NSE 7

Secure Networking Architect

Part of NSE 7: Secure Networking

Targets: FortiGate 7.6, FortiManager 7.6, FortiAnalyzer 7.6
Format: 40–50 questions
Time limit: 70 minutes
Pass mark: Pass or fail. A score report is available from your Pearson VUE account.
Exam fee: See Pearson VUE for current pricing
Blueprint source: Fortinet NSE Certification Program, effective 15 July 2026 ↗

Time allowed: 60–70 minutes. Language: English. Product version: FortiGate 7.6, FortiManager 7.6, FortiAnalyzer 7.6.

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by fortinet. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat fortinet's own certification portal as the source of truth and verify against it before you book anything.

System configuration and SD-WAN setup (20–30% of the exam)

1.01 Implement the Fortinet Security Fabric
On this site: FortiGate Firewall Policies and NAT: Matching Order, SNAT, and DNAT
1.02 Configure different operation modes for a high availability (HA) cluster
On this site: FortiGate FGCP High Availability: Active-Passive, Active-Active, and Failover
Tools: fortigate-ha-failover-simulator
1.03 Implement enterprise networks using VLANs and VDOMs
On this site: FortiGate Initial Configuration: Factory State, Access, and Operation Modes, FortiSwitch VLANs, Spanning Tree, Ports, and QoS
1.04 Deploy an enterprise SD-WAN setup
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer

Central management (15–25% of the exam)

2.01 Implement branch configuration deployments
On this site: FortiManager Policy Packages, Installs, and Workspace Mode
2.02 Use SD-WAN Manager and overlay orchestration
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer

Security profiles (5–15% of the exam)

3.01 Manage SSL/SSH inspection profiles
On this site: FortiGate SSL Inspection: Certificate vs Deep Inspection, FortiGate Security Profiles: Antivirus, IPS, and Application Control
Tools: fortigate-security-profile-coverage-checker
3.02 Use a combination of web filtering, application control, intrusion prevention system (IPS), and Internet Service Database (ISDB) to secure the network
On this site: FortiGate Security Profiles: Antivirus, IPS, and Application Control
Tools: fortigate-security-profile-coverage-checker

Rules and routing (25–35% of the exam)

4.01 Implement OSPF to route enterprise traffic
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
4.02 Implement BGP to route enterprise traffic
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
4.03 Design SD-WAN rules
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer
4.04 Configure SD-WAN routing
On this site: FortiGate Routing and SD-WAN: Route Selection Order and Rule Evaluation
Tools: fortigate-route-selection-explainer

Advanced IPsec (25–35% of the exam)

5.01 Implement IPsec VPN IKE version 2
On this site: FortiGate IPsec VPN: Phase 1, Phase 2, and Redundant Topologies
Tools: fortigate-ipsec-phase-mismatch-analyzer
5.02 Configure IPsec multihub, multiregion, and large deployments
On this site: FortiGate IPsec VPN: Phase 1, Phase 2, and Redundant Topologies
Tools: fortigate-ipsec-phase-mismatch-analyzer
5.03 Implement ADVPN to enable on-demand VPN tunnels between sites
On this site: FortiGate IPsec VPN: Phase 1, Phase 2, and Redundant Topologies
Tools: fortigate-ipsec-phase-mismatch-analyzer

Public sources, used in good faith

These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →