NSE 7

SASE Architect

Part of NSE 7: SASE

Targets: FortiSASE 26, FortiOS 7.4 and 7.6
Format: 40–50 questions
Time limit: 80 minutes
Pass mark: Pass or fail. A score report is available from your Pearson VUE account.
Exam fee: See Pearson VUE for current pricing
Blueprint source: Fortinet NSE Certification Program, effective 15 July 2026 ↗

Time allowed: 70–80 minutes. Language: English. Product version: FortiSASE 26, FortiOS 7.4 and 7.6.

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by fortinet. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat fortinet's own certification portal as the source of truth and verify against it before you book anything.

SD-WAN architecture and deployment (10–20% of the exam)

1.01 Design enterprise SD-WAN architectures
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
1.02 Deploy SD-WAN infrastructure
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
1.03 Implement SD-WAN performance controls
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer

SD-WAN traffic control and IPsec (20–30% of the exam)

2.01 Design SD-WAN rules
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
2.02 Configure SD-WAN routing
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
2.03 Deploy advanced IPsec for SD-WAN
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation, FortiGate IPsec VPN: Phase 1, Phase 2, and Redundant Topologies
Tools: fortigate-route-selection-explainer, fortigate-ipsec-phase-mismatch-analyzer

FortiSASE architecture and integration (15–25% of the exam)

3.01 Evaluate FortiSASE components in advanced deployment scenarios
On this site: FortiGate in the Cloud and FortiSASE: Deployment Models and Onboarding
3.02 Integrate FortiSASE into hybrid networks
On this site: FortiGate in the Cloud and FortiSASE: Deployment Models and Onboarding
3.03 Integrate SD-WAN and FortiSASE workflows
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation, FortiGate in the Cloud and FortiSASE: Deployment Models and Onboarding
Tools: fortigate-route-selection-explainer

FortiSASE deployment and secure access (20–30% of the exam)

4.01 Deploy FortiSASE access and onboarding
On this site: FortiGate in the Cloud and FortiSASE: Deployment Models and Onboarding
4.02 Configure endpoint posture and access control
On this site: FortiClient EMS: Endpoint Security, Quarantine, ZTNA, and Diagnosing Endpoints, FortiSASE Operations: Onboarding Users, Endpoint Posture, and Reading the Reports
4.03 Deploy cloud-delivered secure services
On this site: FortiGate in the Cloud and FortiSASE: Deployment Models and Onboarding, FortiSASE Operations: Onboarding Users, Endpoint Posture, and Reading the Reports

Centralized management, visibility and troubleshooting (10–20% of the exam)

5.01 Centrally manage FortiSASE and SD-WAN deployments
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation, FortiGate in the Cloud and FortiSASE: Deployment Models and Onboarding
Tools: fortigate-route-selection-explainer
5.02 Analyze traffic and security logs
On this site: FortiSASE Operations: Onboarding Users, Endpoint Posture, and Reading the Reports, FortiAnalyzer Reports: Datasets, Charts, and Why a Report Comes Back Empty
5.03 Troubleshoot connectivity and policy behavior
On this site: Reading a FortiGate Packet Sniffer Trace
Tools: fortios-sniffer-builder

Public sources, used in good faith

These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →