FCP FortiGate Administrator study guide
FCP FortiGate Administrator · Work through your exam, one topic at a time.
The FCP in FortiGate Administrator is a professional-level certification from Fortinet's certification program, aimed at network and security professionals who deploy, configure, and administer FortiGate next-generation firewalls running FortiOS. It is intended for administrators who already understand core networking and security concepts and want a credential that reflects hands-on operational skill with FortiGate appliances rather than vendor-neutral theory. The FCP FortiGate Administrator study guide has 6 sections and about 1,894 words.
01Firewall Policy and NAT
A FortiGate evaluates traffic against firewall policies top-down and stops at the first match, so policy order is a security control, not a convenience. Each policy defines incoming/outgoing interfaces, source and destination addresses, service, schedule, action, and a profile set.
355 words, about 2 min02Routing and Network Configuration
FortiGate routing is destination-based with longest-prefix match, plus policy routes and SD-WAN rules that can override the routing table for specific traffic. Know the components: interfaces (physical, VLAN, aggregate, zone), static routes with distance and priority, dynamic routing (OSPF, BGP), and the reverse path forwarding check.
339 words, about 2 min03Authentication and User Access
FortiGate authentication spans local users and groups, remote servers (LDAP, RADIUS, TACACS+), and identity-based policy. A user group is what policies reference, not individual users.
289 words, about 1 min04Security Profiles and Content Inspection
Security profiles attach to firewall policies and inspect allowed traffic: antivirus, IPS, web filter, application control, DNS filter, email filter, and SSL inspection. Profiles are applied in a profile group or individually.
310 words, about 2 min05VPN Configuration
FortiGate supports IPsec site-to-site and dial-up, plus SSL VPN. For IPsec, know phase 1 (IKE: authentication, encryption, DH group, peer, mode) and phase 2 (IPsec SA: selectors, PFS, lifetime).
295 words, about 1 min06Logging, Monitoring, and Management
FortiGate logging can be local, to FortiAnalyzer, syslog, or cloud services. Log settings are per-policy or global, and log level (emergency through debug) controls verbosity.
306 words, about 2 min