Training Fortinet

Training goals

code: FT-FSM | version: 6.3.x

In this course, you will learn about FortiSIEM initial configurations, architecture, and the discovery of devices on the network. You will also learn how to collect performance information and aggregate it with syslog data to enrich the overall view of the health of your environment, how to use the configuration database to greatly facilitate compliance audits, and how to integrate FortiSIEM into your network awareness infrastructure.

Objectives

After completing this course, you should be able to:

  • Identify business drivers for using SIEM tools
  • Describe SIEM and PAM concepts
  • Describe key features of FortiSIEM
  • Understand how collectors, workers, and supervisors work together
  • Configure notifications
  • Create new users and custom roles
  • Describe and enable devices for discovery
  • Understand when to use agents
  • Perform real-time, historic structured searches
  • Group and aggregate search results
  • Examine performance metrics
  • Create custom incident rules
  • Edit existing, or create new, reports
  • Configure and customize the dashboards
  • Export CMDB information
  • Identify Windows agent components
  • Describe the purpose of Windows agents
  • Understand how the Windows agent manager works in various deployment models
  • Identify reports that relate to Windows agents
  • Understand the FortiSIEM Linux file monitoring agent
  • Understand agent registration
  • Monitor agent communications after deployment
  • Troubleshoot FortiSIEM issues

Who Should Attend

Anyone who is responsible for the day-to-day management of FortiSIEM should attend this course.

Conspect Show list

  1. Introduction
  2. SIEM and PAM Concepts
  3. Discovery and FortiSIEM Agents
  4. FortiSIEM Analytics
  5. CMDB Lookups and Filters
  6. Group By and Data Aggregation
  7. Rules and MITRE ATT&CK
  8. Incidents and Notification Policies
  9. Reports and Dashboards
  10. Maintaining and Tuning
  11. Troubleshooting
Download conspect training as PDF

Additional information

Prerequisites

You must have an understanding of the topics covered in the FortiGate Administrator course, or have equivalent experience.
Difficulty level
Duration 3 days
Certificate

The participants will obtain certificates signed by Fortinet.

This course is intended also to help you prepare for the FCP – FortiSIEM exam. This exam is part of the FCP Network Security certification tracks:

  • Fortinet Certified Professional (FCP) - Security Operations

The FCP – FortiSIEM certification exam is one of the options to choose as one of the two elective exams required to pass in order to obtain the Fortinet Certified Professional (FCP) title. Fortinet certification exams are offered at Pearson Vue test centers worldwide. More information about Fortinet Certification Program on the https://www.fortinet.com/training-certification
Trainer

Fortinet Certified Trainer (FCT)
Additional informations

ISC2

  • CPE training hours: 11
  • CPE lab hours: 9
  • CISSP domains: Security Operations

Other training Fortinet | Fortinet Certified Professional (FCP)

Fortinet show more courses
Contact form

Please fill form below to obtain more info about this training.






* Fields marked with (*) are required !!!

Information on data processing by Compendium - Centrum Edukacyjne Spółka z o.o.

PRICE 2100 EUR

FORM OF TRAINING ?

 

TRAINING MATERIALS ?

 

SELECT TRAINING DATE

  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
  • hybrid training: HYBRID
    • General information
    • Guaranteed dates
    • Last minute (-10%)
    • Language of the training
    • English
Book a training appointment
close

Traditional training

Sessions organised at Compendium CE are usually held in our locations in Kraków and Warsaw, but also in venues designated by the client. The group participating in training meets at a specific place and specific time with a coach and actively participates in laboratory sessions.

Dlearning training

You may participate from at any place in the world. It is sufficient to have a computer (or, actually a tablet, or smartphone) connected to the Internet. Compendium CE provides each Distance Learning training participant with adequate software enabling connection to the Data Center. For more information, please visit dlearning.eu site

close

Paper materials

Traditional materials: The price includes standard materials issued in the form of paper books, printed or other, depending on the arrangements with the manufacturer.

Electronic materials

Electronic materials: These are electronic training materials that are available to you based on your specific application: Skillpipe, eVantage, etc., or as PDF documents.

Ctab materials

Ctab materials: the price includes ctab tablet and electronic training materials or traditional training materials and supplies provided electronically according to manufacturer's specifications (in PDF or EPUB form). The materials provided are adapted for display on ctab tablets. For more information, check out the ctab website.

Upcoming Fortinet training

Training schedule Fortinet