Fortinet NSE 7 case studies
Fortinet NSE 7 · Put your knowledge to work in context.
NSE 7 is an upper-tier credential in Fortinet's Network Security Expert certification program, which Fortinet publishes through its Training Institute and Certification Program pages. It is aimed at security and network engineers who design, deploy, and troubleshoot Fortinet infrastructure rather than simply operating it day to day, so the material assumes real FortiGate and FortiOS familiarity before you sit the exam. The Fortinet NSE 7 case studies are 5 cases and about 3,723 words.
1Branch HTTPS stalls and OSPF flaps over an IPsec tunnel
Northwind's branch FortiGate 100F runs FortiOS 7.2.8 and terminates a route-based IPsec tunnel named HQ-VPN to HQ over a PPPoE WAN with MTU 1492. OSPF runs over the tunnel, and the ERP server at HQ is 10.50.8.20.
767 words, about 4 min2Hairpin access to a published server after enabling central NAT
Contoso's FortiGate 200F runs FortiOS 7.4.1 and was switched to central NAT last week so that all internet-bound traffic from 10.10.0.0/16 and 10.20.0.0/16 leaves as 203.0.113.10 for an auditor requirement. The internal HR app 10.10.5.20:443 is published as VIP hr-public (203.0.113.20, port forward 443 to 443).
734 words, about 4 min3Overlapping server subnets across an acquisition IPsec tunnel
Both Meridian HQ and the acquired site use 10.10.20.0/24 for their server VLANs: HQ has the domain controller 10.10.20.10, and the site has the ERP server 10.10.20.50. A route-based IPsec tunnel between the two FortiGates is up with 0.0.0.0/0 phase2 selectors, and HQ users need the site ERP while site users need the HQ domain controller.
756 words, about 4 min4Deep inspection breaks pinned business applications
Helios runs a FortiGate 200F on FortiOS 7.2.8 with one internet policy (id 5) in proxy inspection mode using ssl-ssh-profile deep-inspection plus antivirus, IPS, and web filter. Browsing works and the Fortinet CA is deployed to domain PCs by GPO.
727 words, about 4 min5HA pair flaps after a switch replacement
Two FortiGate 600E units run FGCP active-passive on FortiOS 7.2.9 as group HQ-CLUSTER. Heartbeat and session sync use port3 and port4, which connect through an access switch that also carries user VLANs.
739 words, about 4 min