Who should attend
Anyone who is responsible for the deployment or day-to-day management of Fortinet solutions on cloud vendors.
Prerequisites
- General knowledge of IaaS vendors
- Experience with FortiGate and Linux VMs
- Completion of the FCSS - Cloud Security for AWS and FCSS - Cloud Security for Azure courses or a clear understanding of network components and how to deploy resources in Azure and AWS
AWS Prerequisites Labs: students must have own account with:
- A valid payment method registered on the account*
- Capacity for at least four elastic IPs and 15 vCPUs in a single region
- Capacity to deploy FortiGate HA with 10 or more network interfaces
- Permissions to create the following:
- Minimum 6 VPCs and 10 EC2 instances
- S3 bucket
- CloudShell
- Security groups
- Internet and Transit gateways
- Lambda functions
- IAM users with AWSMarketplaceFullAccess, AmazonEC2FullAccess permissions
Azure Prerequisites Labs: students must have own account with:
- Pay-as-you-go subscription with valid payment method*
- Ability to deploy FortiGate from Azure Marketplace and Terraform
- Capacity for at least 15 vCPUs in a single region
- Capacity to deploy FortiGate HA with 10 or more network interfaces
- Permissions to create the following:
- App registrations (service principal) and keys
- Minimum 6 VNets
- Minimum 7 VMs with 15 vCPUs
- The ability to do the following:
- Run Cloud Shell with storage setup
- Read the Active Directory properties and use Azure functions
- IAM user with contributor, owner, and user access administrator role permissions
*Estimated lab cost/student, following all instructions, is USD $10/cloud vendor/day. Free trial will not work for some exercises.
Course Objectives
After completing this course, you will be able to:
- Deploy a FortiGate SD-WAN Connect scenario with AWS Transit Gateway
- Deploy a FortiGate VM on AWS/Azure in single, HA modes
- Use Terraform to deploy environments
- Use Ansible to make FortiGate configuration changes
- Troubleshoot Terraform and HA deployment issues
- Use FortiCNP to simplify risk management
Detailed Course Outline
- FortiGate Deployment
- Automation
- Deploying a FortiGate VM Using Terraform
- Troubleshooting
- Cloud-Native Protection: FortiCNP