Course Overview
In this course, you will learn how to use all FortiAppSec Cloud modules, including Web Application Firewall, Advanced Bot Protection, Global Server Load Balancing, Client-Side Protection, and Threat Analytics. You will explore FortiAppSec Cloud Fortinet Security Fabric integrations and FortiAI. You will also learn how to monitor your web applications, protect them, and ensure their availability.
Who should attend
Security professionals involved in the design, implementation, and monitoring of web services to ensure their organization's web application security and availability should attend this course.
Certifications
This course is part of the following Certifications:
Prerequisites
- Basic understanding of web application security
- Basic understanding of load balancing
Course Objectives
After completing this course, you will be able to:
- Define the shared responsibility model
- Describe the FortiAppSec platform architecture
- Differentiate among licensing models
- Integrate your web application
- Configure DNS
- Restrict direct-to-IP traffic
- Implement DDoS protection
- Define web application firewall (WAF) security rules
- Explain OpenAPI validation
- Distinguish among the various API protections
- Configure machine-learning (ML) based API protection
- Manage unauthorized or high-risk scripts and domains
- Navigate the Client-Side Protection portal
- Differentiate between good, bad, and sophisticated bots
- Describe behavior-based detection and biometric attributes
- Explain AI-based threat detection
- Configure Advanced Bot Protection (ABP) applications
- Apply ABP protection features
- Integrate FortiAppSec Cloud ABP with the Fortinet Security Fabric
- Define core global server load balancing (GSLB) objects and components
- Onboard domains to GSLB
- Configure health checks
- Implement synthetic testing to monitor application availability globally
- Describe various load balancing methods
- Integrate FortiAppSec Cloud GSLB with the Security Fabric
- Explain threat analytics
- Describe FortiAI Assistant capabilities and limitations
- Gain threat insights using widgets
- Correlate security events with incidents
- Analyze threats using FortiAI
- Integrate FortiAppSec cloud threat analytics with the Security Fabric
- Configure log forwarding
Outline: FortiAppSec Cloud Administrator (FASCA)
- Platform Architecture and Onboarding
- Web Application Firewall and API Protection
- Advanced Bot Protection
- Global Server Load Balancing
- Threat Analytics