fr
en
Fortinet® NSE 5 - FortiWeb Administrator: administering a web application firewall
Your networks need protection rules that reflect how they are used. Structure FortiWeb security configurations and examine traffic to control access more effectively. Strengthen your ability to prepare interventions and address areas requiring attention.
- Duration
- 3 days 21 hours
- Code
- NSE5-3FR Code
- Certification
- Fortinet Certified Associate Certification
Accredited training for the Fortinet Certified Associate certification.
Presentation
Business web applications remain a prime target for attackers, exposed to injection attacks, data theft and attempts to bypass authentication. Fortinet FortiWeb is among the most widely deployed enterprise web application firewalls, and NSE 5 certification validates sought-after expertise in this area.
This 3-day course covers the 4 official Fortinet syllabus domains: deployment and configuration, web application and API security, application delivery optimisation, and compliance and troubleshooting. Each module combines methodological instruction with official Fortinet labs on real FortiWeb environments.
By the end of the course, you will be able to administer an enterprise FortiWeb environment comprehensively and be ready to take the official Fortinet NSE 5 - FortiWeb Administrator exam, included in our offer. It enables you to obtain NSE 5 Cloud Security certification (see the certification tab for details).
Objectives
By the end of this FortiWeb Administrator course, you will be able to:
- deploy and configure FortiWeb, server objects, policies and SSL inspection in a high availability environment;
- apply web application security, configure API discovery and protection, and implement botnet mitigation;
- optimise application delivery and implement denial-of-service protection, logging and FortiAI;
- diagnose deployment and system issues and perform web vulnerability scans for compliance;
- prepare for and pass the Fortinet NSE 5 FortiWeb Administrator certification exam.
Program
Module 1: Deploying and configuring FortiWeb
- FortiWeb deployment and basic administration principles in web environments.
- Configuring server objects and application protection policies.
- SSL inspection, SSL offloading and high availability (HA).
Practical exercises
- Deploy a FortiWeb server and configure a high availability cluster.
Module 2: Securing web applications and APIs against botnets
- Applying security mechanisms to protect web applications against common threats.
- Configuring discovery and protection for exposed APIs.
- Implementing mitigation for botnets and malicious automated behaviour.
Practical exercises
- Configure an API protection policy and enable botnet mitigation in a test environment.
Module 3: Optimising application delivery
- Optimising web application delivery for performance and availability.
- Implementing denial-of-service (DoS) protection and managing logs.
- Integrating FortiAI to strengthen application threat detection.
Practical exercises
- Configure a DoS protection policy and enable FortiAI capabilities on FortiWeb.
Module 4: Ensuring compliance and troubleshooting
- Diagnosing deployment issues and FortiWeb system incidents.
- Performing web vulnerability scans to validate application compliance.
- Resolving false positives and tuning application security policies.
Practical exercises
- Run a full vulnerability scan and resolve identified false positives.
Audience
This course is for professionals responsible for enterprise web application security, including:
- application security administrators who deploy, configure and maintain FortiWeb solutions in production;
- systems and network engineers involved in protecting application servers against web threats;
- developers and DevOps managers seeking to secure the APIs and applications they deploy;
- support technicians responsible for diagnosing and resolving FortiWeb incidents;
- cybersecurity consultants seeking certification of their Fortinet application security skills.
Prerequisites
The following prerequisites apply:
- Theoretical background: completion of Fortinet NSE 4 - FortiGate Administrator FortiOS training or equivalent knowledge of FortiGate firewall administration.
- Technical skills: a command of HTTP fundamentals and basic knowledge of HTML, JavaScript and dynamic server-side languages such as PHP.
- Language skills: the ability to read and understand English to use the official materials and take the Fortinet NSE 5 - FortiWeb Administrator exam.
Teaching and assessment methods
- Initial skills assessment
- Training materials provided to participants
- Continuous assessment throughout the course
- End-of-course feedback questionnaire
- Combination of theory and practical application
- Attendance records
- Post-course follow-up evaluation
- Practical exercises
Course highlights
- Aligned with the official syllabus: content follows the 4 exact domains of the Fortinet NSE 5 FortiWeb Administrator exam for focused preparation.
- Practical labs in real environments: work with genuine FortiWeb equipment throughout the 3 days to consolidate each technical skill.
- Certification included: the Fortinet NSE 5 FortiWeb Administrator exam is included at no additional cost and is available in English and Japanese.
- Stronger employability: gain market-recognised expertise you can apply directly to securing enterprise web applications.
Dates and sessions
Choose the date and delivery format that suit you.
No upcoming sessions are currently available.
Fortinet®, FortiWeb® and FortiGate® are registered trade marks of Fortinet, Inc. Their use for educational purposes does not constitute an endorsement or partnership.