COURSE DESCRIPTION

Advanced Threat Protection

In this 2-day course, participants will learn the l Self-paced online
following: *Private class only. Please contact your Fortinet sales representative.

l How to protect their organization and improve its

security against advance threats that bypass traditional
security controls Agenda
l How FortiSandbox detects threats that traditional
antivirus product miss 1. Attack Methodologies and the ATP Framework
l How FortiSandbox dynamically generates local threat 2. Introduction to FortiSandbox
intelligence, which can be shared throughout the 3. Protecting the Edge
network
4. Protecting Email Networks
l How other advanced threat protection (ATP)
5. Protecting Web Applications
components—FortiGate, FortiMail, FortiWeb, and
FortiClient—leverage this threat intelligence 6. Protecting End Users
information to protect organizations, from end-to-end, 7. Protecting Third-Party Appliances
from advanced threats 8. Results Analysis

Objectives
Product Version
After completing this course, participants will be able
FortiSandbox 2.5 to:

l Identify different types of cyber attacks

l Identify threat actors and their motivations
Formats l Understand the anatomy of an attack—the kill chain
l Identify the potentially vulnerable entry points in an
l Instructor-led classroom Enterprise network
l Instructor-led online*

training.fortinet.com
 l Identify how the ATP framework works to break the kill
chain System Requirements
l Identify the role of FortiSandbox in the ATP framework
l Identify appropriate applications for sandboxing If participants take an online format of this class, they
l Identify FortiSandbox architecture must have a computer that has the following:
l Identify FortiSandbox key components
l A high-speed Internet connection
l Identify the appropriate network topology requirements
l An up-to-date web browser
l Configure FortiSandbox
l A PDF viewer
l Monitor FortiSandbox operation
l Speakers / headphones
l Configure FortiGate integration with FortiSandbox
l One of the following:
l Configure FortiMail integration with FortiSandbox
l HTML 5 support
l Configure FortiWeb integration with FortiSandbox
l An up-to-date Java runtime environment (JRE) with
l Configure FortiClient integration with FortiSandbox Java plugin enabled in the web browser
l Troubleshoot FortiSandbox-related issues
Participants should use a wired Ethernet connection
l Perform analysis of outbreak events not a Wi-Fi connection. The firewall or FortiClient
l Remediate outbreak events based on log and report must allow connections to the online labs.
analysis

Certification
Who Should Attend
This course is intended to help participants prepare
This course is intended for network security for the NSE 7 Advanced Threat Protection
engineers responsible for designing, implementing, certification exam.
and maintaining an advanced threat protection
solution with FortiSandbox, in an Enterprise network
environment.

Prerequisites

Participants must have an understanding of the

topics covered in the following courses, or have
equivalent experience:

l NSE 4 FortiGate Security

l NSE 4 FortiGate Infrastructure
It is also recommended that participants have an
understanding of the topics covered in the following
courses, or have equivalent experience:

l NSE 6 FortiMail
l NSE 6 FortiWeb

training.fortinet.com