Course Overview
In this course, professionals will learn how to protect your organization & improve its security against advance threats that bypass traditional security controls. One will learn about how FortiSandbox detects advanced threats. One will also learn about how FortiSandbox dynamically generates local threat intelligence, & how other advanced threat protection (ATP) components leverage this risk intelligence information to secure organizations from advanced threats.
Prerequisites
You must have an knowledge of the topics covered in NSE 4 FortiGate Security & NSE 4 FortiGate Infrastructure, or have equivalent experience.
It is also suggested that you have an understanding of the sections covered in NSE 6 FortiMail, NSE 6 FortiWeb, & NSE 5 FortiClient, or have comparable experience.
Audience Profile
This course is developed for network security engineers responsible for implementing, designing, & maintaining an ATP solution with FortiSandbox, in Enterprise network environment.
Learning Objectives
After accomplishment of this course, you should be able to:
- Recognize different types of cyber attacks
- Recognize threat actors and their motivations
- Comprehend the anatomy of an attack—the kill chain
- Recognize the potentially vulnerable entry points in an Enterprise network
- Recognize how ATP works to break the kill chain
- Recognize
- the part of FortiSandbox in the ATP framework
- Recognize appropriate applications for sandboxing
- Recognize FortiSandbox architecture and key components
- Recognize the proper network topology needs
- Configure FortiSandbox
- Observe FortiSandbox operation
- Configure FortiGate, FortiWeb, FortiMail, and FortiClient integration with FortiSandbox
- Recognize the role of machine learning in safeguarding zero day attacks and advanced threats
- Configure machine learning on FortiWeb
- Analyze attack logs from machine learning system
- Troubleshoot FortiSandbox
- Conduct analysis of outbreak events
- Remediate outbreak events grounded on log and report analysis
Content Outline
Attack Methodologies and the ATP Framework
- FortiSandbox Key Components
High Availability, Maintenance and Troubleshooting
Protecting the Edge
Protecting Email Networks
Protecting Web Applications
Protecting End Users
Protecting Third-Party Appliances
Results Analysis
FAQs
A: To attend the training session you should have an operational Desktops or Laptops with required specification along with good internet connection to access the labs.
A: We would always recommend you to attend the live session to practice & clarify the doubts instantly and get more value from your investment. However, if due to some contingency if you have to skip the class Radiant Techlearning would help you with the recorded session of that particular day. However, those recorded sessions are not meant only for personal consumption and NOT for distribution or any commercial use.
A: Radiant Techlearning has a data center containing the Virtual Training environment for the purpose of participant’s hand-on-practice.
Participants can easily access these labs over Cloud with the help of remote desktop connection.
Radiant virtual labs provides you the flexibility to learn from anywhere in the world and in any time zone.
A: The learners will be enthralled as we engage them the real world and industry Oriented projects during the training program. These projects will improve your skills and knowledge and you will gain better experience. These real time projects, they will help you a lot in your future tasks and assignments.