CI-CCEAA
Tel: +971 (4) 42 89 440
2 Days
2 Days
FT-FSA-ADM
FT-FSA-ADM
FortiSandbox Administrator
Price:
Duration:
USD 1,800 excl. VAT
2 Days
Who Should Attend
This course is intended for network security professionals responsible for designing, implementing, and
maintaining a Fortinet advanced threat protection solution with FortiSandbox.
Course Content
In this course, you will learn how to protect your organization and improve its security against advanced threats that bypass traditional security controls. You will learn about how FortiSandbox detects advanced threats. You will also learn about how FortiSandbox dynamically generates local threat intelligence,
and how other advanced threat protection (ATP) components leverage this threat intelligence information to protect organizations from advanced threats.
Prerequisites
You must have an understanding of the topics covered in FCF - FortiGate Fundamentals (or have equivalent experience).
It is also recommended that you have an understanding of the topics covered in the following courses, or have equivalent experience:
FortiGate Administrator
FortiMail
FortiWeb
FortiClient EMS
Course Objectives
After completing this course, you will be able to:
Identify threat actors and their motivations
Identify different types of counterattacks
Describe the Fortinet solutions for different stages of the Cyber Kill Chain
Analyze the MITRE ATT&CK matrix
Identify FortiSandbox architecture and key components
Plan a FortiSandbox deployment
Describe FortiSandbox input methods
Select an appropriate deployment mode and configure initial settings
Explain FortiSandbox interface requirements
Configure alert emails, SNMP monitoring, and a remote backup
Analyze dashboards, the operation center, and system events
Monitor FortiSandbox operation and troubleshoot system issues
Manage guest VMs
Configure VM association settings and scan options
Configure high availability cluster settings and health checks
Monitor cluster health and individual nodes
Configure FortiGate, FortiMail, FortiWeb, and FortiClient EMS integration with FortiSandbox
Configure threat intelligence sharing
Monitor submission logs from various Fortinet Security Fabric devices
Troubleshoot integration issues
Analyze scan job reports
Course Outline
Attack Methodologies
Deployment and System Settings
Scanning and Rating Components
High Availability
FortiGate Integration
FortiMail Integration
FortiWeb Integration
FortiClient EMS Integrations
Results Analysis
Further information
If you would like to know more about this course please contact us
