Course Objectives

After completing this course, you will be able to:

• Train your FortiDDoS to recognize your unique network patterns
• Choose the right FortiDDoS model
• Defend against both volumetric and mechanistic DDoS attacks
• Deploy FortiDDoS to protect both network appliances and servers
• Understand when to use detection and prevention modes
• Implement bypass or a high availability FortiDDoS cluster for maximum service uptime
• Detect connections from proxies
• Describe how the blocking periods and penalty factors intelligently determine which packets are dropped after an attack is detected
• Configure access control lists and blocklists
• Mitigate anomalies and SYN floods
• Understand the main characteristics of protection policies
• Characterize different types of attacks by using logs and statistics graphs
• Troubleshoot incorrect threshold levels

Pre-Requisites

You should have an understanding of the topics covered in the following courses, or have equivalent experience:

• NSE 4 FortiGate Security
• NSE 4 FortiGate Infrastructure