دوره جامع فورتی‌گیت – سطح 2 (معماری و تحلیل‌گری امنیت)

مدت: ۶۰ ساعت

پیش‌نیاز

FCF, FCA & FCP Basic

سرفصل‌ها

1 Packet Flow & Processing Engine

End-to-End Packet Flow (Ingress → Egress)
Policy Lookup & Session Creation
NAT Processing Order
Fast Path vs Slow Path
Flow-based vs Proxy-based

2 Advanced Routing

OSPF (Multi-Area Design)
BGP (eBGP / iBGP / Route Reflector)
Route Redistribution
Route Maps & Filtering
ECMP
Policy-Based Routing (PBR)
Asymmetric Routing Analysis

3 VPN Architecture & IPsec Deep Dive

Site-to-Site Design (Hub-Spoke / Mesh)
Route-based vs Policy-based
IKEv1 / IKEv2
Phase1 / Phase2 (Selectors)
Encryption & Authentication

4 Routing over VPN

Static over IPsec
BGP over IPsec
Route Advertisement
Asymmetric Routing over VPN

5 Advanced VPN

ADVPN (Auto-Discovery VPN)
Dynamic Mesh / Shortcut Tunnels
Multi-Hub Design
Dynamic Path Selection

6 SD-WAN Architecture

Virtual WAN Link
Underlay vs Overlay
Member Interfaces
SLA / Health Check

7 SD-WAN Decision Engine

Latency / Jitter / Packet Loss
Path Selection Logic
Load Balancing vs Priority
Traffic Steering

8 SD-WAN Advanced

Application-aware Routing
Link Quality Adaptation
WAN Optimization Logic
Hybrid WAN Design

9 SD-WAN + VPN Integration

SD-WAN over IPsec
VPN Failover
Overlay Path Selection
Multi-Path Routing

10 High Availability (HA Deep)

Active / Passive
Active / Active
Session Synchronization
Failover Behavior
HA Interfaces & Heartbeat
Split Brain Analysis

11 Advanced Security Engine

IPS Deep Analysis
DoS Policy Advanced
Botnet Protection
Application Control Deep
SSL Deep Inspection

12 Performance & Hardware

NP Offloading
CP Processing
Session Acceleration
CPU / Memory Analysis
Session Exhaustion
SSL Inspection Impact

13 Logging, Forensics & Correlation

Log Correlation
Traffic Analysis
Attack Pattern Detection
Incident Analysis

14 Advanced Troubleshooting

Debug Flow Deep
Diagnose Commands
Packet Capture (Sniffer)
Session Table Analysis
Root Cause Analysis

15 Troubleshooting Methodology

Identify → Isolate → Analyze → Fix → Validate
Symptom vs Root Cause
Layer-based Troubleshooting

16 Design & Architecture (FCX-Level)

Enterprise Network Design
Segmentation Strategy
Trust vs Untrust
Traffic Flow Design
Security Placement
Multi-VDOM Design

17 Identity & Advanced Access

LDAP / Active Directory
RADIUS / SSO
Identity-based Policies
Group-based Access

18 Load Balancing & Virtual Server

Virtual Server (VIP)
Load Balancing Algorithms
Persistence (Session Stickiness)
Health Check

19 Real-World Failure Scenarios

VPN Failure (Phase1 / Phase2)
Routing Loop
NAT Conflict
HA Failure
SD-WAN Wrong Path
High CPU / Session Exhaustion
SSL Inspection Break
DNS Failure
Asymmetric Routing

درباره دوره

دوره Fortinet Advanced Security Specialist & Expert (FCP Advanced, FCSS & FCX - NSE 5-7) یک مسیر پیشرفته و عملی برای متخصصان شبکه و امنیت است که می‌خوان فراتر از کانفیگ‌های معمولی، وارد دنیای تحلیل، طراحی و Troubleshooting حرفه‌ای بشن. در این دوره، مباحثی مثل Advanced Routing، SD-WAN، VPN، High Availability، SSL Inspection و Debugging واقعی به‌صورت سناریومحور آموزش داده می‌شه.

تمرکز اصلی دوره روی درک عمیق رفتار شبکه، تحلیل مشکلات واقعی و پیاده‌سازی امنیت در سطح Enterprise است تا بتونید شبکه‌های حرفه‌ای رو طراحی، مدیریت و ایمن‌سازی کنید.