Web Application Firewall (WAF): FortiWeb

FortiWeb, Fortinet’s Web Application Firewall, protects your business-critical web applications from attacks that target known and unknown vulnerabilities.

The attack surface of your web applications evolves rapidly, changing every time you deploy new features, update existing ones, or expose new web APIs. You need a solution that can keep up.  FortiWeb is that solution.

Overview

In this course, you will learn about FortiWeb deployment, configuration, and management. You will learn how to set up server objects, define security policies, and implement HA.

his course covers protection against advanced threats using data validation, client-side security, and machine learning.

You will also explore API security, bot mitigation, and application delivery features such as URL rewriting, single sign-on, caching, and acceleration.

Additional topics include DoS prevention, logging, FortiAI integration, compliance standards (PCI DSS, OWASP), and basic troubleshooting.

Skills Covered

After completing this course, you will be able to:

  • Define web application firewall and describe its role in the network
  • Perform basic configuration and initial deployment
  • Configure FortiWeb for deployment in a load balanced network environment
  • Implement FortiWeb machine learning capabilities
  • Configure and customize FortiWeb signatures
  • Configure FortiWeb to protect against DoS and defacement attacks
  • Configure API protection and bot mitigation
  • Implement SSL/TLS encryption, including inspection and offloading
  • Configure user authentication and access control features
  • Configure FortiWeb to ensure PCI DSS compliance of your web applications
  • Configure FortiWeb to perform caching and compression tasks
  • Configure FortiWeb to perform HTTP content based routing, rewriting, and redirection
  • Perform basic troubleshooting of FortiWeb

Prerequisites

You must have an understanding of the topics covered in FCP – FortiGate Administrator, or have equivalent experience.

It is also recommended that you have an understanding of the following topics:

  • HTTP protocol
  • Basic knowledge of HTML, JavaScript, and server-side dynamic page languages, such as PHP

Target Audience

  • Security professionals involved in the management, configuration, administration, and monitoring of FortiWeb in small to large enterprise deployments should attend this course.

Course Curriculum

Course outline:

  • Introduction
  • Basic Setup
  • Web Application Security
  • API Discovery and Protection
  • Bot Mitigation
  • Application Delivery
  • Additional Configuration
  • Compliance
  • Troubleshooting

Dates & Locations

Let’s make it work for you

Can’t find a date that fits? Need to train your whole team? Looking for a discount?
Speak to one of our learning experts today.

There’s no intakes scheduled for this course at the moment!

For enquiries, please contact our reps.

Exam & Certification

Fortinet Certified Professional Cloud Security.

The FCP in Cloud Security certification validates your ability to secure public and private cloud applications by deploying, managing, and monitoring Fortinet application security products. This curriculum will cover the day-to-day tasks related to Fortinet application security devices and VMs.

Training & Certification Guide

Why train with Trainocate

Speak to a Training Consultant

All courses are HRD Claimable.
Get in touch with our team via the form or WhatsApp us on +6011-5119 6631

Preferred mode of training
Checkboxes