Implementing Fortinet Collaboration NSE 5 Forti Analyzer Core Technologies Course Overview

The principles of utilizing FortiAnalyzer for centralized logging and reporting will be covered in this course. You will discover how to set up and run FortiAnalyzer, as well as how to use reporting, analysis, and logging to spot threats and attack patterns. Lastly, you will look at how events, incidents, playbooks, and some useful troubleshooting methods are managed.

Objectives

Following completion of this course, you ought to be capable of:

• Describe key features and concepts of FortiAnalyzer
• Install a suitable architecture
• Make use of administrative access restrictions
• Keep an eye on administrative duties and events
• Set up high availability
• Understand HA synchronization and load balancing
• Update the HA cluster’s firmware
• Verify that an HA cluster is operating normally
• Control ADOMs
• Control RAID
• List the devices that are supported
• Troubleshoot communication issues
• Manage disk quota
• Control authorized devices
• Safeguard log data
• Analyze, search, organize, and resolve logs
• Monitor and manage events
• Control and alter event handlers
• Establish and oversee incidents
• Examine the threat hunting tools available
• Make, execute, and debug playbooks
• Playbooks can be imported and exported
• Produce and personalize reports
• Personalize datasets and charts
• Handle and resolve reports

Prerequisites

• Familiarity with all topics presented in the NSE 4 FortiGate Security and NSE 4 FortiGate Infrastructure courses
• Understanding the SQL SELECT syntax is beneficial but not necessary.

Target Audiance

• Anybody in charge of maintaining FortiAnalyzer hardware and FortiGate security data on a daily basis.