Advanced Threat Protection kursopplæring | Fortinet NSE 7 sertifisering

Advanced Threat Protection

2 Dager (Online Og På stedet)

Network Security

Pris på forespørsel

In this 2 days course, you will learn the following:

How to protect your organization and improve its security against advanced threats that bypass traditional security controls
How FortiSandbox detects threats that traditional antivirus products miss
How FortiSandbox dynamically generates local threat intelligence, which can be shared throughout the network
How other advanced threat protection (ATP) components—FortiGate, FortiMail, FortiWeb, and FortiClient—leverage this threat intelligence information to protect organizations, from end-to-end, from advanced threats

Product Versions:

After completing this course, candidates will be able to:

Identify different types of cyber attacks
Identify threat actors and their motivations
Understand the anatomy of an attack—the kill chain
Identify the potentially vulnerable entry points in an Enterprise network
Identify how the ATP framework works to break the kill chain
Identify the role of FortiSandbox in the ATP framework
Identify appropriate applications for sandboxing
Identify FortiSandbox architecture
Identify FortiSandbox key components
Identify the appropriate network topology requirements
Configure FortiSandbox
Monitor FortiSandbox operation
Configure FortiGate integration with FortiSandbox
Configure FortiMail integration with FortiSandbox
Configure FortiWeb integration with FortiSandbox
Identify the role of machine learning in preventing zero day attacks and advanced threats
Configure machine learning on FortiWeb
Analyze attack logs from machine learning system
Configure FortiClient integration with FortiSandbox
Troubleshoot FortiSandbox-related issues
Perform analysis of outbreak events
Remediate outbreak events based on log and report analysis

This course is intended for network security engineers responsible for designing, implementing, and maintaining an ATP solution with FortiSandbox, in an Enterprise network environment.

You must have an understanding of the topics covered in the following courses, or have equivalent experience:

It is also recommended that you have an understanding of the topics covered in the following courses, or have equivalent experience:

Advanced Threat Protection