP protocol
  • Basic knowledge of HTML, JavaScript, and server-side dynamic page languages, such as PHP

Agenda

1. Introduction
2. Basic Setup
3. Web Application Security
4. API Discovery and Protection
5. Bot Mitigation
6. Application Delivery
7. Additional Configuration
8. Compliance
9. Troubleshooting

Objectives

After completing this course, you will be able to:

• Introduction
• Basic Setup
• Web Application Security
• API Discovery and Protection
• Bot Mitigation
• Application Delivery
• Additional Configuration
• Compliance
• Troubleshooting

System Requirements

If you take the online format of this class, you must use a computer that has the following:

• High-speed Internet connection
• Up-to-date web browser
• PDF viewer
• Speakers or headphones
• One of the following:
  • HTML 5 support or
  • Up-to-date Java runtime environment (JRE) with Java plugin enabled in your web browser

You should use a wired Ethernet connection, not a Wi-Fi connection. Firewalls, including Windows Firewall or FortiClient, must allow connections to the online labs.