In this one-day course, you will learn how to deploy, configure, and secure FortiAnalyzer for effective log management and reporting. The training covers device registration, high availability, disk management, administrative domains (ADOMs), and log analysis to help you monitor network activity and maintain security visibility across Fortinet environments.
FortiAnalyzer Analyst 7.6
Gain hands-on skills in using FortiAnalyzer for threat detection, incident response, and security automation within a SOC environment.
Course Duration
2 Days
Target Audience
Security professionals responsible for Fortinet Security Fabric analytics and automating tasks to detect and respond to cyberattacks using FortiAnalyzer should attend this course.
Course Overview
In this two-day course, you will learn how to use FortiAnalyzer for centralized logging, analytics, and automated threat response. You’ll explore SOC operations, event management, incident analysis, and playbook automation to detect, investigate, and respond to security threats effectively. The course also covers FortiAI integration, threat hunting, and custom reporting for advanced security visibility.
Key Learning Objectives
- Describe SOC objectives, responsibilities, and roles
- Describe the role of FortiAnalyzer in a SOC
- Describe FortiAnalyzer Security Fabric integration
- Describe how logging works in a Security Fabric
- Describe FortiAnalyzer Fabric deployments
- Describe FortiAnalyzer operating modes
- Describe how FortiAnalyzer parses and normalizes logs
- Validate log parsers
- Search logs using normalized fields
- View and search for logs in the log view
- Create saved filters and dashboards
- View summary data in FortiView
- View dashboards and widget features
- Configure event handlers
- Manage events
- Configure indicators
- Create incidents
- Analyze incidents
- Configure incident settings
- Describe FortiAI operations and use cases
- Describe threat hunting
- Use the log count chart
- Use the SIEM log analytics table
- Describe outbreak alerts
- Collect log volume statistics
- Configure an automation stitch
- Configure an event handler with an automation stitch enabled
- Run and fine-tune predefined reports
- Customize reports with macros, custom charts, and datasets
- Configure external storage for reports
- Group reports
- Import and export reports and charts
- Attach reports to incidents
- Manage and troubleshoot reports
- Create new playbooks
- Use variables in tasks
- Monitor playbooks
- Export and import playbooks
FortiAnalyzer Analyst 7.6
Agenda
- SOC Concepts and Security Fabric
- Log Data Flow and Navigation
- Events, Indicators, and Incidents
- FortiAI, Threat Hunting, and Troubleshooting
- Reports
- Playbooks
Your Gateway
FortiAnalyzer Administrator 7.6
- Delivery Mode: ILT, VILT
- Technology: Administration
FortiAuthenticator Administrator 7.6
- Delivery Mode: ILT, VILT
- Technology: Administration
In this three-day course, you will learn how to configure and manage FortiAuthenticator for secure authentication and identity management. You’ll explore user authentication, LDAP and RADIUS integration, two-factor authentication, certificate management, and SAML SSO deployment to strengthen access control and streamline user verification.
FortiGate Administrator 7.4
- Delivery Mode: ILT, VILT
- Technology: Administration
In this four-day course, you will learn to configure and manage FortiGate firewalls for effective network protection. The training covers key features like firewall policies, VPNs, authentication, Security Fabric, high availability, and security profiles such as IPS, antivirus, and web filtering.
FortiGate Administrator 7.6
- Delivery Mode: ILT, VILT
- Technology: Administration
In this four-day course, you will learn how to configure, manage, and monitor FortiGate devices to secure your organization’s network. Through hands-on labs, you’ll explore key features such as firewall policies, authentication, VPNs, Security Fabric, high availability, and advanced security profiles including IPS, antivirus, web filtering, and application control. This course provides a solid foundation for effectively administering FortiGate devices in real-world environments.
FortiManager Administrator 7.6
- Delivery Mode: ILT, VILT
- Technology: Administration
In this two-day course, you will learn how to use FortiManager 7.6 to centrally manage multiple FortiGate devices. You’ll explore key features like policy and object management, ADOMs, templates, firmware updates, and troubleshooting to efficiently manage large or complex networks.
