Fortinet FCA flashcards
Fortinet FCA · Build recall with a focused review session.
33 cards. Read the term and the definition here. The deck at the top of this page is optional.
- FortiOS
- Shared operating system underlying FortiGate, FortiManager, FortiAnalyzer, FortiWeb, FortiMail, and FortiProxy, providing a common configuration and management model across Fortinet products.
- FortiASIC
- Family of Fortinet processors including NP (network), CP (content), and SP (SSL) chips that accelerate packet, content, and encrypted traffic processing on FortiGate appliances.
- FortiManager
- Centralized management platform for FortiGate and other Fortinet devices, providing policy, object, and provisioning control across many devices organized into ADOMs.
- FortiAnalyzer
- Log collection, reporting, and analytics appliance or VM that stores FortiGate and other device logs and correlates events for security operations.
- FortiGuard Labs
- Fortinet threat research organization that produces antivirus signatures, IPS signatures, IP reputation, and machine-learning models consumed by FortiGuard subscription services.
- FortiLink
- Management protocol that lets a FortiGate act as controller for FortiSwitch and FortiAP devices, removing the need for a separate wireless or switching controller.
- First-match policy evaluation
- FortiGate evaluates firewall policies from top to bottom and applies the first policy that matches the traffic; traffic matching no policy hits the implicit deny.
- Stateful inspection
- FortiGate maintains a session table so return traffic for a permitted session is allowed without a reverse policy, and session state is used for NAT and inspection.
- Virtual IP (VIP)
- FortiGate object used as a destination address in a policy to perform destination NAT, optionally with port forwarding from an external port to an internal host and port.
- VDOM
- Virtual domain on FortiGate that partitions one device into independent virtual firewalls, each with its own routing table, policies, and administrators.
- SSL deep inspection
- Inspection mode where FortiGate decrypts and re-encrypts traffic using its CA certificate, enabling full content inspection but requiring the CA certificate on clients.
- Certificate inspection
- SSL inspection mode that reads only the server certificate and SNI without decrypting traffic, useful for category-based filtering without installing a CA certificate on clients.
- FortiGuard Distribution Network
- Fortinet infrastructure from which FortiGate and other products pull signature and rating updates; FortiManager can act as a local FortiGuard server.
- Outbreak Protection
- FortiGuard service that provides enhanced protection against active threats and can be layered on top of base IPS and web filtering licenses.
- Fabric connector
- Integration point that lets FortiGate share threat context with other Security Fabric products such as FortiSandbox, FortiClient EMS, FortiNAC, and syslog servers.
- FortiSandbox
- Sandboxing product that detonates suspicious files and returns verdicts to FortiGate via a fabric connector, enabling retroactive blocking of files already delivered.
- FortiSASE
- Cloud-delivered service combining secure web gateway, firewall-as-a-service, CASB, DLP, and ZTNA in one console, with globally distributed points of presence.
- ZTNA access proxy
- FortiOS component that terminates client connections and forwards only authorized traffic to specific applications, replacing full-network VPN with per-application access.
- FortiClient EMS
- Endpoint management server that deploys profiles and licenses to FortiClient agents and acts as the ZTNA broker, issuing device certificates and enforcing posture.
- Zero Trust principles
- Verify explicitly, use least privilege, and assume breach; network location alone never grants access, and posture is continuously re-evaluated.
- ADVPN
- Automatic Discovery VPN feature that enables on-demand tunnels between branch FortiGates using shortcut messages, reducing hub-and-spoke traffic.
- FGCP
- FortiGate Clustering Protocol used for HA, synchronizing sessions, routing, and configuration across HA members and requiring matching firmware versions.
- Central NAT
- FortiOS feature that moves NAT configuration out of firewall policies into dedicated NAT rules evaluated independently of policy order.
- Hairpin NAT
- NAT configuration required when internal clients access an internal server through its public VIP address, so return traffic is routed back through the FortiGate.
- Policy route
- FortiOS routing mechanism that overrides the routing table for matching traffic and can specify a gateway or interface, evaluated before static routes.
- Application control
- FortiGate security profile that identifies applications by signature regardless of port and can block, allow, or shape them, including sub-features such as file transfer.
- DNS filter
- FortiGate security profile that blocks malicious domains and botnet command-and-control lookups using FortiGuard ratings, working with or without SSL inspection.
- FortiSIEM
- SIEM product that aggregates multi-vendor telemetry using supervisors, collectors, and workers, and applies correlation rules to create incidents.
- FortiSOAR
- Security orchestration and response product whose playbooks consume incidents from FortiSIEM, FortiAnalyzer, or third-party sources and automate response steps.
- FortiCWP
- Cloud workload protection product that scans cloud accounts for misconfigurations, overly permissive IAM, and unpatched workloads across public cloud environments.
- SD-WAN rules
- FortiGate mechanism that steers traffic across multiple WAN links based on measured latency, jitter, or packet loss, and can fail over when an SLA is not met.
- FortiAuthenticator
- Identity product that centralizes RADIUS, LDAP, and SAML services and can act as a certificate authority for ZTNA device certificates.
- FortiNAC
- Network access control product that profiles devices and applies dynamic VLAN assignment, serving as a common enforcement point for Zero Trust segmentation.