In this course, you will learn about FortiWeb deployment, configuration, and management. You will learn how to set up server objects, define security policies, and implement HA. This course covers protection against advanced threats using data validation, client-side security, and machine learning. You will also explore API security, bot mitigation, and application delivery features such as URL rewriting, single sign-on, caching, and acceleration. Additional topics include DoS prevention, logging, FortiAI integration, compliance standards (PCI DSS, OWASP), and basic troubleshooting.

Product Versions:

• FortiWeb 8.0

Exam:

• This course prepares you for the Fortinet NSE 5 – FortiWeb 8.0 Administrator

Associated Certifications:

• This course is intended to help you prepare for the Fortinet NSE 5 – FortiWeb Administrator exam. This exam is part of the FCP Cloud Security certification track.

• Define web application firewall and describe its role in the network
• Perform basic configuration and initial deployment
• Configure FortiWeb for deployment in a load balanced network environment
• Implement SSL/TLS encryption, including inspection and offloading
• Configure and customize FortiWeb signatures
• Configure FortiWeb to protect against DoS
• Configure API protection and bot mitigation
• Implement FortiWeb machine learning capabilities
• Configure user authentication and access control features
• Configure FortiWeb to ensure Payment Card Industry Data Security Standard (PCI DSS) compliance of your web applications
• Configure FortiWeb to perform HTTP content based routing, rewriting, and redirection
• Perform basic troubleshooting of FortiWeb

1. Introduction
2. Basic Setup
3. Web Application Security
4. API Discovery and Protection
5. Bot Mitigation
6. Application Delivery
7. Additional Configuration
8. Compliance
9. Troubleshooting

• Security professionals involved in the management, configuration, administration, and monitoring of FortiWeb in small to large enterprise deployments should attend this course.

You must have an understanding of the topics covered in FCP – FortiGate Administrator, or have equivalent experience.

It is also recommended that you have an understanding of the following topics:

• HTTP protocol
• Basic knowledge of HTML, JavaScript, and server-side dynamic page languages, such as PHP