NSE 8
NSE 8 Secure Networking Practical Exam
Part of NSE 8
Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by fortinet. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat fortinet's own certification portal as the source of truth and verify against it before you book anything.
Note on this blueprint: Fortinet's own exam page publishes a Tasks column whose entries are truncated or blank, so the objectives below are transcribed from the Details column beside them, grouped under the published section headings and weightings. Verified against a fresh fetch.
Secure SD-WAN (25% of the exam)
1.01 4G/5G last-option links
Article coming1.02 Advanced auto-discovery VPN (ADVPN)
1.03 Advanced IPsec troubleshooting
1.04 ADVPN 2.0 versus legacy
1.05 Application-based routing
1.06 Bandwidth aggregation
1.07 BGP multipath
1.08 Software-defined branch (SD-Branch) deployment
1.09 Dynamic BGP
1.10 Dynamic QoS
1.11 Forward error correction (FEC)
1.12 Full mesh overlay networks
1.13 Load balancing and redundancy
1.14 Mean opinion score (MOS)
1.15 Performance monitoring
1.16 Performance SLAs and service rules
1.17 Policy-based routing (PBR)
1.18 Remote health signaling from spokes to hub
1.19 Remote health signaling to third-party devices
1.20 Route monitoring and triaging
1.21 SD-WAN interfaces
1.22 Self-healing with BGP
1.23 Single hub and dual hub
1.24 SLA probe Differentiated Services Code Point (DSCP) marking
1.25 Virtual routing and forwarding (VRF)
1.26 Central VPN
1.27 Jinja2 templates
1.28 Overlay Orchestrator
1.29 Variables
1.30 FortiManager zero-touch provisioning (ZTP)
1.31 Jinja scripting
1.32 Templates
Endpoint security (20% of the exam)
2.01 ZTNA profiles
2.02 Agentless portal on FortiGate
2.03 Zero-trust tags
2.04 ZTNA access proxy—HTTP/HTTPS
2.05 ZTNA TCP proxy
2.06 Endpoint malware protection
2.07 Anti-exploit
2.08 Antiransomware
2.09 FortiClient
2.10 FortiClient EMS high availability (HA)
2.11 FortiClient EMS integration
2.12 Quarantine
2.13 Sandbox integration
Threat mitigation (30% of the exam)
3.01 Custom intrusion prevention system (IPS) signatures
3.02 DDoS
3.03 Deep traffic inspection
3.04 FortiGuard
3.05 Inline integration
3.06 Sandbox detection
3.07 FortiSandbox HA
3.08 Sniffer integration
3.09 Threat feed integration
3.10 Vulnerability scan
3.11 Cloud access security broker (CASB)
3.12 Carrier-grade network address translation (CGNAT)
On this site: Carrier-Scale NAT, MAP-E, Domain Fronting, and WCCP3.13 Domain fronting protection
On this site: Carrier-Scale NAT, MAP-E, Domain Fronting, and WCCP3.14 Fabric integrations
3.15 Inspection modes
3.16 IPv6
3.17 Operational technology (OT) security
3.18 Policy modes
3.19 Proxy rules
3.20 Security profiles
3.21 Transparent mode
Enterprise networking (25% of the exam)
4.01 Internet of Things (IoT)
Article coming4.02 Switching concepts
4.03 FortiLink
4.04 FortiNAC fabric integration
4.05 FortiNAC HA
4.06 Endpoint solutions
4.07 Network services
4.08 Policies and objects
4.09 Asymmetric routing
4.10 Enhanced MAC Virtual Local Area Network (EMAC VLAN)
4.11 Explicit proxy
4.12 Inter-VDOM routing
4.13 IPv6
4.14 LAN extension
4.15 Local-in policies
4.16 Local-out routing
4.17 Mapping of Address and Port with Encapsulation (MAP-E)
On this site: Carrier-Scale NAT, MAP-E, Domain Fronting, and WCCP4.18 Network address translation (NAT)
4.19 QoS
4.20 Route leaking
4.21 Traffic shaping
4.22 Interface-based shaping
4.23 Transparent mode
4.24 Transparent proxy
4.25 VLANs
4.26 VRF routing
4.27 Virtual eXtensible LAN (VXLAN)
4.28 VXLAN over IPsec
4.29 VLAN inside VXLAN
4.30 Zones
Public sources, used in good faith
These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →