Security Operations

FT-FSOARA : FortiSOAR Analyst v7.6

Course Duration

3 Days

Delivery

ILT/VILT

Overview

Overview Course Curriculum Training Schedule Exam & Certification FAQs

In this course, you will learn how FortiSOAR helps organizations orchestrate and automate security operations, integrate security and network tools, and collaborate during incident handling. You will design playbooks that route decisions based on input data, automate enrichment and response actions, and support malicious indicator handling.

What You'll Learn

Describe SOAR, SIEM, automation, and orchestration
Describe modules, deployment models, and FortiSOAR device types
Navigate the FortiSOAR GUI
Customize navigation with the navigation editor
Describe the SOAR Framework solution pack
Describe templates, dashboards, and reports
Describe security management, role-based access, and teams
Describe FortiSOAR playbook triggers
Describe FortiSOAR playbook steps
Create a playbook
Ingest data from FortiSIEM
Create preprocessing rules
Describe Jinja and JSON, and how FortiSOAR uses them
Describe dynamic variables and values
Describe built-in functions
Design and publish a module
Export and import FortiSOAR entities
Configure dashboards
Configure widgets in templates
Apply operators to evaluate conditions
Demonstrate the JSON and YAQL query filters
Describe FortiSOAR incidents
Describe campaigns
Describe the MITRE ATT&CK Matrix for Enterprise
Describe incident phases on FortiSOAR
Describe the incident handling workflow on FortiSOAR
Configure shift and queue management
Configure war rooms
Troubleshoot common playbook issues
Troubleshoot common connector issues
Configure logging levels and log files for analysis
Describe API basics
Configure the FortiSOAR API
Configure FortiManager API integration with FortiSOAR
Describe FortiAI on FortiSOAR

Who Should Attend

SOC analysts responsible for developing playbooks; creating modules, templates, dashboards, and widgets; and performing incident handling with FortiSOAR should attend this course.

Prerequisites

You must have an understanding of the topics covered in the FortiOS Administrator course (or have equivalent experience).

It is also recommended that you have an understanding of the topics covered in the following courses, or have equivalent experience:

FortiManager Administrator
FortiSOAR Administrator
Basic familiarity with Python programming
Basic familiarity with the Jinja2 templating language
Basic familiarity with email security and SIEM technology

Learning Journey

Coming Soon...

Introduction to FortiSOAR
SOC Playbook Development
Jinja, Dynamic Variables, and Dynamic Values
Application Editor
Templates, Dashboards, and Widgets
Controlling Playbook Logic
Querying and Transforming Data
Incident Handling and FortiSOAR
Troubleshooting Playbooks and Connectors
Working With APIs

Frequently Asked Questions (FAQs)

Why get Fortinet certified?

Fortinet certifications validate your expertise in network security and your ability to implement and manage Fortinet's comprehensive Security Fabric.
These certifications are highly valued by employers and demonstrate your commitment to staying ahead of the ever-evolving threat landscape.
A Fortinet certification can open doors to new career opportunities, increase your earning potential, and make you a sought-after cybersecurity professional.
What to expect for the examination?

Fortinet offers a variety of certification exams at different levels (NSE 1 - 8) and specializations (security, cloud, cybersecurity).
Exams typically consist of multiple-choice and scenario-based questions that assess your knowledge and problem-solving skills in real-world security situations.
Depending on the level and specialization, you will be required to pass/complete the core and/or elective exam(s), while the expert tier has written and practical exam.
Note: Certification requirements and policies may be updated by Fortinet from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
How long is Fortinet certification valid for?

As of 1 October 2023, all Fortinet certifications have an expiration date:
NSE 1 - 4 (FCF, FCA, FCP, FCSS): Valid for two years.
NSE 5 - 8 (FCX): Valid for three years.
To maintain your certification, you must recertify before it expires. Recertification options include passing the same exam again or earning a higher-level certification.
Note: Certification requirements and policies may be updated by Fortinet from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.
Why take this course with Trainocate?

Here’s what sets us apart:
- Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 24 countries (and counting!).
- Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.
- Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.
- Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.
- Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.
- Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Training Schedule

Exam & Certification

FAQs

Frequently Asked Questions

Improve yourself and your career by taking this course.

Enroll Now

More Courses By Fortinet

Browse All Courses

Secure Networking

ft-nac : FortiNAC-F Administrator v7.6

In interactive labs, you will explore the administrative tasks necessary to achieve network visibility, control, and automated threat response. These fundamentals will provide you with a solid underst

ILT VILT

Course Duration 3 Days

Secure Networking

ft-fad : FortiADC Administrator v7.6

In interactive labs, candidates will explore Layer 4 and Layer 7 server load balancing, link load balancing, global load balancing, high availability, firewall policies, advanced routing, and more. Th

ILT VILT

Course Duration 1 Day

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name*

Email*

Phone*

I'm inquiring for

Myself

Company

Inquiry Details

Captcha is required.

By submitting this form, you consent to Trainocate processing your data to respond to your inquiry and provide you with relevant information about our training programs, including occasional emails with the latest news, exclusive events, and special offers.

You can unsubscribe from our marketing emails at any time. Our data handling practices are in accordance with our Privacy Policy.