Course Overview
In this course, you will learn the fundamentals of using FortiAnalyzer for centralized logging and reporting. You will learn how to configure and deploy FortiAnalyzer, and identify threats and attack patterns through logging, analysis, and reporting. Finally, you will examine the management of events, incidents, playbooks, and some helpful troubleshooting techniques.
Moyens d'évaluation :
- Quiz pré-formation de vérification des connaissances (si applicable)
- Évaluations formatives pendant la formation, à travers les travaux pratiques réalisés sur les labs à l’issue de chaque module, QCM, mises en situation…
- Complétion par chaque participant d’un questionnaire et/ou questionnaire de positionnement en amont et à l’issue de la formation pour validation de l’acquisition des compétences
Who should attend
Anyone who is responsible for the day-to-day management of FortiAnalyzer devices and FortiGate security information.
Course Objectives
After completing this course, you will be able to:
- Describe key features and concepts of FortiAnalyzer
- Deploy an appropriate architecture
- Use administrative access controls
- Monitor administrative events and tasks
- Configure high availability
- Understand HA synchronization and load balancing
- Upgrade the firmware of an HA cluster
- Verify the normal operation of an HA cluster
- Manage ADOMs
- Manage RAID
- Register supported devices
- Troubleshoot communication issues
- Manage disk quota
- Manage registered devices
- Protect log information
- View, search, manage, and troubleshoot logs
- Monitor and manage events
- Manage and customize event handlers
- Create and manage incidents
- Explore tools used for threat hunting
- Create, run, and troubleshoot playbooks
- Import and export playbooks
- Generate and customize reports
- Customize charts and datasets
- Manage and troubleshoot reports
- Describe the key features and capabilities of FortiManager
- Deploy administrative domains (ADOMs) to support multiple customers on a single FortiManager
- Restrict concurrent ADOM access by using workspaces and workflow mode
- Use provisioning templates for device-level changes across many devices
- Identify the synchronization states and manage the revision history of managed devices
- Manage firewall policies across multiple FortiGate devices using policy packages with shared and dynamic objects
- Deploy policies and objects from the global ADOM to multiple ADOMs
- Understand the Fortinet Security Fabric with FortiManager
- Describe high-availability (HA), backup, and recovery options for FortiManager
- Manage the firmware of supported devices centrally
- Offer a local FortiGuard distribution server to your Fortinet devices
- Diagnose and troubleshoot import and installation issues
Moyens Pédagogiques :