NSE3 FortiGate High End Enterprise Firewall

Welcome to the FortiGate High End Enterprise Firewall product training.

1
 NSE3 FortiGate High End Enterprise Firewall

This slide shows the topics you will explore in this lesson, beginning with a product
overview.

2
 NSE3 FortiGate High End Enterprise Firewall

After completing this lesson, you should be able to:

• Identify the business drivers and security challenges customers currently face
• Describe the key features of FortiGate High-End Firewalls
• Identify the sales strategies and competitive advantages of FortiGate High-End Firewalls

3
There are a lot of buzzwords around adopting cloud-first and digital innovation. You must
be wondering, is this digital innovation or digital transformation? The fact of the matter is,
they are related—one can lead to the other. Customers who have higher education want to
use digital innovation to digitize and gamify courses to make them more interesting. They
also want to offer them online, to make them consumable from all types of devices with the
intended solid security framework.

An organization that has a cloud-first mandate would look to the cloud as a first option for
any new application or service. However, most organizations may already be using one or
more cloud services from more than one cloud service provider. What is the impact on your
existing campus and data centers architectures? To consume services from one or more
clouds, you need to adopt a hybrid IT approach and, as a result, your data centers become
hybrids.

The next logical question would be; how would you deliver consistent security posture
across this increased attack surface? Attacks are becoming increasingly sophisticated, and
our ability to detect, contain, and isolate attacks has become curtailed. So, organizations
are spending a lot of money dealing with damages that are caused.

Encrypted traffic has risen by at approximately 80%, as cited by Gartner. NSS Labs has
similar numbers. It is unknown if the encrypted traffic is clean, or if it contains hidden

4
 NSE3 FortiGate High End Enterprise Firewall

malware. A natural reaction to dealing with attacks is to add more security products.
However, if that were effective, why are attack-related losses rising? One possible
reason is that these products don't share threat intelligence with each other because
they operate in silos and automatically remediate at the same time, adding more to
complexity.

These are some of the big challenges that Fortinet’s customers are facing. Fortinet is
talking with customers, and the partners that support them, to validate customer
concerns.

4
Starting with FortiGate, networks are packed with security processing units that are
composed of content processors that optimize security, and network processors that
optimize networking and enable customers to build highly scalable security-driven networks
that exhibits the least degradation.

FortiGate, and all other assets, run a single operating system called FortiOS, which is
unique compared to some Fortinet competitors that have a different OS for every product
line. Some of the key capabilities that will help customers manage risks are NGFW, SSL
inspection, segmentation, and connectors.

Connectors are unique in the current narrative of hybrid data centers. Connectors help you
gain dynamically changing information. You configure connectors only once through
FortiGate, for multiple clouds. The connectors are continuously updated based on workload
elasticity across multiple clouds. Connectors help you enforce consistent security policies
across all clouds and geographically dispersed assets.

Management and Analytics are the key pillars. Fortinet provides single-pane-of-glass
management across all assets. Analytics help customers keep on top of logging and
analyzing all threats, and make the security position and policy very effective.

5
As organizations continue on their journeys of digital transformation (DX), a fundamental
change will follow. Their networks will evolve and become hybrid, geographically dispersed,
and connect with multiple clouds.

The basic premise of this transformation is that the application can be hosted on-premises,
at multiple clouds, and consumed by any device from any location. Security becomes
paramount as they look for consistent protection from the branch, to the campus, to the
data center. The application extends to multiple clouds.

Fortinet High-End Next-Generation Firewalls offer a flexible set of solutions that include
capabilities like URL filtering and threat protection.

The Internal Segmentation solution aligns with your business intent, works at any scale,
and adapts to any segmentation that includes endpoints, IoT devices, networking
infrastructure, and applications.

Whether part of a firewall, or a separate, standalone device, the Intrusion Prevention

System (IPS) solution allows virtual patching and compliance with standards.

High-speed crypto VPNs encrypt data-in-motion and protect enterprises from breaches
through access controls. Enterprises can move data from on-premises to the cloud assets

6
 NSE3 FortiGate High End Enterprise Firewall

without bad actors launching man-in-the-middle attacks.

6
 NSE3 FortiGate High End Enterprise Firewall

This slides shows a consolidated view of the key use cases that the FortiGate NGFW High-
End Series addresses at the desired scale and level of performance.

The FortiGate High-End Next-Generation Firewall offers deployment flexibility and can be
deployed at:
1. Data centers of any scale, and at any performance level, and serving the needs of
enterprises and service provider IT networks.
2. Large campuses that require high scalability and performance, and a diverse set of
interfaces.
3. Service provider points of presence that serve the unique needs of mobile subscribers
with security they require.

This slide shows a use case and the two benefits that a customer can derive from the use
case​. In later slides, you will expand on the key capabilities of FortiGate NGFW High-End
Firewalls that enable these benefits. The five use cases are:​
1. Reduce complexity, which helps
• Consolidate point products to optimize cost and operations
• Improve security posture by closing gaps between point product silos
2. Managing external risks with
• Powerful security with fine-grained policies for any enterprise edge
• Best-of-breed security to deal with cyber attacks without sacrificing performance

7
 NSE3 FortiGate High End Enterprise Firewall

4. Managing internal risks with

• Segmentation and protection of various attack vectors
• Defense in depth with cost-effective enforcement points
5. Removing blind spots
• Full visibility into all network traffic, both encrypted and clear text
• Detect and remediate malware in encrypted flows

7
What capabilities are needed in security implementations for hybrid networks? Hybrid
networks require high-performance threat protection to combat attacks, as well as leverage
services, such as Application Control and IPS, running concurrently with Antivirus. The
FortiGate High-End NGFW AV engine is able to catch polymorphic attacks because it is not
a static signature engine like most AV engines that exist in the industry.

Fortinet's innovative FortiGuard Virus Outbreak Protection Services (VOS) is a key

differentiator. VOS provides always-on protection with interim signature updates that are
not yet fully verified.

FortiGate High-End NGFW runs purpose-built security processing units that are validated
by third-party, such as NSS Labs, to offer the best price and performance in the industry.
Customers do not have to choose between best-of-breed security, and performance, and
can deploy a solution that offers total cost of ownership (TCO) that is among the best.

The third capability is FortiGate IP, which for short. FortiGate IPS is context and content
aware. Context awareness allows FortiGate IPS to look for botnets based on behavior. It
examines where traffic is flowing by maintaining a dynamic list of command and control
(C&C) protocols. It also examines the volume and form of traffic, regardless of destination,
in case the C&C protocols are unknown. FortiGate IPS can also scan for vulnerabilities, to
help color the severity and risk of the attacks it sees.

8
 NSE3 FortiGate High End Enterprise Firewall

Content awareness allows FortiGate IPS to provide a built-in, patented Compact

Pattern Recognition Language (CPRL) anti-malware engine to detect and block entire
malware families with one signature. This is because FortiGate IPS signatures can
distinguish among the characteristics of malware versus a simple hash signatures.

The fourth capability is network segmentation, which covers segmentation at any

location, including, branch, campus, data center, and multiple clouds. The
segmentation capabilities adapt to any organization’s needs, be it segmentation
based on endpoints, IoT devices, network infrastructure, such as access points,
switches, and applications.

FortiGate NGFW segmentation prevents the lateral spread of threats, and helps
organizations to achieve defence in depth.

All FortiGate High-End NGFW employ AI-powered FortiGuard services, and get the
latest signatures automatically.

The unknown attacks are dealt with FortiSandbox, which is also AI-powered.

8
 NSE3 FortiGate High End Enterprise Firewall

The integration of devices using open standards, common operating systems, and unified
management platforms enables the sharing and correlation of real-time threat intelligence.

The Fortinet Security Fabric, powered by FortiOS 6.2 on FortiGate, is an intelligent

framework designed for scalable, interconnected security combined with high awareness,
actionable threat intelligence, and open API standards for maximum flexibility and
integration, to protect even the most demanding enterprise environments.

The Fortinet Security Fabric also supports the coordinated detection of advanced threats
through sophisticated, centralized analytics that are difficult or impossible to achieve using
traditionally isolated security deployments.

Like today’s digital business, cyber-crime happens at digital speeds. Security Fabric
automatically provides continuous trust assessment, and then provides an immediate,
coordinated response to detected threats. Because these network environments are highly
elastic, it is also able to dynamically adapt as requirements and configurations change.

9
 NSE3 FortiGate High End Enterprise Firewall

Increasing digital connectedness of organizations is driving the requirement for a security

transformation, where security is integrated into applications, devices, and cloud networks
to protect business data spread across these complex environments.

FortiGate NGFW runs FortiOS, delivering hundreds of new features and capabilities that
were designed to provide the broad visibility, integrated threat intelligence, and automated
response required for digital business.

Every High-End FortiGate includes an on-the-box provides on the box device manager that
provides a deep view into traffic, applications, and events that are happening on the
NGFW. Customizable dashboards allow the creation of views that suit the individual needs
of each enterprise.

Centralized, easy-to-use FortiManager and FortiAnalyzer provide visibility, monitoring, and

analytics across all enterprise assets, and provide a single-pane-of-glass for a scalable
management solution.

10
Because internal segmentation firewalls are deployed in-line for network zoning, they must
be very high performance in order to meet the demands of internal, or east-west, traffic,
and to ensure they don’t become a bottleneck at these critical points.

Fortinet High-End NGFW provides the scaled segmentation needed to operate at multi-
gigabit speeds and provide deep packet/content inspection without slowing down the
network. NGFWs are easy to deploy using the default Transparent Firewall mode. An
evolving aspect of transparent mode is the ability to physically separate subnetworks and
servers through a switch.

FortiGuard Next-Generation Firewalls are flexible enough to be placed anywhere within the
internal network of either a Data Center or a campus deployment.

Fortinet’s high performance NGFWs also include fully functional, integrated switches to
provide low-latency switching and full threat protection using transparent mode. Built-in,
high-density 10G, 25G, 40G, and 100G interfaces provide flexible connectivity choices to
interconnect all parts of the enterprise infrastructure at very high speeds without requiring
additional networking devices.

Having a very high tenant scale is no longer common. Today, organizations like to break up
their large security policy into smaller and more manageable sets of policies by dividing the

11
 NSE3 FortiGate High End Enterprise Firewall

network into a large set of segments. For example, all PCI-compliant resources are
grouped in a segment, and all traffic related to these resources follows a stricter
security policy than the organization’s guest traffic.

11
As enterprises adopt rich customer experiences and allow Internet access at
every branch, they need to separate the guest Wi-Fi traffic from the corporate
traffic. In addition, the enterprise branches that offer ATM and credit card
processing services not only encrypt financial traffic using crypto VPN, but also
separate it from their regular corporate traffic to achieve PCI compliance. To
separate traffic, enterprises opt for VLANs that are not able to establish a
distinct security policy per VLAN. The FortiOS virtual domain (VDOM) offers
much better implementation of a security policy that allows granular control and
configuration of SSL inspection, threat protection, and crypto VPN features on a
per-VDOM level, to achieve compliance, threat isolation, and better security.

Fortinet offers the industry’s highest multi-tenant scale that is enabled by up to

500 VDOMs on High-End Next-Generation Firewalls.

12
What makes FortiGuard different from other companies is its advanced and proven
analytics and artificial intelligence that collectively ingests and analyzes 100 billion events
every day, on average. This helps customers stay protected against new, unknown threats
across all Security Fabric deployments.

Every organization in the industry has some form of artificial intelligence (AI) and/or
machine learning (ML). But, AI\ML is only as good as the design, and even with the best
design, it is only as good as the training the system gets.

Fortinet operates a multi-billion node AI infrastructure that took more than 5.5 years to train
before Fortinet operationalized it. Clearly, it’s not something many can do or copy
overnight.

Additionally, the Fortinet analytics and AI platform is driven by one of the largest and most
experienced security research organizations made up of more than 300 researchers and
analysts, eight dedicated FortiGuard Labs, and spanning 31 countries. Collectively, our
FortiGuard team contributes around 580,000 hours of research annually. Very few, if any, of
Fortinet’s competitors can say that!

Fortinet also feeds millions of events from across all Fortinet Security Fabric deployments
into this body of research, which Fortinet then feeds into its system.

13
 NSE3 FortiGate High End Enterprise Firewall

And finally, Fortinet also gathers threat intelligence across more than 200 threat
intelligence ecosystem partners and collaborations.

As you can see, that’s a lot of data, a lot of intelligence, and a lot of ongoing training
and refinement of the Fortinet analytics and AI platform!

13
As security architects consider how to provide comprehensive threat protection for their
enterprises, including firewalling, intrusion prevention, antivirus, SSL inspection, and
application control, they face a confusing array of feature sets and vendor claims. It
becomes even more difficult to make apples-to-apples comparisons when vendors don’t
publish complete specifications or standards-based performance metrics.

Amid the pressing need to thwart increasing SSL-based attacks without hampering the
pace of business, security architects can’t dither in their technology selection.

The price and performance comparison is based on products that fall in the same threat
protection and follow a similar price band.

The FortiGate 6300F delivers threat protection at speeds up to 60 Gbps, ensuring minimal
degradation of network performance even with all services running. That’s 1.6 times the
performance of Palo Alto Networks, and three times faster than Checkpoint. At this time,
Cisco does not publish its threat protection performance results.

While some security solutions can decrypt SSL traffic, many are degrading in performance
under growing SSL bandwidth demands and SSL key lengths. Up to 66 Gbps, the
FortiGate 6300F delivers SSL inspection with minimal performance impact to the network,
executing SSL inspection eight times faster than the industry average. Fortinet as a vendor

14
 NSE3 FortiGate High End Enterprise Firewall

was the first to announce support for the latest TLS1.3 standard. Fortinet TLS1.2 and
TLS1.3 support mandated and emergent ciphers without downgrading to TLS1.2 for
scenarios that mandate TLS1.3. Fortinet customers have the flexibility to support
TLS1.2 and TLS1.3 concurrently on all FortiGate NGFWs.

FortiGate 6300F uses hardware load balancing to achieve very high connectivity
rates and throughput four times the industry average. It also delivers up to 120 million
concurrent sessions, four times the industry average. NGFWs with lower throughput
and connectivity rates may struggle in larger enterprises or other environments with
higher transaction rates.

14
Fortinet aggressively tests and validates its solutions through truly independent,
third-party testers like NSS Labs. Unlike the competition, Fortinet doesn’t engage
in “pay for play” test reports like the ones published by Tolly, Miercom, and so on,
where the vendor is paid to run the test and write a report, and magically the
sponsor always looks good. No other network security vendor achieves such a
large set of successful certifications and “recommended” validations.

Fortinet strongly believes in third-party testing and participates in a wide array of

public tests that extends beyond NSS Labs Group Tests for various security
capabilities.

Some analysts might speak highly of some of our competition, but when you
actually plug in the products and test them in real-life scenarios, Fortinet shines
while the competition often fails. The competition often fails to live up to their own
datasheet performance and effectiveness claims, while Fortinet meets or exceeds
its claims.

It is a part of Fortinet’s culture, and a founding principle of the company, to build

great products and certify, validate, and test them rigorously to prove their value.

15
 NSE3 FortiGate High End Enterprise Firewall

Good job! You now understand FortiGate High-End Firewalls, and their features and
benefits.

In the next lesson, you will learn specific sales strategies and other FortiGate High-End-
related sales enablement topics.

16
 NSE3 FortiGate High End Enterprise Firewall

Welcome to the sales enablement training for the FortiGate High-End enterprise firewall.

17
 NSE3 FortiGate High End Enterprise Firewall

Now that you completed the FortiGate High End product overview, you can examine
specific sales strategies and other FortiGate high end sales enablement topics.

18
 NSE3 FortiGate High End Enterprise Firewall

Here are some successful qualifiers to get the conversation going with your customers. Depending on the answer, you
can continue to drill down to gauge the opportunity and size.

Are you concerned about the security of your networking infrastructure across Hybrid IT architecture?

Surveys show that over 60% of security managers are worried about a data center breach. Chances are, the customer
you are talking with is also concerned because they are dealing with an increased attack surface, resulting from hybrid IT
architectures. Implementing consistent security and protection across hybrid IT architectures is a great conversation
starter, which will help you determine the problem areas that the customer needs to solve. You can also discuss their
recent incidents, or breaches involving industry peers. Discuss future threat and compliance concerns, and any new
project roll outs or deployments that are IT dependent, which usually require some type of a security requirement.

Are you satisfied with the performance of the security solution you have in place today?
Many firewall solutions fall short of addressing data center performance requirements, whether lacking firewall throughput,
or a high density of 25G, 40G, and 100GE interfaces, or other accompanying requirements, such as session scale, low
latency, and capacity. This is where Fortinet compact and modular platforms outperform competitors. The Fortinet High
End next-generation firewall (NGFW) delivers advanced security capabilities with the lowest performance degradation,
which has been validated by independent third-party entities, such as NSS Labs.

Is your NGFW protecting your internal networks from malware and botnets that may be inside your network?

Start the conversation with flat networks. Flat networks imply that the network may be segmented using VLANs or
VXLANs. However, we know that VLAN does not perform content inspection. As the conversation progresses, your
customer might mention that they have VLAN-to-VLAN traffic go through a firewall, and therefore they have security. That
is true. The next logical question is two-fold. Do they see a need to do content inspection between two endpoints that are
in the same VLAN? If not, how would they prevent malware from propagating and gaining access to sensitive assets and
data, such as their point of sale (POS) systems, intellectual property, and so on?

Are you inspecting encrypted SSL traffic for malware?

Find out if the customer is using SSL inspection. If not, are they concerned that their firewall performance might
significantly degrade? Does the customer need to comply with a regulation, such as Children's Internet Protection (CIPA),
as is the case with K12 school districts? Customers may also be concerned about managing certificates or breaking
applications when they turn on SSL inspection. Fortinet is the first next-generation firewall vendor to introduce TLS1.3.
The NGFW does not force the endpoint to degrade to TLS1.2 when the TLS1.3 connection negotiation fails. Fortinet not
only decrypts the SSL traffic, it also performs deep IPS to detect and remediate malware that gets distributed via
encrypted flows.

19
Who should you connect with? The main influencer is typically the economic buyer. They
most likely have the right sized budget, and should be your most strategic partner who can
vouch for you and your products, services, and solutions. Deals that involve the purchase
of FortiGate High End solutions, are at least six to seven figure deals, and often involve
long lead times..

Our strongest competitor is Palo Alto Networks. They are very good when it comes to
delivering the right message to the right person, and thereby influencing customers to
make long-term security investments for better business outcomes.

20
 NSE3 FortiGate High End Enterprise Firewall

Customer engagement is a journey. After you read the Discovery Guide, and prepare your
questions, you are ready to set up a discovery meeting with the customer. This is your first
step. Based on what you learn in the meeting, you can identify the appropriate user case
and propose it to the customer.

Depending on the customer's needs and the situation, you can also present architecture
slides, and engage in deeper technical discussions.

As things progress, you should engage with subject-matter experts, such as your Product
Marketing Manager, Solution Architect, Product Manager, and Sales Engineer to help you
navigate larger opportunities, create proof of concepts (POC), and roadmaps.

21
To understand how Fortinet compares with its competitors, you can review these five categories.
In the first category, the FortiGate next generation firewall offers the best price and performance in the industry for threat protection,
application firewall, next generation firewall, intrusion prevention system, and SSL performance.

This assessment is consistently supported by NSS labs, across all of the group tests, and across various categories.

Our competitors cannot claim the same ranking. For example, Gartner mentions Palo Alto Networks pricing in their caution category.

In the second category, which pertains to visibility into network segments and flows, such as inspecting encrypted flows, Fortinet ranks
on top with TLS 1.3 support., This is a strong differentiator. If you look at the latest 2019 group test report for next generation firewalls,
you will notice that Palo Alto Networks failed to decrypt two emerging ciphers, and support x25519 Elliptical curve specification. In the
case of Checkpoint, they failed to decrypt 10 out of 24 tested ciphers. They also failed to support for x25519 Elliptical curve
specification.

The third category is the ability to adapt to any segmentation. Fortinet is the best in the industry.

The fourth category is third-party verification of security. Take Intrusion Prevention Systems (IPS) as an example. Cisco and Checkpoint
do not participate in DCIPS. Palo Alto Networks had device stability issues during the 2019 Next Generation Intrusion Prevention
System (NGIPS) tests as evident by the 2019 NSS Labs NGIPS group test SVM results.

The fifth category and last is single pane of glass management, which Fortinet continued to improve using the Security Fabric approach.

22
Here is an at-a-glance view of the FortiGuard bundles for Fortinet High End NGFW. We combined Antivirus and FortiSandbox Cloud
into one FortiGuard subscription service, which is now available in all three bundles. The service includes: Antivirus, Botnet IP Services,
Mobile Security, FortiSandbox Cloud, Virus Outbreak Protection Service, and Content Disarm and Reconstruction. This robust service
protects network environments from known and unknown threats. FortiGuard services and bundles cover the realm of protection
required to effectively address the complex and evolving threat landscape. The advanced threat protection bundle provides IPS service,
Application Control, and FortiCare.

The Unified Threat Protection bundle provides Web Filtering and Antispam, which addresses the two critical platforms (email and web)
on which malware is distributed.

The Enterprise Protection bundle provides three critical services that are required to provide comprehensive protection from endpoint to
the cloud: Cloud Access Security Broker (CASB), Security Rating, and Industrial Security.

Positioning ATP—The Advanced Threat Protection bundle provides the foundational security technologies needed to protect and
defend against known and unknown cyber threats.

Position UTM—The Unified Threat Protection bundle extends threat protection across the entire digital attack surface, providing
industry-leading defense against sophisticated attacks. The UTM bundle has you covered for web and email-based attacks.

Positioning ENT—The Enterprise Protection bundle consolidates the comprehensive protection needed to defend against all cyber-
attack channels, from the endpoint to the cloud. It includes the technologies that are required to address today’s challenging
Operational Technology (OT), risk, compliance, and management concerns.

Positioning 360 Protection—For customers who plan to implement SD-WAN, Fortinet highly recommends the 360 Protection bundles.
It offers comprehensive security, advanced support, and a full suite of cloud-based operational capabilities, which includes centralized
management, visibility, and SD-WAN monitoring and orchestration.

23
 NSE3 FortiGate High End Enterprise Firewall

Here are the key takeaways. Fortinet natively integrates best of class security with advanced networking, and supports networking
technologies, such as VLAN, VXLAN, BGP, and so on.

Fortinet received six consecutive NSS Labs NGFW recommendation ratings, the highest security effectiveness of 99.86% and one of
the industry’s best security TCOs.

On the Gartner Network Firewall Peer Insights, FortiGate NGFW has maintained one of the highest ratings over a very large set of
customer and partner reviews.

Fortinet High End NGFW offers flexible deployments across large campuses, hybrid data centers, and telco Point of Presence (POP).

Fortinet NGFW provides consistent security and protection across hybrid IT architectures.

24
Here is the Security Value Map (SVM), which contains test data on next generation firewalls, conducted by NSS Labs in 2019.

Read the map from left to right, on the horizontal axis, to understand which products have better value, also known as total cost of
ownership (TCO). Notice that product value increases, from left to right. Read the map from the bottom to the top to understand which
products provide the most effective security. Notice that the highest ratings for most effective security appear at the top.

The caution region is where both the total cost of ownership and security effectiveness intersects. All vendors aspire to be in the top-
right corner of the map, where products received both high TCO and most effective security ratings.

The coloured dots have also meaning. The green dot indicates that a vendor blocked all evasions and a blue dot indicates that the
vendor missed some evasions.

The group tests were performed using FortiGate 500E, and the results are summarized as follows:

• Fortinet received the sixth consecutive recommendation rating from NSS Labs
• Highest security effectiveness of 99.86%
• Blocked 100% of all live exploits, representing active attack campaigns on the Internet
• High SSL inspection performance (5.82 Gbps with HTTPS traffic), required for growing (75%) of total encrypted traffic
• Least SSL performance degradation (8%) compared to other participating vendors, averaging 75%
• Passed all functionality tests for 26 different ciphers and emergent ciphers
• One of the best for TCO and unparalleled protection against evasive threats, for example $2 per protected mbps

While these are excellent results, you may notice the blue dot that is circled in grey. Fortinet missed a few evasions during initial testing.
However, Fortinet addressed this issue in a subsequent 6.0.5 release, and made the fix immediately available to customers.

In response, NSS Labs tested and published an updated report. Fortinet outperformed the initial security effectiveness test, with a
revised rating of 99.86%, as reflected by the green circle on the map.

25
 NSE3 FortiGate High End Enterprise Firewall

You should now be able to:

• Identify the business drivers and security challenges that customers currently face.
• Describe the FortiGate High End Firewall key features.
• Identify the sales strategies for, and competitive advantages of, FortiGate High End
Firewalls.

26
 NSE3 FortiGate High End Enterprise Firewall

Congratulations!

You’ve completed both sections of the NSE 3 FortiGate High End Firewall module.

27
 NSE3 FortiGate High End Enterprise Firewall

After you’ve studied this lesson, don’t forget to take its quiz. To earn your NSE certification,
you must pass the quiz for each lesson.

Thank you for your time.

28