NSE 4
FortiOS Administrator
Part of NSE 4: FortiOS
Time allowed: 80–90 minutes. Language: English and Japanese. Product version: FortiOS 7.6.0.
Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by fortinet. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat fortinet's own certification portal as the source of truth and verify against it before you book anything.
Deployment and system configuration (20–25% of the exam)
1.01 Perform initial configuration
1.02 Configure log settings and diagnose problems using the logs
1.03 Configure FortiGate Clustering Protocol (FGCP) high-availability (HA) cluster
1.04 Diagnose resource and connectivity problems
1.05 Describe FortiGate Cloud-Native Firewall (CNF) and FortiGate VMs in the public cloud
1.06 Explain FortiSASE administration and user onboarding methods
Firewall policies and authentication (20–25% of the exam)
2.01 Configure firewall policies
2.02 Configure source network address translation (SNAT) and destination network address translation (DNAT) options in firewall policies
2.03 Configure different methods of firewall authentication
2.04 Explain how to deploy and configure Fortinet Single Sign-On (FSSO)
Content inspection (25–30% of the exam)
3.01 Explain and inspect encrypted traffic using certificates
3.02 Identify FortiGate inspection modes and configure web filtering
3.03 Configure application control to monitor and control network applications
3.04 Configure antivirus scanning modes to neutralize malware threats
3.05 Configure an intrusion prevention system (IPS) to protect a network from threats and vulnerabilities
Routing (10–15% of the exam)
4.01 Configure and route packets using static routes
4.02 Configure SD-WAN to load balance traffic between multiple WAN links effectively
VPNs (10–15% of the exam)
5.01 Implement a meshed or partially redundant IPsec VPN
Public sources, used in good faith
These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →