Fortinet NSE 6 case studies
Fortinet NSE 6 · Put your knowledge to work in context.
NSE 6 sits in the Fortinet Network Security Expert (NSE) program, a numbered certification track operated by Fortinet's Training Institute. The NSE program is structured as a progression of levels, and NSE 6 is positioned above the foundational levels as an advanced, product-focused tier. The Fortinet NSE 6 case studies are 5 cases and about 4,839 words.
1HQ HA Pair With SD-WAN Health-Check Flapping
An enterprise runs a pair of FortiGate 200F appliances at headquarters in FGCP active-passive HA on FortiOS 7.2, with four VDOMs: root (management), CORP, GUEST and DMZ. Internet access is provided by two links combined into an SD-WAN zone: ISP-A, a 500/500 Mbit/s fibre circuit, and ISP-B, a 200/100 Mbit/s LTE backup.
981 words, about 5 min2Brute-Force Handler Drowning a Real Compromise
A managed security service provider runs a FortiAnalyzer 3500F for 60 customer FortiGates across three ADOMs: PROD, RETAIL and CORP. The platform ingests about 90 GB of logs per day with 180-day retention.
906 words, about 5 min3Inspection VPC Bypass and NAT Port Exhaustion in AWS
An AWS estate has six VPCs joined by a Transit Gateway. A central inspection VPC holds two FortiGate VM instances on FortiOS 7.4 in different availability zones, managed by FortiManager.
1,007 words, about 5 min4Overlapping Branch Subnets Break ADVPN Shortcuts
An enterprise with 85 branches runs ADVPN over two hubs in DC1 and DC2, using FortiGate 1800F hubs and 60F and 80F spokes on FortiOS 7.2. Each spoke has one IPsec tunnel to each hub over the internet, with BGP on the overlay advertising the branch LAN.
952 words, about 5 min5Certificate Pinning Versus Deep Inspection Policy
A company supports 1,200 users through a FortiGate 600E HA pair on FortiOS 7.2 using flow-based inspection. The policy applies certificate inspection to all categories and deep inspection to a 250-user finance and HR group plus uncategorised sites.
993 words, about 5 min